Valentin Lobstein 44cf2e309f Add Flowise RCE exploits (CVE-2025-59528, CVE-2025-8943) with shared mixin, documentation, and Docker Compose setup

2025-11-19 22:12:49 +01:00

..

cmd_stager

Update Java::HTTP::ClassLoader and CmdStager::HTTP

2024-06-13 16:39:24 +02:00

format

added MIME, added break in mixin and added link with installation instructions

2023-03-09 09:28:46 -06:00

git

Add in additional YARD documentation fixes

2023-03-05 20:56:54 -06:00

local

adjustments to the persistence lib and modules

2025-09-09 10:02:06 -04:00

powershell

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

remote

Add Flowise RCE exploits (CVE-2025-59528, CVE-2025-8943) with shared mixin, documentation, and Docker Compose setup

2025-11-19 22:12:49 +01:00

smb

Update smb_shadow and shadow_mitm_dispatcher

2022-04-05 20:03:14 +09:00

sqli

Rubocop: Resolve Rubocop Style/RedundantRegexpArgument violations

2025-05-24 13:34:32 +10:00

android.rb

Specify mode rb on file reads

2022-02-12 21:39:12 +00:00

auto_target.rb

…

brute_targets.rb

…

brute.rb

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

cacti.rb

Code review

2024-06-12 19:47:02 +02:00

capture.rb

Update windows acceptance tests

2024-06-13 18:05:30 +01:00

cmd_stager.rb

Update Java::HTTP::ClassLoader and CmdStager::HTTP

2024-06-13 16:39:24 +02:00

dect_coa.rb

…

dhcp_server.rb

…

egghunter.rb

…

exe.rb

Consistently use the same technique for exe-service

2025-08-28 17:39:57 -04:00

file_dropper.rb

file_dropper_exist? needs to test if teh path if either a file or a directory, the logic for shell sessions on wqindows is testing if a path if a file and not a directory. this is wrong. Origionally FileDropper only supported cleaningup files, so this logic made sense (it was copied over from teh File post moduile) but FileDropper has since supported directories so teh logic here neds to reflect that.

2024-02-19 09:12:17 +00:00

fileformat.rb

…

format_string.rb

…

git.rb

…

http.rb

…

java_deserialization.rb

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

java.rb

Implement infrastructure for payload delivery

2021-12-29 09:10:07 -05:00

jsobfu.rb

…

kernel_mode.rb

…

laravel_crypto_killer.rb

added code sugesstions from dledda-r7

2025-02-24 15:51:32 +00:00

local.rb

…

ntlm.rb

…

omelet.rb

…

oracle.rb

…

pdf_parse.rb

Fix file reads on Windows for binary files

2022-03-21 12:47:39 +00:00

pdf.rb

…

pgadmin.rb

Update lib/msf/core/exploit/pgadmin.rb

2025-04-17 08:01:15 -07:00

php_exe.rb

Major refactoring of PHP payloads and related exploits

2025-05-30 09:06:38 -04:00

powershell.rb

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

remote.rb

…

retry.rb

Rename the function to emphasize truthy

2022-05-13 09:16:01 -04:00

riff.rb

…

rop_db.rb

…

ruby_deserialization.rb

It made the gadgets being used more readable

2022-12-06 17:47:49 +01:00

seh.rb

…

sqli.rb

…

tftp_server.rb

…

vbsobfuscate.rb

Msf::Exploit::VBSObfuscate: Add VBS obfuscation library

2025-09-26 03:06:20 +10:00

view_state.rb

Move viewstate signing logic into Rex

2024-02-27 14:37:55 -05:00

wbem_exec.rb

…

windows_constants.rb

…