adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
478cd2ed5c4e4651a5fa4e9ed7ccf8fb795bd2cf
metasploit-gs/modules/auxiliary/scanner/http
T
History
wchen-r7 6e65d1d871 Land #6411, chinese caidao asp/aspx/php backdoor bruteforce
2016-01-06 12:03:17 -06:00
..
a10networks_ax_directory_traversal.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
accellion_fta_statecode_file_read.rb
Give msftidy a cookie
2015-07-10 11:28:10 -05:00
adobe_xml_inject.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
allegro_rompager_misfortune_cookie.rb
Land #4566, Misfortune Cookie scanner improvements
2015-03-17 12:32:35 -05:00
apache_activemq_source_disclosure.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
apache_activemq_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
apache_mod_cgi_bash_env.rb
Update Shellshock modules, add Advantech coverage
2015-12-01 10:40:46 -06:00
apache_userdir_enum.rb
Follow redirects in apache_userdir_enum
2015-11-25 13:27:06 -06:00
appletv_login.rb
Remove redundant params now provided by the mixin helper
2015-02-22 02:32:28 -06:00
atlassian_crowd_fileaccess.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
axis_local_file_include.rb
Fix axis_local_file_include for full_uri
2015-11-25 11:16:59 -06:00
axis_login.rb
Remove credits to Alligator Security Team
2015-04-02 15:12:22 -05:00
backup_file.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
barracuda_directory_traversal.rb
Fix barracuda_directory_traversal for full_uri
2015-11-25 11:18:17 -06:00
bitweaver_overlay_type_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
blind_sql_query.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
bmc_trackit_passwd_reset.rb
fix all duplicated keys in modules
2015-03-14 13:10:42 +01:00
brute_dirs.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
buffalo_login.rb
Remove redundant params now provided by the mixin helper
2015-02-22 02:32:28 -06:00
caidao_bruteforce_login.rb
Do not support username, because the backdoor doesn't use one
2016-01-06 02:02:11 -06:00
canon_wireless.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
cert.rb
Fix the regex flags
2015-09-01 23:07:48 -05:00
chef_webui_login.rb
Remove redundant params now provided by the mixin helper
2015-02-22 02:32:28 -06:00
chromecast_webserver.rb
Be less stupid in the description
2015-02-17 13:04:26 -06:00
cisco_asa_asdm.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
cisco_device_manager.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
cisco_ios_auth_bypass.rb
Remove bad references (dead links)
2015-10-27 12:41:32 -05:00
cisco_ironport_enum.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
cisco_nac_manager_traversal.rb
Remove bad references (dead links)
2015-10-27 12:41:32 -05:00
cisco_ssl_vpn_priv_esc.rb
Correct some authors with unbalanced angle brackets
2015-11-06 13:24:58 -08:00
cisco_ssl_vpn.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
clansphere_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
coldfusion_locale_traversal.rb
Remove bad references (dead links)
2015-10-27 12:41:32 -05:00
coldfusion_version.rb
Deprecate cold_fusion_version. Please use coldfusion_version.
2015-05-28 15:39:14 -05:00
concrete5_member_list.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
copy_of_file.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
crawler.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
dell_idrac.rb
Use the latest credential API, no more report_auth_info
2015-09-04 03:04:14 -05:00
dir_listing.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
dir_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
dir_webdav_unicode_bypass.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
dlink_dir_300_615_http_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
dlink_dir_615h_http_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
dlink_dir_session_cgi_http_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
dlink_user_agent_backdoor.rb
Spell 'D-Link' correctly
2015-10-12 17:12:01 -05:00
dolibarr_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
drupal_views_user_enum.rb
Add newline back in
2015-10-05 11:42:58 -05:00
ektron_cms400net.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
elasticsearch_traversal.rb
Fix check
2015-10-16 10:59:04 -05:00
enum_wayback.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
error_sql_injection.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
etherpad_duo_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
f5_bigip_virtual_server.rb
Fixed some minor errors
2015-05-10 02:59:57 -04:00
f5_mgmt_scanner.rb
Use timeout options
2015-05-08 15:23:08 -05:00
file_same_name_dir.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
files_dir.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
frontpage_login.rb
Update frontpage_login.rb
2014-11-28 17:21:47 +00:00
git_scanner.rb
Remove WmapScanServer mixin; not needed
2015-11-25 11:38:32 -08:00
gitlab_login.rb
Clean up info hash formatting
2015-03-20 17:26:21 -05:00
gitlab_user_enum.rb
Clean up info hash formatting
2015-03-20 17:26:21 -05:00
glassfish_login.rb
Remove symbols that aren't used
2015-03-19 14:14:01 -05:00
goahead_traversal.rb
Fix current msftidy warnings about PACKETSTORM vs URL
2015-12-24 09:05:02 -08:00
groupwise_agents_http_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
host_header_injection.rb
Clean up module
2015-10-13 12:03:41 -05:00
hp_imc_bims_downloadservlet_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_imc_faultdownloadservlet_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_imc_ictdownloadservlet_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_imc_reportimgservlt_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_imc_som_file_download.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_sitescope_getfileinternal_fileaccess.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_sitescope_getsitescopeconfiguration.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_sitescope_loadfilecontent_fileaccess.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
hp_sys_mgmt_login.rb
Land #4812, hp_sys_mgmt_login configurable URIs
2015-02-23 19:04:14 -06:00
http_header.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
http_hsts.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
http_login.rb
Show the IP address if it doesn't match the VHOST
2015-09-03 11:35:38 -05:00
http_put.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
http_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
http_version.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
httpbl_lookup.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
iis_internal_ip.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
influxdb_enum.rb
Minor fixups on recent modules.
