6468eb51b2
Do changes to have into account powershell sesions are not cmd sessions
2015-10-02 15:26:42 -05:00
5eff3e5637
Removed hard tabs
2015-10-02 14:34:00 -04:00
4ee7ba05aa
Removing hard tabs test
2015-10-02 14:31:46 -04:00
6406a66bc0
Remove Ranking
2015-10-02 14:24:46 -04:00
9f71fd9bfd
Formatting ZPanel Exploit
2015-10-02 14:23:07 -04:00
89a50c20d0
Added Zpanel Exploit
2015-10-02 13:29:53 -04:00
a773627d26
Land #5946 , simple_backdoors_exec module
2015-10-02 11:18:29 -05:00
5b8f98ee06
Land #6022 , zemra_panel_rce module
2015-10-02 11:18:09 -05:00
659a09f7d2
Create manageengine_sd_uploader.rb
2015-10-02 16:04:05 +01:00
1f26ec1252
Land #6018 , @pedrib's module for Kaseya VSA ZDI-15-448
2015-10-02 08:58:43 -05:00
75d2a24a0a
Land #6019 , @pedrib's Kaseya VSA ZDI-15-449 exploit
2015-10-02 08:51:28 -05:00
d334dc237f
Update kaseya_master_admin.rb
2015-10-02 13:21:28 +01:00
cbbeef0f53
Update kaseya_uploader.rb
2015-10-02 13:20:59 +01:00
33916997a4
Update zemra_panel_rce.rb
...
revised the name and the description
2015-10-02 09:49:59 +08:00
fa1391de87
Update simple_backdoors_exec.rb
...
Updating the code as suggested
2015-10-02 07:53:15 +08:00
501325d9f4
Update zemra_panel_rce.rb
2015-10-02 06:48:34 +08:00
55f6fe7037
Land #5510 , update x86/alpha* encoders to be SaveRegister aware
2015-10-01 15:07:10 -05:00
d551f421f8
Land #5799 , refactor WinSCP module and library code to be more useful and flexible
2015-10-01 14:35:10 -05:00
1b21cd9481
Do code cleanup
2015-10-01 13:37:18 -05:00
a88a6c5580
Add WebPges to the paths
2015-10-01 13:22:56 -05:00
f9a9a45cf8
Do code cleanup
2015-10-01 13:20:40 -05:00
5f590b8c2e
Land #6032 , @h0ng10 adds reference to java_jmx_server
2015-10-01 13:07:08 -05:00
30101153fa
Remove spaces
2015-10-01 18:56:37 +02:00
c35e99664e
Land #6003 , @earthquake's x86-64 pushq signedness error fixed
2015-10-01 11:52:28 -05:00
aa01383361
Fix comment
2015-10-01 11:51:45 -05:00
41cf0ef676
Add reference for CVE-2015-2342 - VMWare VCenter JMX RMI RCE
2015-10-01 18:43:21 +02:00
195418b262
Update the sin_family on bind_tcp_small
2015-10-01 11:22:59 -05:00
2802b3ca43
Update zemra_panel_rce.rb
...
sticking res
2015-10-02 00:00:30 +08:00
2ab779ad3d
Land #6010 , capture_sendto fixes
2015-10-01 10:54:24 -05:00
5c5f3a4e7f
Update zemra_panel_rce.rb
...
called http_send_command right away :)
2015-10-01 23:39:36 +08:00
0bacb3db67
Land #6029 , Win10 support for bypassuac_injection
2015-10-01 10:17:34 -05:00
77ce7ef5f0
Save 3 more bytes on shell_bind_ipv6_tcp
2015-10-01 09:45:02 -05:00
4efb3bf26c
Save 3 more bytes on shell_bind_tcp_small
2015-10-01 09:42:35 -05:00
04879ed752
Save two bytes on shell_bind_ipv6_tcp
2015-10-01 09:33:22 -05:00
88eecca4b1
Save two bytes on shell_bind_tcp_small
2015-10-01 09:29:39 -05:00
66560d5339
Update zemra_panel_rce.rb
2015-10-01 19:16:23 +08:00
2e2d27d53a
Land #5935 , final creds refactor
2015-10-01 00:25:14 -05:00
8866b15f3b
Fix creds reporting
2015-10-01 00:24:43 -05:00
494b9cf75f
Clean up module
...
Prefer TARGETURI and full_uri.
2015-09-30 22:37:03 -05:00
7451cf390c
Add Windows 10 "support" to bypassuac_injection
2015-10-01 11:16:18 +10:00
2e5999a119
Missed colon for output standardization
2015-09-30 16:41:46 -04:00
3d41b4046c
Standardize output and include full uri
2015-09-30 16:33:15 -04:00
1bfa087518
Add IP to testing results
...
When specifying multiple hosts the resulting output is useless because you don't know which bypass goes to what IP address
2015-09-30 15:22:24 -04:00
a7fa939fda
Zemra Botnet C2 Web Panel Remote Code Execution
...
This module exploits the C2 web panel of Zemra Botnet which contains a backdoor inside its leaked source code. Zemra is a crimeware bot that can be used to conduct DDoS attacks and is detected by Symantec as Backdoor.Zemra.
2015-09-30 19:24:21 +08:00
2de6c77fa2
Update simple_backdoors_exec.rb
2015-09-30 18:11:05 +08:00
47c79071eb
fix indention and typo
2015-09-29 22:41:36 -04:00
f18e1d69a1
Add x64 ret address and add to buffer
2015-09-29 22:36:30 -04:00
54f9a3b25a
Land #6013 , add mainframe as a platform and architecture
2015-09-29 13:28:23 -05:00
61c922c24d
Create kaseya_uploader.rb
2015-09-29 11:56:34 +01:00
8af5a8e310
Create exploit for Kaseya privilege escalation
2015-09-29 11:51:21 +01:00
jvazquez-r7