 Shelby Pace
|
3fae01b403
|
Land #10444, add Consul rexec RCE module
|
2018-12-28 07:16:49 -08:00 |
|
|
Shelby Pace
|
11abb03056
|
Land #10443, add Consul service RCE module
|
2018-12-28 06:37:21 -08:00 |
|
|
Brent Cook
|
9150d3c4b9
|
Land #11156, Add CmdStager to erlang_cookie_rce
|
2018-12-21 12:46:53 -08:00 |
|
|
Jacob Robles
|
a0df69c94f
|
Land #11089, Erlang cookie rce exploit module
|
2018-12-19 06:16:51 -08:00 |
|
|
Wei Chen
|
76ec4781a3
|
Land #11127, Fix TARGETURI support in struts2_namespace_ognl
|
2018-12-15 07:35:20 -08:00 |
|
|
William Vu
|
d5309999db
|
Land #11107, double negative logic cleanup
|
2018-12-11 18:32:32 -08:00 |
|
|
Shelby Pace
|
b0569e7242
|
Land #10960, add wp duplicator code inject module
|
2018-12-11 10:06:00 -08:00 |
|
|
Shelby Pace
|
8afbb1a21e
|
Land #10737, add TeamCity XML-RPC exploit module
|
2018-11-27 13:02:45 -08:00 |
|
|
Brendan Coles
|
3f8c2268a6
|
Land #11015, Fix payload and console check for Xorg_privesc Linux targets
|
2018-11-24 20:43:34 -08:00 |
|
|
Brent Cook
|
a334878fd1
|
Land #10916, Xorg SUID privesc
|
2018-11-21 18:24:03 -08:00 |
|
|
Brent Cook
|
d8e0b17777
|
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
|
2018-11-19 08:50:32 -08:00 |
|
|
Jacob Robles
|
77da5b145e
|
Land #10828, git submodule url exec CVE-2018-17456
|
2018-11-14 10:51:16 -08:00 |
|
|
Shelby Pace
|
a90bea2551
|
Land #9631, add Jira plugin upload module
|
2018-11-13 13:36:30 -08:00 |
|
|
Brendan Coles
|
6be18e6165
|
Land #10917, Add support for unix/cmd payloads to multi/ssh/sshexec
|
2018-11-06 22:31:51 -08:00 |
|
|
Jacob Robles
|
9b495913dc
|
Land #10873, Add notes to exploit modules
|
2018-11-02 12:13:37 -07:00 |
|
|
William Vu
|
f0096227e7
|
Land #10505, post-auth and default creds info
|
2018-10-24 17:09:28 -05:00 |
|
|
William Vu
|
34a1c48d7c
|
Land #10671, struts2_namespace_ognl updates
There are still some outstanding concerns, but I want to unblock this.
|
2018-10-12 09:16:44 -07:00 |
|
|
William Vu
|
12cb3b4d3e
|
Land #10750, formatting and AKA reference fixes
|
2018-10-05 01:34:14 -07:00 |
|
|
Jacob Robles
|
ff06f81f89
|
Land #10704, Navigate CMS Unauthenticated RCE
|
2018-10-04 04:48:35 -07:00 |
|
|
William Vu
|
b42af6cd96
|
Land #10728, metadata updates for @rastating
|
2018-10-02 11:46:30 -07:00 |
|
|
Brent Cook
|
1ee8734717
|
Land #10570, AKA Metadata Refactor
|
2018-09-17 20:31:07 -07:00 |
|
|
William Vu
|
2ee6a49a27
|
Land #10649, https://seclists.org references
|
2018-09-17 15:09:39 -07:00 |
|
|
Wei Chen
|
3e801c22fb
|
Land #10546, Add Apache Struts exploit: CVE-2018-11776
|
2018-09-07 12:56:02 -07:00 |
|
|
William Vu
|
cc7f500b83
|
Land #10604, CVE for ghostscript_failed_restore
|
2018-09-07 12:36:01 -07:00 |
|
|
Wei Chen
|
eb39f6da51
|
Land #10564, Add Ghostscript exploit from taviso
|
