ismaildawoodjee 1706812099 Implemented requested changes ...

* Small fixes in Description - removed backticks
* Implemented Windows Command target
* Removed PowerShell Stager, in Targets and in exploit method
* Implemented Rex::Socket::Tcp in place of TCPSocket

* Updated TARGET section in documentation
* Added TARGET 0 - Windows Command scenario
* Removed PowerShell Stager scenario
* Replaced 'Using configured payload' lines to use Windows Command payload
  for the 2nd, 3rd, and 4th scenarios. Did not rerun the scenarios, however

2023-07-07 04:14:20 -04:00

..

advantech_iview_networkservlet_cmd_inject.md

add finished module and docs

2022-07-21 18:33:56 -05:00

advantech_iview_unauth_rce.md

Fix typos

2021-03-22 14:16:45 -05:00

apache_activemq_traversal_upload.md

Add suggestions from code review.

2020-03-03 20:17:13 +02:00

apache_tika_jp2_jscript.md

tika 1.15-1.17

2019-07-30 16:55:06 -04:00

cayin_xpost_sql_rce.md

review comments

2020-06-17 11:47:11 -04:00

desktopcentral_deserialization.md

Backport miscellaneous fixes to my modules

2020-08-14 13:40:23 -05:00

disk_pulse_enterprise_get.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

diskboss_get_bof.md

Minor documentation improvements

2017-01-11 08:00:12 +01:00

disksavvy_get_bof.md

Add module for DiskSavvy Enterprise (EDB-40854)

2017-01-19 20:34:00 +01:00

disksorter_bof.md

Rename disksorter_bof.rb.md to disksorter_bof.md

2017-04-24 21:58:37 +01:00

dlink_central_wifimanager_rce.md

fix case of first character of sentence

2020-08-17 21:06:18 +02:00

dnn_cookie_deserialization_rce.md

Fix Meterpreter spelling mistake

2021-10-12 23:40:43 +01:00

dup_scout_enterprise_login_bof.md

dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting

2021-02-25 17:14:25 +00:00

dupscts_bof.md

dupscts_bof: Add additional targets and auto targeting

2021-02-25 17:12:27 +00:00

easychatserver_seh.md

fix some module documentation

2017-07-23 07:46:52 -07:00

easyfilesharing_post.md

fix some module documentation

2017-07-23 07:46:52 -07:00

ektron_xslt_exec_ws.md

…

exchange_chainedserializationbinder_rce.md

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00

exchange_ecp_dlp_policy.md

Fix a target version discrepancy in the CVE-2020-17132 docs

2021-02-11 18:04:03 -05:00

exchange_ecp_viewstate.md

Add a DOMAIN option to CVE-2020-0688 for consistency with other modules

2020-09-28 09:24:39 -04:00

exchange_proxylogon_rce.md

Tweak some ProxyLogon verbiage for clarity

2021-03-29 10:07:43 -04:00

exchange_proxynotshell_rce.md

Add the MaxBackendRetries datastore option

2022-11-28 09:45:04 -05:00

exchange_proxyshell_rce.md

Add the MaxBackendRetries datastore option

2022-11-28 09:45:04 -05:00

file_sharing_wizard_seh.md

Add module docs

2019-10-03 23:22:21 +01:00

flexdotnetcms_upload_exec.md

Add CVE ID

2020-11-05 06:55:37 -05:00

fortilogger_arbitrary_fileupload.md

Add warning for failures after rebooting to the documentation.

2021-03-24 17:32:08 -05:00

geutebrueck_gcore_x64_rce_bo.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

git_lfs_rce.md

Updated docs

2021-09-07 13:55:21 -04:00

gitstack_rce.md

Update gitstack_rce.md

2018-03-27 12:59:49 -05:00

hp_imc_java_deserialize.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

hpe_sim_76_amf_deserialization.md

Rubocop module again and also update the documentation to reflect recent changes

2021-03-08 16:08:36 -06:00

ivanti_avalanche_filestoreconfig_upload.md

Add more documentation on how to set the target up based on my own experience and so that we have a backup in case the link to external documentation breaks

2023-05-12 14:27:39 -05:00

kentico_staging_syncserver.md

Add CmdStager and Powershell targets to the Kentico RCE exploit

2020-05-04 10:07:10 -04:00

manage_engine_opmanager_rce.md

Add markdown docs.

