 William Vu
|
398c13a1b2
|
Add Mikhail Klyuchnikov's writeup as a reference
|
2020-07-08 14:36:42 -05:00 |
|
|
William Vu
|
ee240393f4
|
Credit Mikhail Klyuchnikov for CVE-2019-19781
|
2020-07-08 14:35:16 -05:00 |
|
|
William Vu
|
d726a2cdcb
|
Fix a few final things
|
2020-07-07 12:06:05 -05:00 |
|
|
William Vu
|
c8176b803a
|
Add version information to the description
|
2020-07-06 16:24:22 -05:00 |
|
|
William Vu
|
7ef4cb64ad
|
Tweak timeouts to avoid a race condition
|
2020-07-06 14:30:27 -05:00 |
|
|
William Vu
|
be90526d5f
|
Add vuln discovery credit and reference
|
2020-07-06 14:26:52 -05:00 |
|
|
William Vu
|
41bb4d3a8d
|
Add dir_trav method back in
I was wondering why I refactored it away. Oh, I needed it.
|
2020-07-05 18:23:45 -05:00 |
|
|
William Vu
|
1f765d0e1f
|
Upgrade CheckCodes, since the dir traversal passed
|
2020-07-05 16:29:53 -05:00 |
|
|
William Vu
|
6e7701ba21
|
Add rudimentary check method
|
2020-07-05 16:18:03 -05:00 |
|
|
William Vu
|
0417e88ff2
|
Add F5 BIG-IP TMUI RCE (CVE-2020-5902)
|
2020-07-05 15:22:15 -05:00 |
|
|
William Vu
|
36b5d237fa
|
Make cmd/unix target types consistent to :unix_cmd
There were some using :unix_command, and it was just an oversight.
|
2020-07-05 11:16:47 -05:00 |
|
|
William Vu
|
ffc07d6c8f
|
Merge remote-tracking branch 'upstream/master' into pr/13787
|
2020-07-01 14:42:16 -05:00 |
|
|
wvu-r7
|
e0fbc9fd05
|
Correct whitespace change
Seems like a typo.
|
2020-07-01 11:00:04 -05:00 |
|
|
Shelby Pace
|
e2f6330755
|
Land #13725, fix error / clean up atutor exploit
|
2020-06-30 13:32:34 -05:00 |
|
|
William Vu
|
755d2d3261
|
Use subpar regex validation on LEAK_FILE
|
2020-06-30 11:17:26 -05:00 |
|
|
Alan Foster
|
b841246536
|
Update autocheck to use prepend instead of include, add ForceExploit functionality
|
2020-06-30 11:40:46 +01:00 |
|
|
Pedro Ribeiro
|
6e8178735f
|
Update ibm_drm_rce.rb
|
2020-06-26 11:38:55 +07:00 |
|
|
Pedro Ribeiro
|
2ba8573ef9
|
Update IBM DRM rce module
|
2020-06-26 11:31:10 +07:00 |
|
|
h00die
|
6e93dcf8c2
|
Land #13645, Trend Micro WebSecurity RCE
|
2020-06-22 06:51:26 -04:00 |
|
|
h00die
|
6a3633c2c0
|
fixing up some styles and such
|
2020-06-20 12:05:48 -04:00 |
|
|
mdisec
|
260607e8f9
|
Adding check on exploit method
|
2020-06-19 19:00:52 +03:00 |
|
|
mdisec
|
7ab5474175
|
Change check method and regex for cookie
|
2020-06-19 16:15:11 +03:00 |
|
|
mdisec
|
229760a826
|
Fixing document file and module improvements
|
2020-06-18 20:11:55 +03:00 |
|
|
Shelby Pace
|
db4006e9f6
|
Land #13607, add Cayin exploit modules
|
2020-06-18 10:33:49 -05:00 |
|
|
h00die
|
7bd2ba3aed
|
remove debugging
|
2020-06-17 12:04:18 -04:00 |
|
|
h00die
|
c2c931030f
|
review comments
|
2020-06-17 11:47:11 -04:00 |
|
|
Tod Beardsley
|
dc54145fa9
|
Add CVE-2020-7357 as a reference for Caiyn CMS
|
2020-06-17 09:56:10 -05:00 |
|
|
kalba-security
|
f0255e3c81
|
Fix atutor_filemanager_traversal credentials checks and clean up code
|
2020-06-15 12:15:00 -04:00 |
|
|
mdisec
|
a0740f4698
|
Add trend micro websecurity rce
|
2020-06-14 20:33:46 +03:00 |
|
|
h00die
|
4702d87684
|
cleanup
|
2020-06-12 10:46:44 -04:00 |
|
|
dwelch-r7
|
10bb17d8fd
|
Land #13374, Fix encoding bug
|
2020-06-11 12:30:12 +01:00 |
|
|
Christophe De La Fuente
|
797673fd57
|
Land #13537, add new module linuxki_rce (CVE-2020-7209)
|
2020-06-10 11:46:34 +02:00 |
|
|
Numan Türle
|
14bb64c8ae
|
Update linuxki_rce.rb
default payload added
|
2020-06-10 01:59:00 +03:00 |
|
|
Numan Türle
|
095b6855e9
|
Update modules/exploits/linux/http/linuxki_rce.rb
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com>
|
2020-06-08 16:03:33 +03:00 |
|
|
numanturle
|
d238c00e1c
|
add target
|
2020-06-07 20:36:01 +03:00 |
|
|
William Vu
|
64de8c4503
|
Document directory traversals
|
2020-06-02 22:13:07 -05:00 |
|
|
William Vu
|
4a9c2988e2
|
Base64-encode command payload to avoid escaping
|
2020-06-02 22:13:07 -05:00 |
|
|
William Vu
|
32ae47c9a9
|
Add Cisco UCS Director Cloupia script RCE
|
2020-06-02 22:13:07 -05:00 |
|
|
numanturle
|
dd5ed53217
|
fix missing module
CmdStager included
|
2020-05-30 06:09:49 +03:00 |
|
|
numanturle
|
f7cdbc5faf
|
author name change
|
2020-05-30 05:49:22 +03:00 |
|
|
numanturle
|
f8d9ab8d7a
|
add arch
|
2020-05-30 05:39:52 +03:00 |
|
|
numanturle
|
558487c9de
|
modify failure
|
2020-05-30 04:34:00 +03:00 |
|
|
numanturle
|
d5492014a7
|
fix res nil
|
2020-05-30 04:29:35 +03:00 |
|
|
numanturle
|
e2050393bc
|
modify docs and exploit
|
2020-05-30 04:23:46 +03:00 |
|
|
numanturle
|
4921814b85
|
Add new module linuxki_rce
|
2020-05-29 18:20:46 +03:00 |
|
|
William Vu
|
d6aea635c7
|
Update authors in Netsweeper/myLittleAdmin modules
Edits for accuracy and precision.
|
2020-05-22 17:05:12 -05:00 |
|
|
Spencer McIntyre
|
b49dd37614
|
Land #13494, Add Plesk/myLittleAdmin ViewState .NET deserialization pre-auth RCE
|
2020-05-22 11:53:41 -04:00 |
|
|
bwatters-r7
|
2d56931663
|
Land #13287, CVE-2017-15889 Synology DSM < 5.2-5967-5 authenticated root exploit
Merge branch 'land-13487' into upstream-master
|
2020-05-22 10:07:50 -05:00 |
|
|
William Vu
|
11030dff84
|
Add CVE references (they weren't there before)
|
2020-05-21 18:12:57 -05:00 |
|
|
h00die
|
c1996d58ed
|
add forcexploit
|
2020-05-21 17:39:54 -04:00 |
|