43fe41bea5
RCE exploit for CVE-2023-26359 and an auxiliary module for arbitrary file read via the same vuln.
2023-04-06 14:02:01 +01:00
15d267a233
Land #17826 , post module for CVE-2023-21768
...
This adds an exploit module for CVE-2023-21768 that
achieves local privilege escalation on Windows 11 2H22.
2023-03-30 12:27:28 -04:00
fcb93fef58
Land #17806 , Optergy BMS Backdoor RCE module
...
This module exploits an undocumented backdoor vulnerability
(CVE-2019-7276) in the Optergy Proton and Enterprise Building
Management System (BMS) applications.
2023-03-28 10:27:35 -04:00
f9c6caa804
Land #17785 , add SolarWinds (SWIS) deser RCE
2023-03-27 15:25:17 -05:00
6d4ee0c071
Add exploit for CVE-2023-21768
2023-03-27 20:08:22 +02:00
bcef7ee357
updated module and documentation with SUDO option
2023-03-26 18:31:25 +00:00
0d6195a9ae
Merge branch 'master' into proftpd_modcopy_exec
2023-03-24 21:16:54 -04:00
b7ac6d45d5
Land #17789 , proftpd_modcopy_exec enhancements
...
This PR add documentation, notes, a reference URL, and a few
general code improvements to the check and exploit methods.
2023-03-24 21:08:28 -04:00
3ca177eb1f
Add the exploit for CVE-2022-38108
2023-03-23 17:28:58 -04:00
0c87b0b7cf
removed Windows reference from documentation
2023-03-23 10:34:51 +00:00
69daea95d6
exploit/unix/ftp/proftpd_modcopy_exec: Add docs and resolve RuboCop violations
2023-03-23 18:13:20 +11:00
820e625baa
updated documentation
2023-03-22 21:17:54 +00:00
8226fb9022
fixed small typos documentation
2023-03-22 20:04:34 +00:00
28459c286a
init commit module and documentation
2023-03-22 18:40:50 +00:00
67ac2dc584
Land #17771 , add monitorr file upload rce
2023-03-22 13:00:38 -05:00
1f2a889d0c
Land #17388 , Zyxel router RCE
...
This module adds a new exploit module for a buffer
overflow in roughly 45 different Zyxel router and VPN models.
2023-03-21 15:07:04 -04:00
c5ed25cd6c
small update to documentation on vulnerable releases
2023-03-20 21:12:49 +00:00
e3df74ee5b
Updates addressing review points of space-r7
2023-03-20 21:04:58 +00:00
1b7cee4589
exploit/unix/ftp/proftpd_modcopy_exec: Add docs and resolve RuboCop violations
2023-03-19 15:35:36 +11:00
31a32ccd9b
linting and srvhost check fix
2023-03-17 14:39:02 -04:00
764abaf087
Update documentation/modules/exploit/linux/misc/zyxel_multiple_devices_zhttp_lan_rce.md
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2023-03-17 12:59:48 -04:00
0df12fd694
Land #17754 , Open web analytics 1.7.3 remote code execution
2023-03-17 10:15:33 +01:00
daadb4f523
Land #17775 - Add exploit for Bitbucket env var RCE (CVE-2022-43781)
2023-03-16 11:01:07 +01:00
8a76dab0bd
update line numbers
2023-03-15 13:24:33 -05:00
22c05105d3
address review comments
...
reduces some code duplication, sets privileged to true,
and modifies documentation to reflect lhost / rhost opts
2023-03-15 11:18:03 -05:00
3bf60a57ae
Fix typo
2023-03-15 01:54:36 +01:00
cea8aa8e02
Update open_web_analytics_rce.md to work with latest code changes
2023-03-15 01:34:02 +01:00
fddcae3d93
don't always create repo
2023-03-14 19:03:58 -05:00
bb9e214282
Fix line too long in open_web_analytics_rce docs
2023-03-15 00:01:15 +01:00
e160e51711
Fix typos, update docs with advanced option SearchLimit, implement SearchLimit into module
2023-03-14 23:29:55 +01:00
3196a52bdf
fix msftidy_docs.rb issues
2023-03-14 21:43:07 +01:00
c53a22d3fb
Land #17750 , FortiNAC keyUpload.jsp arbitrary file write CVE-2022-39952
2023-03-14 11:09:40 -05:00
7217a60e41
Update documentation to provide better installation instructions
2023-03-14 10:13:27 -05:00
4a4b2a28d2
Update documentation to provide better installation instructions
2023-03-14 09:21:08 -05:00
ec7347cd49
Land #17509 , tomcat 7 priv esc on rhel based systems (cve-2016-5425)
2023-03-14 10:16:18 +00:00
3bd4c15704
Correct architecture and do final fixes
2023-03-13 15:46:42 -05:00
4bb843fe70
add documentation, adjust method of getting ids
2023-03-13 15:31:41 -05:00
015d79a4c2
added documentation
2023-03-13 18:05:08 +00:00
ddd594ac62
Update example in docs for latest code changes
2023-03-11 17:26:21 +01:00
2a9ddae531
Updated description
2023-03-09 17:43:14 -05:00
06e7c3d702
Responded to comments updated docs
2023-03-09 17:39:53 -05:00
85185633b7
Use single back ticks and 3 instead of 4 at the end
2023-03-09 16:58:04 +01:00
fc711131a2
added MIME, added break in mixin and added link with installation instructions
2023-03-09 09:28:46 -06:00
deafceed00
Update documentation, library, and Gemspec from review
2023-03-09 09:28:27 -06:00
dc8ebb722a
Added support for native PHP payloads and reengineered webshells
2023-03-09 09:28:03 -06:00
c844d4d714
removed check and fix up some code
2023-03-09 09:27:29 -06:00
771f32bd8a
Add documentation and apply code updates
2023-03-09 09:27:03 -06:00
14b5c08a62
Fix the double slash in the shell url
2023-03-09 14:28:15 +01:00
ae7ca169fe
Use the same IP as in the example
2023-03-09 14:08:50 +01:00
3847c410b0
Small changes to the open_web_analytics_rce documentation
2023-03-09 14:05:06 +01:00
sfewer-r7