C4ssandre 1fec224bae Adding a new check raised by an unforeseen usecase. I tested the usecase of a webserver on which a malicious user succeeded to upload a meterpreter .exe and execute it by calling its url. The meterpreter sessions belongs to IUSRS, which is not allowed to enumerate services. Thus the exploit fails, but checks pass. So added new checks for filtering this usecase.

2020-12-11 05:22:37 -05:00

..

auxiliary

Land #13985, add Cisco ssh dos module

2020-08-21 15:45:27 -05:00

encoders

RuboCop unicode_upper.rb and unicode_mixed.rb

2020-05-02 21:51:05 -05:00

evasion/windows

Land #12176 - Add evasion module applocker_evasion_regasm_regsvcs

2019-09-17 10:20:56 -05:00

exploits

Adding a new check raised by an unforeseen usecase. I tested the usecase of a webserver on which a malicious user succeeded to upload a meterpreter .exe and execute it by calling its url. The meterpreter sessions belongs to IUSRS, which is not allowed to enumerate services. Thus the exploit fails, but checks pass. So added new checks for filtering this usecase.

2020-12-11 05:22:37 -05:00

nops

…

payloads

update payload sizes for mettle 1.0.2 gem

2020-08-03 12:32:33 -05:00

post

review comments

2020-08-20 10:26:13 -05:00