 Spencer McIntyre
|
a418bd9c65
|
Land #17638, Lucee Scheduled Job RCE
|
2023-03-02 08:57:19 -05:00 |
|
|
JBince
|
1245124afa
|
updated docs to reflect changes from smcintyre-r7
|
2023-02-28 19:58:39 -06:00 |
|
|
Spencer McIntyre
|
a916163b49
|
Cleanup files and fixup messages
|
2023-02-28 16:41:57 -05:00 |
|
|
JBince
|
8b03f2fda8
|
Reworked payload execution logic
|
2023-02-27 11:09:34 -06:00 |
|
|
JBince
|
ce9933fc4c
|
Feedback changes + rubocop & msftidy changes
|
2023-02-17 08:16:49 -06:00 |
|
|
JBince
|
a3a6ae9c4a
|
feedback fixes
|
2023-02-16 14:33:03 -06:00 |
|
|
Spencer McIntyre
|
ac9d60ce9e
|
Land #17281, Added module for CVE-2022-2992
Added module for CVE-2022-2992 - Gitlab Remote Command Execution via Github import
|
2023-02-14 16:57:29 -05:00 |
|
|
JBince
|
1dadd113dd
|
msftidy changes to documentation
|
2023-02-13 15:27:07 -06:00 |
|
|
JBince
|
9c3cfd8bdb
|
Added documentation, cleaned up functions, rubocop fixes
|
2023-02-13 15:19:45 -06:00 |
|
|
Spencer McIntyre
|
c3fa924cfa
|
Remove the NGROK_URL option
|
2023-02-13 14:31:44 -05:00 |
|
|
Spencer McIntyre
|
210b7a3254
|
Use #get_json_document instead of JSON.parse
Also fix typos
|
2023-02-13 14:00:13 -05:00 |
|
|
Spencer McIntyre
|
c7279e9a0a
|
Add credit for CVE-2023-0669; fix path in docs
|
2023-02-09 13:02:40 -05:00 |
|
|
bcoles
|
de8a6e1445
|
Move fortra_goanywhere_rce_cve_2023_0669 module documentation to documentation directory
|
2023-02-09 23:12:45 +11:00 |
|
|
bwatters
|
8ee67085c8
|
Land #17556, ManageEngine ADSelfService Plus RCE (CVE-2022-47966)
Merge branch 'land-17556' into upstream-master
|
2023-02-07 16:57:22 -06:00 |
|
|
bwatters
|
53c67653f5
|
Land #17527, ManageEngine ServiceDesk Plus RCE (CVE-2022-47966)
Merge branch 'land-17527' into upstream-master
|
2023-02-06 17:37:31 -06:00 |
|
|
bwatters
|
8b116a7dcd
|
Minor punctuation change
|
2023-02-06 16:32:39 -06:00 |
|
|
adfoster-r7
|
6870efc34a
|
Land #17426, Update all references to old Wiki to point to new docs site
|
2023-02-01 23:49:20 +00:00 |
|
|
Christophe De La Fuente
|
f676568d89
|
Fix CVE
|
2023-01-30 12:18:08 +01:00 |
|
|
Christophe De La Fuente
|
a5ba1245c2
|
Fix CVE
|
2023-01-30 12:15:14 +01:00 |
|
|
bcoles
|
e11aaa8027
|
modules/exploits/multi/local: Resolve Rubocop and msftidy_docs violations
|
2023-01-28 15:02:24 +11:00 |
|
|
Grant Willcox
|
6043d0ffba
|
Update all links from Wiki site to new docs site.
