33e35bae7c
Add descriptions to auxiliary modules Actions
...
And a little formatting
Closes #13403
Update modules/auxiliary/admin/android/google_play_store_uxss_xframe_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/backupexec/dump.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/arris_motorola_surfboard_backdoor_xss.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/dos/android/android_stock_browser_iframe.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/tikiwiki/tikidblib.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/smb.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/telnet.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/vnc.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/fakedns.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/tftp.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/dos/http/gzip_bomb_dos.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/dos/http/ibm_lotus_notes.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/dos/http/ibm_lotus_notes2.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/dos/http/webkitplus.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/dos/windows/browser/ms09_065_eot_integer.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/example.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/android_browser_file_theft.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/apple_safari_ftp_url_cookie_theft.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/android_browser_new_tab_cookie_theft.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/apple_safari_webarchive_uxss.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/browser_lanipleak.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/firefox_pdfjs_file_theft.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/flash_rosetta_jsonp_url_disclosure.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/samsung_browser_sop_bypass.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/http.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/http_basic.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/http_ntlm.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/http_ntlmrelay.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/socks4a.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/socks5.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/sip.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/postgresql.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/local_hwbridge.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/webkit_xslt_dropper.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/socks_unc.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/client/iec104/iec104.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/browser_info.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/drda.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/ftp.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/mssql.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/mysql.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/pop3.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/dns/spoofhelper.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/server/capture/printjob_capture.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update description following Actions removal
Update modules/auxiliary/gather/browser_info.rb
Update modules/auxiliary/gather/browser_info.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/gather/browser_info.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
2020-05-17 14:51:14 -05:00
04e263f305
Add auxiliary/admin/http/ibm_drm_download action
2020-05-07 08:03:28 -05:00
e2690ad378
Land #13301 , IBM DRM arbitrary file download
2020-05-05 12:07:37 -05:00
227347627c
Address review comments
...
Update documentation/modules/auxiliary/admin/http/ibm_drm_download.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update documentation/modules/auxiliary/admin/http/ibm_drm_download.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update documentation/modules/auxiliary/admin/http/ibm_drm_download.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
final changes!
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
Update modules/auxiliary/admin/http/ibm_drm_download.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
final final
Update ibm_drm_download.md
change date to ISO
really fix the date now
2020-05-05 10:56:40 -05:00
9fe684e5d5
break into smaller chunks
2020-05-05 10:15:55 +07:00
9020e2e391
add full disclosure url
2020-05-01 21:01:26 +07:00
8e20cf94be
got me refs wrong m8
2020-05-01 13:48:02 +07:00
37eecbc01f
fix eol spaces
2020-05-01 13:29:50 +07:00
fc50e21251
add cve
2020-05-01 10:17:57 +07:00
81b678b271
remove CVE for merge, will add later
2020-04-30 11:15:43 +07:00
75c9cf5c80
Update ibm_drm_download.rb
2020-04-28 14:12:53 +07:00
bf3fff677e
and rubocop the file download module too
2020-04-24 10:24:39 +07:00
00b28da98c
Move username and password check to top of run
...
Check the options first, since they're unrequired. Missed this.
2020-04-22 20:36:27 -05:00
ef68c66d31
Persist base_dn value, since the code is stable
...
I wasn't sure before. We should be able to rely on @base_dn doing the
right thing now. There is no need to check the value every time.
Practically, I think the base DN will always be dc=vsphere,dc=local.
2020-04-22 17:38:12 -05:00
0c0de73afa
Reformat post-RuboCop code, mostly to 80 columns
...
Now with more horizontal space!
2020-04-22 17:38:12 -05:00
0dc6ac7133
RuboCop for the RuboCop gods
2020-04-22 17:38:12 -05:00
b810f44fde
Remove ill-fated VMware advice
2020-04-22 17:38:12 -05:00
676ab353ff
Rename aux/gather/vmware_vcenter_vmdir{,_ldap}
2020-04-22 17:38:12 -05:00
0bacda8117
Use auxiliary/gather/vmware_vcenter_vmdir as check
2020-04-22 17:38:12 -05:00
9633f5daf4
Exploit an LDAP auth bypass to add an admin user
...
Thanks to JJ Lehmann and Ofri Ziv of Guardicore Labs for their work.
https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/
2020-04-22 17:38:11 -05:00
13c4d50c2c
Create ibm_drm_download.rb
2020-04-21 15:53:12 +07:00
b89744cef2
Land #12145 , add a module to generate grafana cookies
2020-04-20 09:21:01 -04:00
c9bfcf2240
Make VERSION an OptEnum and clean up whitespace
2020-04-20 09:20:55 -04:00
a4507bbfc6
requested changes
2020-04-19 19:53:33 +02:00
288726c177
zeroSteiner comments
2020-03-21 11:00:25 -04:00
44e45438f8
some ubiquiti review updates
2020-03-08 10:09:13 -04:00
56d4296041
spaces at eol
2020-02-29 19:33:11 -05:00
3d77c48eae
almost working
2020-02-29 19:33:11 -05:00
bab5a34b34
progress on ubiquiti
2020-02-29 19:33:11 -05:00
7dc1315dac
Update logic for ForceExploit in my modules
...
This lets the user opt out of running check completely.
2020-02-19 01:06:50 -06:00
8489bcdfd9
This fixes broken links to the community.rapid7.com blog
...
Performed mechanically with sed, spot-checked that the new blog can consume these links.
2020-02-18 09:06:11 -06:00
311b03af93
Action remainder of code review changes.
...
- Revert files that will only run as python2.
- Remove superfluous calls to list()
- Other minor cleanup
2019-11-01 19:24:22 -07:00
10b5df1c4f
Change all python2.7 shebangs to python3.
...
Remove utf-8 encoding declarations, as this is the default for python3.
2019-10-31 15:10:58 -07:00
90ea642c35
Land #12406 , Fix spelling mistakes
2019-10-05 19:42:58 +00:00
905eb17132
begining to fix spelling errors
2019-10-05 14:26:34 -04:00
4cc85ecb75
adress a spelling problem
2019-10-05 14:22:18 -04:00
b7123e2c27
additional releative to relative
2019-10-05 13:50:30 -04:00
db7e594ef4
land #12065 , local file config loader
...
Adds a couple of modules for loading in cisco/juniper configs from a
file without needing a shell and a post module
2019-09-30 23:26:27 +01:00
0288649fc2
rename juniper variables
2019-09-30 15:03:38 -04:00
026f9cbd96
Land #12354 , Remove unused targets from aux and post modules
2019-09-25 07:40:06 -05:00
a587668b9e
Remove Default targets from aux modules
2019-09-24 12:15:43 +01:00
0ed09cc9bf
Land #11927 , Add Brocade post module and config parser
2019-09-24 05:59:21 -05:00
134765dc40
Remove targets from aux modules
2019-09-23 15:29:38 +01:00
789c017135
Land #12059 , cisco_dcnm_download aux module
2019-08-30 13:35:00 -05:00
f9ddc1d18f
Make more changes
2019-08-29 12:15:20 +07:00
b96d9c75ac
make requested changes
2019-08-29 11:05:57 +07:00
32334c2386
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
dee7e9d690
moved module to another directory
2019-08-15 11:01:53 +02:00
5e45c3e469
Recoded the tool to a scanner.
2019-08-14 13:32:11 +02:00
eab38b8b21
make requested changes
2019-08-02 22:49:43 +01:00
Clément Notin