2015-05-26 17:00:10 -05:00
infovista_enum.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
ipboard_login.rb
Remove redundant params now provided by the mixin helper
2015-02-22 02:32:28 -06:00
jboss_status.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
jboss_vulnscan.rb
Do minor cleanup
2015-05-01 17:37:45 -05:00
jenkins_enum.rb
Module cleanup
2015-07-11 19:40:21 +01:00
jenkins_login.rb
Fix #5315, User configurable options for jenkins_login
2015-05-11 10:15:49 -05:00
joomla_bruteforce_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
joomla_ecommercewd_sqli_scanner.rb
add TARGETURI datastore option
2015-03-28 15:46:41 -05:00
joomla_gallerywd_sqli_scanner.rb
update stale references
2015-03-30 17:17:48 -05:00
joomla_pages.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
joomla_plugins.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
joomla_version.rb
Add Joomla mixin
2015-12-18 21:14:04 -06:00
linksys_e1500_traversal.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
litespeed_source_disclosure.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
lucky_punch.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
majordomo2_directory_traversal.rb
Remove bad references (dead links)
2015-10-27 12:41:32 -05:00
manageengine_desktop_central_login.rb
Do minor style fixes
2015-05-01 15:01:13 -05:00
manageengine_deviceexpert_traversal.rb
Remove bad references (dead links)
2015-10-27 12:41:32 -05:00
manageengine_deviceexpert_user_creds.rb
Fix a small typo - OSVDB instead of OSVBD.
2015-07-31 02:23:19 -03:00
manageengine_securitymanager_traversal.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
mediawiki_svg_fileaccess.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
mod_negotiation_brute.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
mod_negotiation_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
ms09_020_webdav_unicode_bypass.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
ms15_034_http_sys_memory_dump.rb
This is better
2015-07-23 20:51:21 -05:00
mybook_live_login.rb
Remove redundant params now provided by the mixin helper
2015-02-22 02:32:28 -06:00
netdecision_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
netgear_sph200d_traversal.rb
Fix #6362, avoid overriding def peer repeatedly
2015-12-23 11:44:55 -06:00
nginx_source_disclosure.rb
Fix nginx_source_disclosure for full_uri
2015-11-25 11:19:27 -06:00
novell_file_reporter_fsfui_fileaccess.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
novell_file_reporter_srs_fileaccess.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
novell_mdm_creds.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
ntlm_info_enumeration.rb
Replaced 'and' with '&&'
2015-07-28 14:14:25 -05:00
open_proxy.rb
Take care of modules using the 'DEBUG' option
2015-04-21 12:13:40 -05:00
openmind_messageos_login.rb
Use the latest credential API, no more report_auth_info
2015-09-04 03:04:14 -05:00
options.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
oracle_demantra_database_credentials_leak.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
oracle_demantra_file_retrieval.rb
first fail_with fixes
2015-04-16 21:08:33 +02:00
oracle_ilom_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
owa_iis_internal_ip.rb
Addressed most of @wvu's issues with #5312
2015-05-06 14:47:08 -05:00
owa_login.rb
Add Usernames to Creds Database with owa_login.rb
2015-12-03 09:31:36 -07:00
pocketpad_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
prev_dir_same_name_file.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
radware_appdirector_enum.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
rails_json_yaml_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
rails_mass_assignment.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
rails_xml_yaml_scanner.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
replace_ext.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
rewrite_proxy_bypass.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
rfcode_reader_enum.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
rips_traversal.rb
Make depth an option
2015-04-03 15:33:27 -05:00
robots_txt.rb
Take care of modules using the 'DEBUG' option
2015-04-21 12:13:40 -05:00
s40_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
sap_businessobjects_user_brute_web.rb
More metasploit-credential update
2015-07-23 15:50:50 -05:00
sap_businessobjects_user_brute.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
sap_businessobjects_user_enum.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
sap_businessobjects_version_enum.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
