adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
5d1ee84cb080f15aed0c991fa1da9504bc0d132d
metasploit-gs/modules/exploits/windows/http
T
History
Christophe De La Fuente 2f238fcd24 Code review
2024-06-21 10:13:08 +02:00
..
adobe_robohelper_authbypass.rb
…
advantech_iview_networkservlet_cmd_inject.rb
…
advantech_iview_unauth_rce.rb
…
ajaxpro_deserialization_rce.rb
Apply Code Suggestions from review
2023-11-03 00:04:20 +08:00
altn_securitygateway.rb
…
altn_webadmin.rb
…
amlibweb_webquerydll_app.rb
…
apache_activemq_traversal_upload.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
apache_chunked.rb
…
apache_mod_rewrite_ldap.rb
…
apache_modjk_overflow.rb
…
apache_tika_jp2_jscript.rb
…
avaya_ccr_imageupload_exec.rb
…
badblue_ext_overflow.rb
…
badblue_passthru.rb
…
bea_weblogic_jsessionid.rb
…
bea_weblogic_post_bof.rb
…
bea_weblogic_transfer_encoding.rb
…
belkin_bulldog.rb
…
ca_arcserve_rpc_authbypass.rb
…
ca_igateway_debug.rb
…
ca_totaldefense_regeneratereports.rb
…
cayin_xpost_sql_rce.rb
…
cogent_datahub_command.rb
…
cogent_datahub_request_headers_bof.rb
…
coldfusion_fckeditor.rb
…
cyclope_ess_sqli.rb
…
desktopcentral_deserialization.rb
tests passing
2023-04-04 10:24:09 +01:00
desktopcentral_file_upload.rb
…
desktopcentral_statusupdate_upload.rb
…
disk_pulse_enterprise_bof.rb
…
disk_pulse_enterprise_get.rb
…
diskboss_get_bof.rb
…
disksavvy_get_bof.rb
…
disksorter_bof.rb
…
dlink_central_wifimanager_rce.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
dnn_cookie_deserialization_rce.rb
Appease msftidy
2024-06-18 09:23:41 -04:00
dup_scout_enterprise_login_bof.rb
…
dupscts_bof.rb
…
easychatserver_seh.rb
…
easyfilesharing_post.rb
…
easyfilesharing_seh.rb
…
easyftp_list.rb
…
edirectory_host.rb
…
edirectory_imonitor.rb
…
efs_easychatserver_username.rb
…
efs_fmws_userid_bof.rb
…
ektron_xslt_exec_ws.rb
…
ektron_xslt_exec.rb
…
ericom_access_now_bof.rb
…
exchange_chainedserializationbinder_rce.rb
…
exchange_ecp_dlp_policy.rb
…
exchange_ecp_viewstate.rb
…
exchange_proxylogon_rce.rb
Run rubocop on exploit modules
2023-02-08 15:20:32 +00:00
exchange_proxynotshell_rce.rb
Change an exception class and drop DOMAIN passing
2022-11-28 10:06:14 -05:00
exchange_proxyshell_rce.rb
Fix enumerating emails via ProxyShell
2022-12-02 15:58:50 -05:00
ezserver_http.rb
…
fdm_auth_header.rb
…
file_sharing_wizard_seh.rb
…
flexdotnetcms_upload_exec.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
forticlient_ems_fctid_sqli.rb
FortiClient EMS Exploit Module
2024-04-12 10:00:07 -07:00
fortilogger_arbitrary_fileupload.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
generic_http_dll_injection.rb
…
geutebrueck_gcore_x64_rce_bo.rb
Add https prefix to module URL references
2024-04-17 13:00:41 +01:00
git_lfs_rce.rb
…
gitstack_rce.rb
…
hp_autopass_license_traversal.rb
…
hp_imc_bims_upload.rb
…
hp_imc_java_deserialize.rb
…
hp_imc_mibfileupload.rb
…
hp_loadrunner_copyfiletoserver.rb
…
hp_mpa_job_acct.rb
…
hp_nnm_getnnmdata_hostname.rb
…
hp_nnm_getnnmdata_icount.rb