2017-06-20 17:45:44 -05:00

manageengine_adaudit_plus_authenticated_rce.md

Add in notes about reliability of the module, and also add documentation on 7005 test on Windows 2022

2023-05-08 12:11:01 -05:00

manageengine_adaudit_plus_cve_2022_28219.md

make some prints vprints, add steps

2022-08-05 11:34:46 -05:00

manageengine_admanager_plus_cve_2023_29084_auth_cmd_injection.md

Add in ability to restore settings n documentation changes.

2023-06-02 09:48:03 -05:00

manageengine_adselfservice_plus_cve_2021_40539.md

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00

manageengine_adselfservice_plus_cve_2022_28810.md

Improve JSON cleanup, fix jjs specific wording, and moved JJS_PATH to defaultoptions

2022-04-20 06:27:43 -07:00

manageengine_adshacluster_rce.md

Fixed #16674

2022-10-07 14:35:21 -04:00

manageengine_appmanager_exec.md

module doc standardizations

2020-01-20 21:26:59 -05:00

manageengine_connectionid_write.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

manageengine_endpoint_central_saml_rce_cve_2022_47966.md

sync documentation

2023-02-06 06:56:59 +00:00

manageengine_servicedesk_plus_cve_2021_44077.md

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00

moveit_cve_2023_34362.md

Tweak some messages and cleanup markdown table

2023-06-22 14:23:25 -04:00

netmotion_mobility_mvcutil_deserialization.md

Backport print changes to recent modules

2021-07-08 21:26:35 -05:00

nscp_authenticated_rce.md

rubocop for documentation is ok

2021-06-09 09:08:19 +02:00

oats_weblogic_console.md

module doc standardizations

2020-01-20 21:26:59 -05:00

octopusdeploy_deploy.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

plesk_mylittleadmin_viewstate.md

Backport miscellaneous fixes to my modules

2020-08-14 13:40:23 -05:00

plex_unpickle_dict_rce.md

Update docs for installation of target software

2020-07-16 10:16:48 -05:00

prtg_authenticated_rce.md

Add documentation

2021-01-18 12:02:46 +01:00

serviio_checkstreamurl_cmd_exec.md

sample output to scenarios conversion in docs

2017-05-31 21:21:38 -04:00

sharepoint_data_deserialization.md

Fix a bunch of documentation typos and minor code cleanups

2020-07-29 16:30:44 -04:00

sharepoint_ssi_viewstate.md

Add the module docs

2021-06-08 15:23:24 -04:00

sharepoint_unsafe_control.md

Implement changes based on PR feedback

2021-06-14 10:15:27 -04:00

sharepoint_workflows_xoml.md

Use the correct its instead of it's

2020-03-24 16:44:18 -04:00

sitecore_xp_cve_2021_42237.md

Fix one more mistake and rename document and module to a more easy to find name

2021-11-11 16:42:58 -06:00

smartermail_rce.md

Implemented requested changes

2023-07-07 04:14:20 -04:00

ssrs_navcorrector_viewstate.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

syncbreeze_bof.md

Land #9269, add new target for Sync Breeze Enterprise GET BoF

2018-01-11 16:53:02 -06:00

telerik_rau_deserialization.md

Add module documentation for Telerik RAU Deserialization

2020-10-07 13:40:10 -04:00

tomcat_cgi_cmdlineargs.md

add cmdlineargs example

2019-07-01 17:19:04 -04:00

trendmicro_officescan_widget_exec.md

fixing docs

2017-10-09 20:31:23 -04:00

vxsrchs_bof.md

Fix md header in vxsrchs_bof doc

2018-02-02 13:24:35 -05:00

zentao_pro_rce.md

add bcoles suggestions

2020-07-22 09:39:17 -05:00

zoho_password_manager_pro_xml_rpc_rce.md

Update options section in documentation

2022-08-02 14:13:25 -05:00