 Spencer McIntyre
|
6d966dbbcf
|
Land #4203, @jvazquez-r7's cleanup for java_rmi_server
|
2014-12-31 11:25:19 -05:00 |
|
|
sinn3r
|
48919eadb6
|
Land #4444 - i-FTP BoF
|
2014-12-30 12:38:28 -06:00 |
|
|
Christian Mehlmauer
|
96fe693c54
|
update drupal regex
|
2014-12-30 09:12:39 +01:00 |
|
|
jvazquez-r7
|
d2af956b16
|
Do minor cleanups
|
2014-12-29 10:39:51 -06:00 |
|
|
jvazquez-r7
|
9f98fd4d87
|
Info leak webapp ROOT so we can cleanup
|
2014-12-27 08:47:51 -06:00 |
|
|
jvazquez-r7
|
5afd2d7f4b
|
Add module for ZDI-14-410
|
2014-12-26 20:40:28 -06:00 |
|
|
jvazquez-r7
|
655cfdd416
|
Land #4321, @wchen-r7's fixes #4246 ms01_026_dbldecode undef method
|
2014-12-26 12:48:29 -06:00 |
|
|
Jon Hart
|
51049152b6
|
Use Rex::Text.rand_mail_address for more realistic fake commit
|
2014-12-26 10:39:52 -08:00 |
|
|
jvazquez-r7
|
c1b0385a4b
|
Land #4460, @Meatballs1's ssl cert validation bypass on powershell web delivery
|
2014-12-26 12:07:45 -06:00 |
|
|
jvazquez-r7
|
2bed52dcd5
|
Land #4459, @bcoles's ProjectSend Arbitrary File Upload module
|
2014-12-26 11:28:42 -06:00 |
|
|
jvazquez-r7
|
b5b0be9001
|
Do minor cleanup
|
2014-12-26 11:24:02 -06:00 |
|
|
jvazquez-r7
|
121c0406e9
|
Beautify restart_command creation
|
2014-12-24 15:52:15 -06:00 |
|
|
jvazquez-r7
|
43ec8871bc
|
Do minor c code cleanup
|
2014-12-24 15:45:38 -06:00 |
|
|
jvazquez-r7
|
92113a61ce
|
Check payload
|
2014-12-24 15:43:49 -06:00 |
|
|
jvazquez-r7
|
36ac0e6279
|
Clean get_restart_commands
|
2014-12-24 14:55:18 -06:00 |
|
|
jvazquez-r7
|
92b3505119
|
Clean exploit method
|
2014-12-24 14:49:19 -06:00 |
|
|
jvazquez-r7
|
9c4d892f5e
|
Use single quotes when possible
|
2014-12-24 14:37:39 -06:00 |
|
|
jvazquez-r7
|
bbbb917728
|
Do style cleaning on metadata
|
2014-12-24 14:35:35 -06:00 |
|
|
jvazquez-r7
|
af24e03879
|
Update from upstream
|
2014-12-24 14:25:25 -06:00 |
|
|
Gabor Seljan
|
0b85a81b01
|
Use REXML to generate exploit file
|
2014-12-24 19:23:28 +01:00 |
|
|
Jon Hart
|
a692656ab7
|
Update comments to reflect reality, minor cleanup
|
2014-12-23 19:09:45 -08:00 |
|
|
jvazquez-r7
|
ebb05a64ea
|
Land #4357, @Meatballs1 Kerberos Support for current_user_psexec
|
2014-12-23 20:38:31 -06:00 |
|
|
Jon Hart
|
59f75709ea
|
Print out malicious URLs that will be used by default
|
2014-12-23 10:10:31 -08:00 |
|
|
Jon Hart
|
905f483915
|
Remove unused and commented URIPATH
|
2014-12-23 09:40:27 -08:00 |
|
|
Jon Hart
|
8e57688f04
|
Use random URIs by default, different method for enabling/disabling Git/Mercurial
|
2014-12-23 09:39:39 -08:00 |
|
|
Jon Hart
|
bd3dc8a5e7
|
Use fail_with rather than fail
|
2014-12-23 08:20:03 -08:00 |
|
|
Jon Hart
|
015b96a24a
|
Add back perl and bash related payloads since Windows git will have these and OS X should
|
2014-12-23 08:13:00 -08:00 |
|
|
Meatballs
|
16302f752e
|
Enable generic command
|
2014-12-23 14:22:26 +00:00 |
|
|
Meatballs
|
a3b0b9de62
|
Configure module to target bash by default
|
2014-12-23 14:19:51 +00:00 |
|
|
Meatballs
|
313d6cc2f8
|
Add super call
|
2014-12-23 14:12:47 +00:00 |
|
|
Meatballs
|
43221d4cb0
|
Remove redundant debugging stuff
|
2014-12-23 14:09:12 +00:00 |
|
|
Meatballs
|
42a10d6d50
|
Add Powershell target
|
2014-12-23 14:07:57 +00:00 |
|
|
Meatballs
|
40c1fb814e
|
one line if statement
|
2014-12-23 11:20:24 +00:00 |
|
|
Meatballs
|
b41e259252
|
Move it to a common method
|
2014-12-23 11:16:07 +00:00 |
|
|
Brendan Coles
|
5c82b8a827
|
Add ProjectSend Arbitrary File Upload module
|
2014-12-23 10:53:03 +00:00 |
|
|
Jon Hart
|
abec7c206b
|
Update description to describe current limitations
|
2014-12-22 20:32:45 -08:00 |
|
|
Jon Hart
|
1505588bf6
|
Rename the file to reflect what it really is
|
2014-12-22 20:27:40 -08:00 |
|
|
Jon Hart
|
ff440ed5a4
|
Describe vulns in more detail, add more URLs
|
2014-12-22 20:20:48 -08:00 |
|
|
Jon Hart
|
b4f6d984dc
|
Minor style cleanup
|
2014-12-22 17:51:35 -08:00 |
|
|
Jon Hart
|
421fc20964
|
Partial mercurial support. Still need to implement bundle format
|
2014-12-22 17:44:14 -08:00 |
|
|
Jon Hart
|
fdd1d085ff
|
Don't encode the payload because this only complicates OS X
|
2014-12-22 13:36:38 -08:00 |
|
|
Joe Vennix
|
0bf3a9cd55
|
Fix duplicate :ua_maxver key.
|
2014-12-22 14:57:44 -06:00 |
|
|
Jon Hart
|
ea9f5ed6ca
|
Minor cleanup
|
2014-12-22 12:16:53 -08:00 |
|
|
Jon Hart
|
dd73424bd1
|
Don't link to unused repositories
|
2014-12-22 12:04:55 -08:00 |
|
|
Jon Hart
|
6c8cecf895
|
Make git/mercurial support toggle-able, default mercurial to off
|
2014-12-22 11:36:50 -08:00 |
|
|
Jon Hart
|
574d3624a7
|
Clean up setup_git verbose printing
|
2014-12-22 11:09:08 -08:00 |
|
|
Jon Hart
|
16543012d7
|
Correct planted clone commands
|
2014-12-22 10:56:33 -08:00 |
|
|
Jon Hart
|
01055cd41e
|
Use a trigger to try to only start a handler after the malicious file has been requested
|
2014-12-22 10:43:54 -08:00 |
|
|
Jon Hart
|
3bcd67ec2e
|
Unique URLs for public repo page and malicious git/mercurial repos
|
2014-12-22 10:03:30 -08:00 |
|
|
Jon Hart
|
308eea0c2c
|
Make malicious hook file name be customizable
|
2014-12-22 08:28:55 -08:00 |
|