…
hp_nnm_getnnmdata_maxage.rb
…
hp_nnm_nnmrptconfig_nameparams.rb
…
hp_nnm_nnmrptconfig_schdparams.rb
…
hp_nnm_openview5.rb
…
hp_nnm_ovalarm_lang.rb
…
hp_nnm_ovas.rb
…
hp_nnm_ovbuildpath_textfile.rb
…
hp_nnm_ovwebhelp.rb
…
hp_nnm_ovwebsnmpsrv_main.rb
…
hp_nnm_ovwebsnmpsrv_ovutil.rb
…
hp_nnm_ovwebsnmpsrv_uro.rb
…
hp_nnm_snmp.rb
…
hp_nnm_snmpviewer_actapp.rb
…
hp_nnm_toolbar_01.rb
…
hp_nnm_toolbar_02.rb
…
hp_nnm_webappmon_execvp.rb
…
hp_nnm_webappmon_ovjavalocale.rb
…
hp_openview_insight_backdoor.rb
…
hp_pcm_snac_update_certificates.rb
…
hp_pcm_snac_update_domain.rb
…
hp_power_manager_filename.rb
…
hp_power_manager_login.rb
…
hp_sitescope_dns_tool.rb
…
hp_sitescope_runomagentcommand.rb
…
hpe_sim_76_amf_deserialization.rb
Run rubocop on exploit modules
2023-02-08 15:20:32 +00:00
httpdx_handlepeer.rb
…
httpdx_tolog_format.rb
Add Ruby 3.3.0-preview1 to test suite
2023-06-29 22:53:17 +01:00
ia_webmail.rb
…
ibm_tivoli_endpoint_bof.rb
…
ibm_tpmfosd_overflow.rb
…
ibm_tsm_cad_header.rb
…
icecast_header.rb
…
integard_password_bof.rb
…
intersystems_cache.rb
…
intrasrv_bof.rb
…
ipswitch_wug_maincfgret.rb
…
ivanti_avalanche_filestoreconfig_upload.rb
Fix up checks on responses to make sure they are more robust checks
2023-05-12 16:08:47 -05:00
ivanti_epm_recordgoodapp_sqli_rce.rb
Code review
2024-06-21 10:13:08 +02:00
jira_collector_traversal.rb
…
kaseya_uploader.rb
…
kaseya_uploadimage_file_upload.rb
…
kentico_staging_syncserver.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
kolibri_http.rb
…
landesk_thinkmanagement_upload_asp.rb
…
lexmark_markvision_gfd_upload.rb
…
lg_simple_editor_rce.rb
Update modules/exploits/windows/http/lg_simple_editor_rce.rb
2023-09-07 17:00:17 +00:00
mailenable_auth_header.rb
…
manage_engine_opmanager_rce.rb
…
manageengine_adaudit_plus_authenticated_rce.rb
chore: remove repetitive words
2024-04-15 11:06:50 +08:00
manageengine_adaudit_plus_cve_2022_28219.rb
…
manageengine_admanager_plus_cve_2023_29084_auth_cmd_injection.rb
Fix up supported payloads and remove nonused parameter
2023-06-02 09:48:03 -05:00
manageengine_adselfservice_plus_cve_2021_40539.rb
…
manageengine_adselfservice_plus_cve_2022_28810.rb
…
manageengine_adshacluster_rce.rb
…
manageengine_appmanager_exec.rb
…
manageengine_apps_mngr.rb
…
manageengine_connectionid_write.rb
…
manageengine_endpoint_central_saml_rce_cve_2022_47966.rb
Update other modules to use java_class_loader_start_service and cmdstager_start_service
2024-06-14 12:57:42 +02:00
manageengine_servicedesk_plus_cve_2021_44077.rb
…
maxdb_webdbm_database.rb
…
maxdb_webdbm_get_overflow.rb
…
mcafee_epolicy_source.rb
…
mdaemon_worldclient_form2raw.rb
…
minishare_get_overflow.rb
…
miniweb_upload_wbem.rb
…
moveit_cve_2023_34362.rb
Tweak some messages and cleanup markdown table
2023-06-22 14:23:25 -04:00
navicopa_get_overflow.rb
…
netdecision_http_bof.rb
Update broken secunia references
2023-03-23 10:43:57 +00:00
netgear_nms_rce.rb
Add Netgear NMS RCE (CVE-2023-38096/8) exploit