2018-09-05 19:09:11 -07:00 |
|
|
William Vu
|
4360b9e82e
|
Land #10566, struts2_rest_xstream normalize_uri
|
2018-08-30 14:00:53 -07:00 |
|
|
Jacob Robles
|
d7728afe42
|
Land #10540, weblogic_deserialize, add check method and linux target
|
2018-08-30 04:13:58 -07:00 |
|
|
William Vu
|
add03ca7f8
|
Land #10543, struts2_rest_xstream targeting fixes
|
2018-08-28 16:55:02 -07:00 |
|
|
William Vu
|
98ee549705
|
Land #10538, PSH target for struts2_rest_xstream
|
2018-08-28 16:55:01 -07:00 |
|
|
Brent Cook
|
f22e6ec2bf
|
Land #10527, Fix msftdiy EDB link check, enable HTTPS
|
2018-08-27 08:53:05 -07:00 |
|
|
Jacob Robles
|
376a343472
|
Land #10487, add php5 session file target
|
2018-08-27 08:49:42 -07:00 |
|
|
William Vu
|
bf7c530f7e
|
Land #10456, known_hosts fix for SSH modules
|
2018-08-16 13:43:26 -07:00 |
|
|
Adam Cammack
|
43f1f8eeb2
|
Land #10405, Cleanup dropped files for CMSMS
|
2018-08-01 12:46:44 -07:00 |
|
|
Jacob Robles
|
7e180a390c
|
Land #10060, vTiger CRM v6.3.0 Upload RCE
|
2018-07-30 10:34:17 -07:00 |
|
|
Wei Chen
|
3a67d89711
|
Land #10383, Add WP Responsive Thumbnail Slider Plugin Exploit Module
|
2018-07-26 21:56:35 -07:00 |
|
|
Wei Chen
|
e075836ad5
|
Land #10346, update check method and doc for CMS Made Simple
|
2018-07-20 15:49:07 -07:00 |
|
|
Wei Chen
|
fdc24fe453
|
Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE
|
2018-07-19 10:20:10 -07:00 |
|
|
William Vu
|
88518ec4ae
|
Land #10064, Claymore Dual Miner API RCE
|
2018-07-16 16:04:38 -07:00 |
|
|
William Vu
|
dbd03f9914
|
Land #10278, gitlist_arg_injection fixes
|
2018-07-12 17:05:33 -07:00 |
|
|
Wei Chen
|
465dceb182
|
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
|
2018-07-12 16:28:05 -07:00 |
|
|
Shelby Pace
|
8586e6fc8f
|
Land #10260, Add phpMyAdmin v4.8.1/4.8.0 LFI RCE
|
2018-07-12 11:24:03 -05:00 |
|
|
Shelby Pace
|
45f354e55d
|
Land #10231, Monstra Fileupload Exec
|
2018-07-12 11:24:02 -05:00 |
|
|
Jacob Robles
|
d480ee8e20
|
Land #10275, Update missing CVE references for exploit modules
|
2018-07-12 11:24:01 -05:00 |
|
|
Wei Chen
|
e915bb0f66
|
Land #10262, Add GitList argument injection exploit module
|
2018-07-06 12:30:10 -07:00 |
|
|
Wei Chen
|
d4054c24bd
|
Land #9896, Java JMX Package Name Randomization
Land #9896
|
2018-07-02 11:43:42 -07:00 |
|
|
William Vu
|
d4dfb98fb9
|
Land #10207, msftidy fixes
|
2018-06-26 12:40:50 -07:00 |
|
|
Jacob Robles
|
95cb9f3654
|
Land #9825, Add 'phpMyAdmin Authenticated Remote Code Execution'
|
2018-06-18 06:55:53 -07:00 |
|
|
Brent Cook
|
0dc0d3c0ba
|
fix incorrect disclosure date
|
2018-05-25 03:06:42 -05:00 |
|
|
William Vu
|
012de0f6b1
|
Land #10038, struts_code_exec_parameters EXE fix
|
2018-05-17 08:16:33 -07:00 |
|
|
William Vu
|
cbac801b88
|
Land #8727, CVE-2017-9791 exploit
|
2018-05-17 08:16:33 -07:00 |
|