ff15b581ed
resolved: issues
2025-06-29 12:34:38 +05:30
e77abd9bbc
added: automatic admin_allow_langedit permission checking and enabling capability
2025-06-28 16:20:49 +05:30
93a8334699
fixed: build issue
2025-06-27 20:16:07 +05:30
840ae0f317
resolved: issues
2025-06-27 19:42:35 +05:30
016f4ea142
resolved: issues
2025-06-26 10:26:05 +05:30
d787444137
Add exploit module for ISPConfig language_edit.php PHP Code Injection (CVE-2023-46818)
...
- Adds modules/exploits/linux/http/ispconfig_lang_edit_php_code_injection.rb
- Adds documentation for the module in documentation/modules/exploit/linux/http/ispconfig_lang_edit_php_code_injection.md
- Module targets ISPConfig < 3.2.11p1 with admin_allow_langedit enabled
- References and implementation based on PoC and advisories at https://github.com/SyFi/CVE-2023-46818
2025-06-25 22:27:52 +05:30
00c88caffb
Updates incorrect arch values in modules
2025-06-25 16:57:27 +01:00
04a18fb3ca
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
40ca2b3b1b
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
a454217bd4
Update info -d markdown
2025-06-24 11:21:49 +01:00
37388ca1be
Adds sentinel values to modules missing notes
2025-06-23 12:24:58 +01:00
ade9b54d94
Runs Style/TrailingCommaInArguments Rubocop against modules
2025-06-23 09:30:35 +01:00
b8c375d087
Merge pull request #20337 from bcoles/exploit-linux-http-opentsdb_key_cmd_injection
...
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
2025-06-22 14:51:04 +01:00
cede07596f
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
2025-06-22 12:39:04 +10:00
0307bab692
Update opennms_horizon_authenticated_rce.rb
...
Fix Arch
2025-06-21 20:37:33 +03:00
a4b14d8b64
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
91d3675c3b
modules/exploits/linux/samba: Resolve RuboCop violations
2025-06-15 00:09:09 +10:00
1c72a3adc3
Fixes duplicate notes in a couple of modules
2025-06-12 14:32:12 +01:00
663cf4af24
Land #20303 , resolves Rubocop violations in modules/exploits/linux/postgres
...
modules/exploits/linux/postgres: Resolve RuboCop violations
2025-06-12 15:20:05 +02:00
bf68b56f88
modules/exploits/linux/pptp: Resolve RuboCop violations
2025-06-12 21:14:25 +10:00
e0e5e4157a
modules/exploits/linux/postgres: Resolve RuboCop violations
2025-06-12 21:03:41 +10:00
f95f5c928e
modules/exploits/linux/ftp: Resolve RuboCop violations
2025-06-10 22:36:46 +10:00
ebae201198
Merge pull request #20160 from zeroSteiner/feat/mod/payload/php-adapters
...
Add PHP adapters and refactor PHP payloads
2025-06-09 07:41:50 -05:00
f7fd84b82d
Adds different approach to udev rule naming
2025-06-04 15:24:43 +02:00
5fbf46ba7f
Land #19472 , adds exploits/linux/local/udev_persistence
...
Add modules/exploits/linux/local/udev_persistence.rb
2025-06-04 13:21:04 +02:00
6806385292
Update
2025-06-04 12:56:51 +02:00
0d31440722
Update the module
2025-06-04 12:19:36 +02:00
0106a4440e
Merge branch 'master' into aka_equationgroup
2025-05-30 17:17:54 +02:00
f3b650a409
Major refactoring of PHP payloads and related exploits
2025-05-30 09:06:38 -04:00
943c94774a
Modules: Resolve Rubocop Lint/Syntax violations
2025-05-21 18:27:24 +10:00
18dc39e9a5
Merge pull request #20213 from bcoles/modules-exploits-linux-pop3
...
modules/exploits/linux/pop3: Resolve RuboCop violations
2025-05-20 11:22:05 -07:00
3a0e294f50
Merge pull request #20212 from bcoles/modules-exploits-linux-redis
...
modules/exploits/linux/redis: Resolve RuboCop violations
2025-05-20 11:21:35 -07:00
426aaa80fb
Merge pull request #20211 from bcoles/modules-exploits-linux-ids
...
modules/exploits/linux/ids: Resolve RuboCop violations
2025-05-20 10:57:03 -07:00
b99e161003
Merge pull request #20210 from bcoles/modules-exploits-linux-imap
...
modules/exploits/linux/imap: Resolve RuboCop violations
2025-05-20 10:50:58 -07:00
dd3093c806
Merge pull request #20203 from bcoles/rubocop-modules-exploits-linux-upnp
...
modules/exploits/linux/upnp: Resolve RuboCop violations
2025-05-20 10:46:46 -07:00
2810fdaa4a
Merge pull request #20165 from bcoles/rubocop-modules-exploits-linux-browser
...
modules/exploits/linux/browser: Resolve RuboCop violations
2025-05-20 09:19:34 -07:00
693620e1a5
modules/exploits/linux/pop3: Resolve RuboCop violations
2025-05-21 02:19:09 +10:00
6597a6c5fc
modules/exploits/linux/redis: Resolve RuboCop violations
2025-05-21 02:07:54 +10:00
3aa6e2d8db
modules/exploits/linux/ids: Resolve RuboCop violations
2025-05-20 23:54:29 +10:00
ec7d54152b
modules/exploits/linux/imap: Resolve RuboCop violations
2025-05-20 23:42:47 +10:00
d567248b16
modules/exploits/linux/upnp: Resolve RuboCop violations
2025-05-18 16:29:41 +10:00
71565c6cdc
Update modules/exploits/linux/browser/adobe_flashplayer_aslaunch.rb
...
Co-authored-by: Simon Janusz <85949464+sjanusz-r7@users.noreply.github.com >
2025-05-16 15:07:08 -07:00
c68b10b640
Merge pull request #20164 from bcoles/rubocop-modules-exploits-linux-games
...
modules/exploits/linux/games: Resolve RuboCop violations
2025-05-16 10:27:24 +02:00
76471731f9
Merge pull request #20112 from cdelafuente-r7/mod/ivanti/rce/cve_2025_22457
...
Ivanti Connect Secure Unauthenticated RCE via Stack-based Buffer Overflow CVE-2025-22457
2025-05-15 11:44:49 -05:00
42a383e4c7
modules/exploits/linux/games: Resolve RuboCop violations
2025-05-16 00:09:30 +10:00
365caab8fc
Update the error message in case of Broken pipe error and update the documentation
2025-05-15 12:10:53 +02:00
3d121839c8
Fix from code review #2
2025-05-13 17:17:41 +02:00
4aea95f93c
Fix from code review
2025-05-13 12:54:31 +02:00
5062f596fd
modules/exploits/linux/browser: Resolve RuboCop violations
2025-05-10 18:15:50 +10:00
16ae7af550
modules/exploits/linux/antivirus: Resolve RuboCop violations
2025-05-10 18:15:04 +10:00
happybear-21