4a9a15e638
Run Rubocop layout rules on modules
2021-08-27 17:19:43 +01:00
0a06730802
Update contributors
2021-08-19 10:30:21 -05:00
84f8c44e69
Write to the targeted backend server
2021-08-18 12:34:40 -04:00
75e63992d6
Write an exploit for ProxyShell
2021-08-18 10:50:34 -04:00
6fbaecf919
Backport print changes to recent modules
2021-07-08 21:26:35 -05:00
62f9d15ba3
Land #15314 , Add Exploit for CVE-2021-31181 (SharePoint RCE)
2021-06-16 10:39:49 -05:00
d1be69eae6
Implement changes based on PR feedback
2021-06-14 10:15:27 -04:00
edee95bbb2
Update the check to not fail if a COOKIE is used
2021-06-10 11:29:07 -04:00
1858b574ec
Land #15305 , Authenticated RCE module for NSClient++
2021-06-09 15:38:34 +01:00
c7b7b871c9
missing variable e for rescue
2021-06-09 11:13:39 +02:00
674eb51f86
add scenario + small changes
2021-06-09 08:59:35 +02:00
3afe3ebfa3
Add the module docs
2021-06-08 15:23:24 -04:00
325ecfedff
Add some error handling while extracting the key
2021-06-08 14:58:58 -04:00
dc40cddb04
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2021-06-08 16:38:01 +02:00
d2bf8ae912
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2021-06-08 16:34:40 +02:00
2df710158e
conflict fixed
2021-06-08 15:29:38 +02:00
31515faccb
various changes
2021-06-08 15:26:50 +02:00
ce0c699213
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2021-06-08 15:11:25 +02:00
1f2f04b0d0
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2021-06-08 15:10:08 +02:00
cf5848ab3e
add comment for second token generation
2021-06-08 14:31:03 +02:00
9e0b7cb171
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: agalway-r7 <agalway@rapid7.com >
2021-06-08 14:21:04 +02:00
21bfa629d0
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: agalway-r7 <agalway@rapid7.com >
2021-06-08 14:20:52 +02:00
38c63a6966
Update modules/exploits/windows/http/nscp_authenticated_rce.rb
...
Co-authored-by: agalway-r7 <agalway@rapid7.com >
2021-06-08 14:20:32 +02:00
e9305dc622
rubocop ok
2021-06-08 09:32:51 +02:00
64077e1395
Add and use a new sharepoint mixin
2021-06-07 15:25:07 -04:00
8cc220ccbc
Initial commit of CVE-2021-31181
2021-06-07 13:37:28 -04:00
bf96b88446
add default port + set ssl to true
2021-06-07 16:48:16 +02:00
212039fa6b
rubocop ok
2021-06-07 16:30:42 +02:00
6a7e30749d
initial commit
2021-06-07 14:39:10 +02:00
6498554084
Clean up NetMotion Mobility exploit and docs
...
Refactor target selection once again.
2021-06-02 23:47:01 -05:00
aad4ea8e09
Add check
...
Thanks to @adfoster-r7 for the round of golf!
2021-05-17 13:58:03 -05:00
47740c8ac3
Add NetMotion Mobility CVE-2021-26914 exploit
2021-05-17 13:58:03 -05:00
100da2f1b1
Enforce Style/RedundantBegin for new modules
2021-05-13 04:01:03 +01:00
54dbedf181
URI.escape is obsolete and needs to be updated
...
The current code results in the following error :
```
[*] Started reverse TCP handler on 192.168.1.105:4444
[*] Using URL: http://0.0.0.0:8080/o6wYorU
[*] Local IP: http://192.168.1.105:8080/o6wYorU
[*] Server started.
[*] Sending a malicious request to /
/usr/share/metasploit-framework/modules/exploits/windows/http/rejetto_hfs_exec.rb:110: warning: URI.escape is obsolete
/usr/share/metasploit-framework/modules/exploits/windows/http/rejetto_hfs_exec.rb:110: warning: URI.escape is obsolete
[*] Server stopped.
[!] This exploit may require manual cleanup of '%TEMP%\jsywNguEzNXZF.vbs' on the target
[*] Exploit completed, but no session was created.
```
This minor edit should fix it.
2021-05-09 12:40:48 +05:30
04ff0f6bd7
Update exchange ecp dlp policy to work with new cookie jar
2021-04-29 21:26:02 +01:00
4c37e35d82
Land #14770 , guard when spawn is used with TcpServer mixin
2021-04-14 11:34:25 +01:00
71914a1ddb
Land #14813 , additional dup scout bof targets
2021-04-01 13:03:57 -05:00
51200c4b22
Remove CmdStagerFlavor from a couple modules
...
Not strictly necessary. We need a better way to limit by platform.
2021-03-31 12:08:46 -05:00
d92d0e59d8
Fixed generic cmd payload not echoing
2021-03-29 20:06:12 -04:00
c55303863a
Fixed payload triggering twice
2021-03-29 18:27:25 -04:00
9d85af51cb
Land #14945 , Proxylogon RCE (Praetorian update)
2021-03-29 12:04:19 -04:00
11f4946817
Tweak some ProxyLogon verbiage for clarity
2021-03-29 10:07:43 -04:00
02b240b22a
code review
2021-03-29 14:23:39 +04:00
c64b1b200e
remove ClientID, seem useless
2021-03-26 16:37:08 +04:00
b517372e4d
Fix sharepoint_ssi_viewstate, too
2021-03-26 01:32:46 -05:00
a6df15c8c2
Fix the rest of the optional method
2021-03-26 01:29:47 -05:00
0b8ac121d4
Fix fail_with usage in advantech_iview_unauth_rce
...
Brain fart. Should be print_warning so as not to fail the session.
2021-03-25 11:33:41 -05:00
75041c5837
update proxylogon rce
2021-03-25 19:46:58 +04:00
6505f9ccbd
Land #14830 , Adding FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (CVE-2021-3378)
...
Merge branch 'land-14830' into upstream-master
2021-03-24 17:41:10 -05:00
5394464932
Fix rubocop complaint
2021-03-24 17:38:11 -05:00
adfoster-r7