2023-08-02 18:03:57 +02:00
netmotion_mobility_mvcutil_deserialization.rb
…
northstar_c2_xss_to_agent_rce.rb
add event_dependent to northstar_c2
2024-04-24 16:54:58 -04:00
novell_imanager_upload.rb
…
novell_mdm_lfi.rb
…
novell_messenger_acceptlang.rb
…
nowsms.rb
…
nscp_authenticated_rce.rb
…
oats_weblogic_console.rb
…
octopusdeploy_deploy.rb
…
oracle9i_xdb_pass.rb
…
oracle_beehive_evaluation.rb
…
oracle_beehive_prepareaudiotoplay.rb
…
oracle_btm_writetofile.rb
…
oracle_endeca_exec.rb
…
oracle_event_processing_upload.rb
…
osb_uname_jlist.rb
…
peercast_url.rb
…
php_apache_request_headers_bof.rb
…
php_cgi_arg_injection_rce_cve_2024_4577.rb
fix typo in module description
2024-06-13 15:10:14 +01:00
plesk_mylittleadmin_viewstate.rb
…
plex_unpickle_dict_rce.rb
…
privatewire_gateway.rb
…
prtg_authenticated_rce_cve_2023_32781.rb
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
2024-01-22 10:10:14 +01:00
prtg_authenticated_rce.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
psoproxy91_overflow.rb
…
rabidhamster_r4_log.rb
Update broken secunia references
2023-03-23 10:43:57 +00:00
rejetto_hfs_exec.rb
…
rejetto_hfs_rce_cve_2024_23692.rb
Update modules/exploits/windows/http/rejetto_hfs_rce_cve_2024_23692.rb
2024-06-11 16:26:04 +01:00
sambar6_search_results.rb
…
sap_configservlet_exec_noauth.rb
…
sap_host_control_cmd_exec.rb
…
sapdb_webtools.rb
…
savant_31_overflow.rb
…
sepm_auth_bypass_rce.rb
…
serviio_checkstreamurl_cmd_exec.rb
…
servu_session_cookie.rb
…
sharepoint_data_deserialization.rb
…
sharepoint_dynamic_proxy_generator_auth_bypass_rce.rb
Fixed backup_bdc_metadata initialization
2024-02-15 09:26:54 -05:00
sharepoint_ssi_viewstate.rb
…
sharepoint_unsafe_control.rb
…
sharepoint_workflows_xoml.rb
Run rubocop on exploit modules
2023-02-08 15:20:32 +00:00
shoutcast_format.rb
…
shttpd_post.rb
…
sitecore_xp_cve_2021_42237.rb
…
smartermail_rce.rb
Proper error handling for closing TCP socket and used Rex exceptions
2023-07-09 07:25:09 -04:00
solarwinds_fsm_userlogin.rb
…
solarwinds_storage_manager_sql.rb
…
sonicwall_scrutinizer_sqli.rb
…
ssrs_navcorrector_viewstate.rb
…
steamcast_useragent.rb
…
sws_connection_bof.rb
…
sybase_easerver.rb
…
syncbreeze_bof.rb
…
sysax_create_folder.rb
…
telerik_rau_deserialization.rb
…
telerik_report_server_deserialization.rb
Finish up and document the deserialization RCE
2024-06-12 08:58:37 -04:00
tomcat_cgi_cmdlineargs.rb
…
trackercam_phparg_overflow.rb
…
trackit_file_upload.rb
…
trendmicro_officescan_widget_exec.rb
…
trendmicro_officescan.rb
…
ultraminihttp_bof.rb
…
umbraco_upload_aspx.rb
…
vmware_vcenter_chargeback_upload.rb
…
vxsrchs_bof.rb
…
webster_http.rb
…
ws_ftp_rce_cve_2023_40044.rb
leverage Rex::MIME::Message instead of creating the multipart data manualy
2023-10-04 09:39:25 +01:00
xampp_webdav_upload_php.rb
…
xitami_if_mod_since.rb
…
zentao_pro_rce.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
zenworks_assetmgmt_uploadservlet.rb
…
zenworks_uploadservlet.rb
…
zoho_password_manager_pro_xml_rpc_rce.rb
…