scraper.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
sentry_cdu_enum.rb
More metasploit-credential update
2015-07-23 15:50:50 -05:00
servicedesk_plus_traversal.rb
Change error message to avoid an undef method bug
2015-10-07 15:23:29 -05:00
sevone_enum.rb
More metasploit-credential update
2015-07-23 15:50:50 -05:00
simple_webserver_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
smt_ipmi_49152_exposure.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
smt_ipmi_cgi_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
smt_ipmi_static_cert_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
smt_ipmi_url_redirect_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
soap_xml.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
sockso_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
splunk_web_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
squid_pivot_scanning.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
squiz_matrix_user_enum.rb
Fix squiz_matrix_user_enum for full_uri
2015-11-25 11:28:53 -06:00
ssl_version.rb
Remove unnecessary {,dis}connect
2015-04-28 15:09:16 -05:00
ssl.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
support_center_plus_directory_traversal.rb
Fix current msftidy warnings about PACKETSTORM vs URL
2015-12-24 09:05:02 -08:00
svn_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
svn_wcdb_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
sybase_easerver_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
symantec_brightmail_logfile.rb
Module cleanup
2015-07-11 19:40:21 +01:00
symantec_web_gateway_login.rb
end is not aligned with def
2016-01-05 14:07:43 +08:00
titan_ftp_admin_pwd.rb
Correctly report rport
2015-06-15 03:23:39 -05:00
title.rb
Minor fixups on recent modules.
2015-05-26 17:00:10 -05:00
tomcat_enum.rb
Fix tomcat_enum for full_uri
2015-11-25 11:28:56 -06:00
tomcat_mgr_login.rb
Remove redundant params now provided by the mixin helper
2015-02-22 02:32:28 -06:00
tplink_traversal_noauth.rb
Remove bad references (dead links)
2015-10-27 12:41:32 -05:00
trace_axd.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
trace.rb
Cleanup and tweaks
2015-09-02 12:48:53 -05:00
typo3_bruteforce.rb
Update moduels using Msf::HTTP::Typo3
2015-10-15 11:48:27 -05:00
vcms_login.rb
Modate update on using metasploit-credential
2015-07-23 18:07:19 -05:00
verb_auth_bypass.rb
Clean up module
2015-09-30 22:37:03 -05:00
vhost_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
wangkongbao_traversal.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
web_vulndb.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
webdav_internal_ip.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
webdav_scanner.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
webdav_website_content.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
webpagetest_traversal.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
wildfly_traversal.rb
Delete version from title
2014-12-01 10:24:12 -06:00
wordpress_cp_calendar_sqli.rb
Bring module title in line with other WP modules.
2015-11-22 13:39:45 +11:00
wordpress_ghost_scanner.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wordpress_login_enum.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wordpress_pingback_access.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wordpress_scanner.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wordpress_xmlrpc_login.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wp_contus_video_gallery_sqli.rb
Bring module title in line with other WP modules.
2015-11-22 13:39:45 +11:00
wp_dukapress_file_read.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wp_gimedia_library_file_read.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wp_mobile_pack_info_disclosure.rb
Update msftidy to catch more potential URL vs PACKETSTORM warnings
2015-12-24 09:12:24 -08:00
wp_mobileedition_file_read.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wp_nextgen_galley_file_read.rb
Update moduels using Msf::HTTP::Wordpress
2015-10-15 11:47:13 -05:00
wp_simple_backup_file_read.rb
Fix Packetstorm references
2015-10-15 12:42:59 -05:00
wp_subscribe_comments_file_read.rb
Fix Packetstorm references
2015-10-15 12:42:59 -05:00
xpath.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
yaws_traversal.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
zabbix_login.rb
yard doc and comment corrections for auxiliary
2015-04-03 16:12:23 +05:00
zenworks_assetmanagement_fileaccess.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00
zenworks_assetmanagement_getconfig.rb
Fix up comment splats with the correct URI
2014-10-17 11:47:33 -05:00