metasploit-gs

Files

T

svnsyn 790f388fb3 I want to contribute a module for generating remember cookies for grafana instances where ldap or oauth is used.

These cookies can be used for authentication bypass, like its explained here:

https://github.com/u238/grafana-CVE-2018-15727
https://grafana.com/blog/2019/04/29/grafana-5.4.4-and-6.1.6-released-with-important-security-fix/

The module takes a username and generates a bad salted cookie.
It also takes one of these cookies to decrypt the username out of it.

Both cookies has to be set where as an existing session cookie should have been deleted before getting access.

I wrote it in python since I had a lot of different results while calculating this task comparing the go and ruby crypto libraries.

2019-07-31 18:59:00 +02:00

auxiliary

I want to contribute a module for generating remember cookies for grafana instances where ldap or oauth is used.

2019-07-31 18:59:00 +02:00

encoders

Create xor_context.rb

2019-07-01 10:36:08 +02:00

evasion/windows

Cosmetic changes

2019-07-23 13:28:15 -05:00

exploits

Land #12107 , Add module Redis Unauthenticated Code Execution