Brendan Coles
d7f1c9a4a9
Land #12696 , Add AKA references to several modules
2019-12-12 15:28:21 +00:00
h00die
8cb58be4c0
style
2019-12-11 06:44:35 -05:00
Shelby Pace
a4ed143af6
Land #12364 , add vBulletin widgetconfig RCE
2019-12-10 12:12:47 -06:00
Shelby Pace
19169bc9b2
remove executable permissions
2019-12-10 12:10:04 -06:00
Shelby Pace
ab6f77ce63
add reference
2019-12-10 11:47:48 -06:00
Shelby Pace
dd2a6f77e3
remove unused opts
2019-12-10 11:32:46 -06:00
h00die
3b2a54a599
add aka to some modules
2019-12-10 09:53:13 -05:00
FenixH
24431f0fae
Merge remote-tracking branch 'upstream/master'
2019-12-09 11:21:52 +01:00
Tim W
3200781292
Land #12446 , add powershell AMSI bypass to web_delivery
2019-12-09 18:03:54 +08:00
FenixH
31e7fb3daa
web delivery fix
2019-12-06 12:45:23 +01:00
Francesco Soncina
45bee2d500
Update splunk_upload_app_exec.rb
2019-11-26 15:38:34 +01:00
RAMELLA Sébastien
6e93df1224
fix. DisablePayloadHandler to false in target 0 and add unknown author.
2019-11-22 17:56:50 +04:00
Tim W
b63fd963aa
default AMSI bypass off except for web_delivery
2019-11-19 22:26:40 +08:00
sinn3r
71cbefa5e8
Land #12534 , Add FreeSWITCH Event Socket Command Execution
...
Add FreeSWITCH Event Socket Command Execution
2019-11-13 11:27:53 -06:00
Shelby Pace
1ebef8bcb2
Land #12529 , add CMSMS object inject exploit
2019-11-13 08:37:05 -06:00
Shelby Pace
f79a35d428
check response
2019-11-13 08:34:23 -06:00
scanu92
d9b0c1aa2f
add advanced options ForceExploit
2019-11-12 23:03:28 +01:00
scanu92
1489e03f0a
Update cmsms_object_injection_rce.rb
2019-11-12 23:02:16 +01:00
scanu92
78ea784e84
Update modules/exploits/multi/http/cmsms_object_injection_rce.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-11-12 23:00:31 +01:00
William Vu
2b3c2b6af5
Land #12535 , module traits for some local exploits
2019-11-07 10:00:39 -06:00
h00die
9cf62d02f9
land #12492 coldfusion rds updates
2019-11-07 05:16:29 -05:00
Tim W
55ebfe6c2d
remove unnecessary override
2019-11-06 15:27:40 +08:00
Francesco Soncina
a449941615
use PSH-EncodedCommand for EncodedCommand in launcher
...
Since `Powershell::encode_final_payload` and `Powershell::encode_inner_payload` are already used in `cmd_psh_payload`, so it's better to have a dedicated option for the encoded launcher.
2019-11-05 13:12:00 +01:00
Francesco Soncina
12c92342ef
Use DefaultOptions instead of redefining them
2019-11-05 12:54:29 +01:00
Francesco Soncina
bbe36ebfee
remove debug prints
2019-11-05 00:25:55 +01:00
Francesco Soncina
53ee43bccb
Update web_delivery.rb
2019-11-05 00:24:47 +01:00
Brendan Coles
38498305d3
Add module notes for Reliability and Stability
2019-11-03 00:33:24 +00:00
scanu92
1ae2f66c7c
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:33:17 +01:00
scanu92
8a3f7a6b21
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:32:55 +01:00
scanu92
1850cfd0c1
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:32:32 +01:00
Brendan Coles
f239b5db8f
Add FreeSWITCH Event Socket Command Execution
2019-11-02 22:03:02 +00:00
scanu92
632e423236
Update cmsms_object_injection_rce.rb
2019-11-02 21:31:08 +01:00
scanu92
33303746f8
Update cmsms_object_injection_rce.rb
2019-11-02 21:29:38 +01:00
scanu92
beffab0787
Update cmsms_object_injection_rce.rb
2019-11-01 15:26:02 +01:00
scanu92
7cc1175287
Update cmsms_object_injection_rce.rb
...
Add NormalRanking to cmsms_object_injection_rce module
2019-11-01 15:15:49 +01:00
sk4
af0761bcfd
Add CMS Made Simple object injection exploit module
2019-11-01 12:11:38 +01:00
Francesco Soncina
9fc2df5ea8
move force_tls12 to rex-powershell
2019-10-31 16:28:59 +01:00
William Vu
f5ce31519c
Fix style, once more with feeling
2019-10-31 09:59:35 -05:00
wvu-r7
dc62ea080b
Fix style
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-10-31 09:54:18 -05:00
Shelby Pace
0b4a0b3148
Land #12476 , add Nostromo dir traversal RCE
2019-10-31 08:24:41 -05:00
Shelby Pace
99fd254348
add reference
2019-10-31 08:23:57 -05:00
Quentin Kaiser
ca81793860
Forgot to put ForceExploit in registered options.
2019-10-31 10:25:26 +01:00
Quentin Kaiser
0531dd7bb9
Hash rocket alignment.
2019-10-29 12:28:39 +01:00
Quentin Kaiser
bc0c2bf721
check function rewrite.
2019-10-29 12:27:15 +01:00
Quentin Kaiser
436d6781c1
Fix description.
2019-10-29 12:25:01 +01:00
Quentin Kaiser
b357db22cf
Fix description.
2019-10-29 12:24:22 +01:00
Quentin Kaiser
8bbb33c483
Generic name.
2019-10-29 12:24:00 +01:00
Quentin Kaiser
b6dd30302a
Rewriting of command stager, based on exploits/unix/webapp/webmin_backdoor.
2019-10-29 12:23:19 +01:00
William Vu
ec0974222c
Fix module title again
2019-10-27 11:48:50 -05:00
William Vu
e010f48a3b
Move module to coldfusion_rds_auth_bypass
2019-10-27 11:25:56 -05:00