|
2023-01-27 09:58:53 -06:00 |
|
|
Christophe De La Fuente
|
e01239cf7b
|
Add exploit module and documentation
|
2023-01-26 21:53:14 +01:00 |
|
|
Christophe De La Fuente
|
2be22752be
|
Add Linuc specifics and documentation
|
2023-01-26 16:16:00 +01:00 |
|
|
Heyder Andrade
|
5c3ac339d0
|
Apply suggestions from code review
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
|
2022-12-04 12:13:50 +01:00 |
|
|
Heyder Andrade
|
704cee436b
|
Apply suggestions from code review
|
2022-11-29 15:25:14 +01:00 |
|
|
Heyder Andrade
|
c1236500f1
|
Apply suggestions from code review
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2022-11-29 14:12:39 +01:00 |
|
|
Heyder Andrade
|
13a3d9d1ca
|
Added documentation
|
2022-11-23 00:19:25 +01:00 |
|
|
Grant Willcox
|
8ca7550062
|
Land #17257, Adding exploit for ChurchInfo 1.2.13-1.3.0 RCE (CVE-2021-43258)
|
2022-11-18 19:27:10 -06:00 |
|
|
Grant Willcox
|
237eb904d4
|
Add in fixes for documentation examples and then update the code to fix some bugs
|
2022-11-18 18:30:07 -06:00 |
|
|
Grant Willcox
|
713323f2cb
|
Add in Docker setup documentation
|
2022-11-18 18:22:11 -06:00 |
|
|
Grant Willcox
|
85a6770973
|
Add additional checks, a check method, and fix up some doc errors
|
2022-11-18 18:22:06 -06:00 |
|
|
m4lwhere
|
b9ecdb3bc2
|
Use TARGETURI, registered cleanup, implment cookie_jar, and perform response checks and documentation
|
2022-11-18 18:21:27 -06:00 |
|
|
m4lwhere
|
a33a313544
|
Adding exploit for ChurchInfo 1.3.0
|
2022-11-18 18:21:08 -06:00 |
|
|
Christophe De La Fuente
|
d1a7170020
|
Land #17021, Gitea Git fetch RCE module - CVE-2022-30781
|
2022-11-17 12:28:29 +01:00 |
|
|
Grant Willcox
|
11095c8789
|
Documentation touchups
|
2022-11-01 11:43:01 -05:00 |
|
|
jheysel-r7
|
757c0da639
|
Review updates
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-11-01 10:55:20 -05:00 |
|
|
Jack Heysel
|
434cb21d27
|
Docs update
|
2022-11-01 10:54:37 -05:00 |
|
|
Jack Heysel
|
b31c0f6987
|
Added check method, refactored, updated docs
|
2022-11-01 10:54:27 -05:00 |
|
|
Jack Heysel
|
a0babb354a
|
Apache CouchDB Erlang module initial commit
|
2022-11-01 10:54:19 -05:00 |
|
|
Jack Heysel
|
9c5d82e00f
|
Land #17147, add Vargrant Breakout module
This PR adds a module that exploits a default
Vagrant shared folder to append a Ruby payload
to the Vagrant project Vagrantfile config file.
|
2022-10-26 17:11:03 -04:00 |
|
|
bcoles
|
01fa2e1041
|
Add Vagrant Synced Folder Vagrantfile Breakout module
|
2022-10-26 17:33:44 +11:00 |
|
|
space-r7
|
7c64b0ba93
|
add option in documentation and add notes
|
2022-10-25 12:22:00 -05:00 |
|
|
krastanoel
|
95503be49a
|
Update documentation
|
2022-10-03 19:57:25 +07:00 |
|
|
h00die
|
c6e18ee469
|
cve-2022-1329
|
2022-10-02 15:59:58 -04:00 |
|
|
bwatters
|
76c6632305
|
Land #16673, qdPM 9.1 - Authenticated Remote Code Execution (CVE-2020-7246)
Merge branch 'land-16673' into upstream-master
|
2022-09-29 09:46:27 -05:00 |
|
|
alex
|
d5dcca899d
|
Fix description scenario
|
2022-09-23 10:51:36 +03:00 |
|
|
c0rs
|
efbe06f944
|
Add module Veritas Backup Exec Agent Remote Code Execution
|
2022-09-13 18:18:52 +03:00 |
|
|
bcoles
|
a7d2145e8d
|
firefox_xpi_bootstrapped_addon: Add notes, description, references, docs
|
2022-09-05 02:23:37 +10:00 |
|
|
Jack Heysel
|
52fd45b7ab
|
Land #16744 Jboss EAP/AS RCE module
This module exploits a Java deserialization vulnerability
in JBOSS EAP/AS Remoting Unified Invoker interface for
versions 6.1.0 and prior.
|
2022-07-12 10:49:22 -04:00 |
|
|
Heyder Andrade
|
d6b6f47b09
|
change doc file
|
2022-07-08 02:36:18 +02:00 |
|