 Spencer McIntyre
|
ecd3c0f820
|
Minor doc changes, add module notes and SQLi progress output
|
2020-05-21 16:31:45 -04:00 |
|
|
kalba-security
|
7c2c227ea0
|
Improve version checks, remove comments from previous testing
|
2020-05-20 18:06:42 -04:00 |
|
|
kalba-security
|
6d72fe4854
|
Update eyesofnetwork_autodiscovery_rce module and documentation
|
2020-05-19 11:48:48 -04:00 |
|
|
William Vu
|
235f822937
|
Add Netsweeper WebAdmin unixlogin.php pre-auth RCE
|
2020-05-12 08:34:20 -05:00 |
|
|
Pedro Ribeiro
|
d31ddadd74
|
Fix advisory link in Qradar sploit
|
2020-05-09 14:59:43 +07:00 |
|
|
William Vu
|
e0a67f4fd1
|
Land #13300, IBM DRM RCE
|
2020-05-05 12:07:15 -05:00 |
|
|
Pedro Ribeiro
|
a17d78a327
|
Address review comments
Update documentation/modules/exploit/linux/http/ibm_drm_rce.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update documentation/modules/exploit/linux/http/ibm_drm_rce.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update documentation/modules/exploit/linux/http/ibm_drm_rce.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update ibm_drm_rce.md
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
make final changes!
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
final final final
|
2020-05-05 10:53:08 -05:00 |
|
|
Pedro Ribeiro
|
5651f4ae75
|
break into small chunks
|
2020-05-05 10:01:40 +07:00 |
|
|
Pedro Ribeiro
|
dcf9dc1189
|
add full disclosure URL
|
2020-05-01 21:02:32 +07:00 |
|
|
Pedro Ribeiro
|
af88fae6f3
|
add CVE
|
2020-05-01 10:17:17 +07:00 |
|
|
Pedro Ribeiro
|
d28a886c51
|
remove CVE for merge, will add later
|
2020-04-30 11:15:11 +07:00 |
|
|
Pedro Ribeiro
|
e79fa7ca94
|
Update ibm_drm_rce.rb
|
2020-04-28 14:12:38 +07:00 |
|
|
Pedro Ribeiro
|
a29b05c453
|
add proper check + rubocup changes
|
2020-04-24 10:20:10 +07:00 |
|
|
William Vu
|
823c29a127
|
Update post-RuboCop style in my recent modules
Mostly 80 columns (yeah, I know) and additional whitespace to complement
the lack of alignment.
|
2020-04-22 10:52:00 -05:00 |
|
|
Pedro Ribeiro
|
8f5d6e4fa4
|
Create ibm_drm_rce.rb
|
2020-04-21 15:49:48 +07:00 |
|
|
William Vu
|
c5df5355ac
|
Update my module documentation to the new standard
Also update CheckModule to match current style and best practices.
|
2020-04-20 20:06:52 -05:00 |
|
|
Alan Foster
|
f2c3fc5f00
|
Rubocop recently landed modules
|
2020-04-17 11:55:04 +01:00 |
|
|
gwillcox-r7
|
d759fbaed3
|
Land #13259, Miscellaneous fixes for @wvu's modules and documentation
|
2020-04-16 22:10:10 -05:00 |
|
|
William Vu
|
966194d2b7
|
Remove tested admin password from default PASSWORD
|
2020-04-16 21:45:44 -05:00 |
|
|
bwatters-r7
|
b5df7e8147
|
Land #13102, Add UnRAID 6.8.0 Authentication bypass to RCE
Merge branch 'land-13102' into upstream-master
|
2020-04-16 17:18:55 -05:00 |
|
|
bwatters-r7
|
f0f403b48e
|
Automated Rubocop fixes
|
2020-04-16 17:17:02 -05:00 |
|
|
William Vu
|
cd9e5260f7
|
Note post-auth requirements in Nexus exploit
|
2020-04-15 20:25:05 -05:00 |
|
|
William Vu
|
4401e3654f
|
Merge remote-tracking branch 'upstream/master' into bug/misc
So we can grab the Nexus files from master.
|
2020-04-15 20:24:44 -05:00 |
|
|
William Vu
|
0684966dcb
|
Make better comments for the comment god
|
2020-04-15 18:24:28 -05:00 |
|
|
William Vu
|
b7501c1f0c
|
Add my standard print for CmdStager
And comment some methods used by it.
|
2020-04-15 18:06:48 -05:00 |
|
|
William Vu
|
6db312636d
|
Add Nexus Repository Manager Java EL Injection RCE
|
2020-04-15 15:49:33 -05:00 |
|
|
William Vu
|
66d5f51e51
|
Remove Nexus content from this branch
So the remaining changes can be PR'd separately.
|
2020-04-15 15:48:09 -05:00 |
|
|
William Vu
|
e8840563be
|
Comment comments
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
65d338d00e
|
Note tested version in module
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
5a91a1e54f
|
Remove res.code == 200 check again
It really isn't necessary when we're looking for just the header.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
7dd3be507f
|
Add wget CmdStager
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
e248e2ed43
|
Consolidate CmdStager flavors to symbols
As per the API. Strings are fine, but they're supposed to be symbols.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
99336f6bd3
|
Add ARTIFACTS_ON_DISK, since it uses CmdStager
Whoops, forgot this when I changed it from ARCH_CMD.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
d9aa80268d
|
Rearrange methods a bit
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
e6c42448b2
|
Add res.code check to match prior commit
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
df992bf94b
|
Note compromised user less specifically
This is just what was configured in the Docker container.
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
ae4af1a4f0
|
Format Java EL expression nicely
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
baae9db092
|
Fix some more things
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
6275b16b04
|
Fix some things
|
2020-04-15 15:47:50 -05:00 |
|
|
wvu-r7
|
1ce6c310ba
|
Escape double quotes in EL payload
|
2020-04-15 15:47:50 -05:00 |
|
|
wvu-r7
|
143d8463ec
|
Prefer include? for NXSESSIONID=
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
45263b8aa5
|
Add Nexus Repository Manager Java EL Injection RCE
|
2020-04-15 15:47:50 -05:00 |
|
|
gwillcox-r7
|
0858178c09
|
Add cleanup support and update description
|
2020-04-14 13:27:25 -05:00 |
|
|
gwillcox-r7
|
c151b93ba4
|
Fix up clarity and spelling issues in module and documentation
|
2020-04-13 16:28:39 -05:00 |
|
|
Mehmet İnce
|
b7a1fbdde2
|
Fixed documentation and login method
|
2020-04-13 18:55:56 +03:00 |
|
|
Mehmet İnce
|
706a395bc0
|
Fixed 2nd round of suggested changes
|
2020-04-13 11:22:02 +03:00 |
|
|
Mehmet İnce
|
d906c3dc77
|
Fixed reviews suggestions
|
2020-04-11 14:38:19 +03:00 |
|
|
Mehmet İnce
|
eb7d2f821d
|
Adding CVE number
Signed-off-by: Mehmet İnce <mehmet@mehmetince.net>
|
2020-04-11 12:22:17 +03:00 |
|
|
Mehmet İnce
|
5d04c2b4a5
|
Adding documentation and module description
Signed-off-by: Mehmet İnce <mehmet@mehmetince.net>
|
2020-04-11 12:22:17 +03:00 |
|
|
Mehmet İnce
|
7c2f65da36
|
Adding vestacp exec
Signed-off-by: Mehmet İnce <mehmet@mehmetince.net>
|
2020-04-11 12:22:17 +03:00 |
|