metasploit-gs

activecollab_chat.rb

…

ajaxplorer_checkinstall_exec.rb

…

apache_activemq_upload_jsp.rb

…

apache_jetspeed_file_upload.rb

Fix exploit/multi/http/apache_jetspeed_file_upload

2019-02-25 11:32:06 -06:00

apache_mod_cgi_bash_env_exec.rb

…

apache_roller_ognl_injection.rb

…

apprain_upload_exec.rb

…

atutor_sqli.rb

…

auxilium_upload_exec.rb

…

axis2_deployer.rb

…

bassmaster_js_injection.rb

…

bolt_file_upload.rb

…

builderengine_upload_exec.rb

…

caidao_php_backdoor_exec.rb

…

cisco_dcnm_upload_2019.rb

Update cisco_dcnm_upload_2019.rb

2019-08-29 12:42:01 +07:00

cisco_dcnm_upload.rb

…

clipbucket_fileupload_exec.rb

…

cmsms_showtime2_rce.rb

Use instance variables instead of datastore options

2019-03-27 15:17:32 -05:00

cmsms_upload_rename_rce.rb

…

coldfusion_ckeditor_file_upload.rb

…

coldfusion_rds.rb

…

confluence_widget_connector.rb

Fix target_platform check (it's empty, not nil)

2019-06-25 12:56:36 -05:00

cups_bash_env_exec.rb

…

cuteflow_upload_exec.rb

…

dexter_casinoloader_exec.rb

…

drupal_drupageddon.rb

…

eaton_nsm_code_exec.rb

…

eventlog_file_upload.rb

…

extplorer_upload_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

familycms_less_exec.rb

…

freenas_exec_raw.rb

…

gestioip_exec.rb

…

getsimplecms_unauth_code_exec.rb

added checks to at, changed some uris

2019-05-15 15:40:27 -05:00

git_client_command_exec.rb

…

git_submodule_command_exec.rb

Add timwr as an author to his own modules

2019-03-29 10:44:58 -05:00

git_submodule_url_exec.rb

Add timwr as an author to his own modules

2019-03-29 10:44:58 -05:00

gitlab_shell_exec.rb

…

gitlist_arg_injection.rb

…

gitorious_graph.rb

…

glassfish_deployer.rb

…

glossword_upload_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

glpi_install_rce.rb

…

horde_form_file_upload.rb

changed if not to unless

2019-04-09 13:43:54 -05:00

horde_href_backdoor.rb

…

hp_sitescope_issuesiebelcmd.rb

…

hp_sitescope_uploadfileshandler.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

hp_sys_mgmt_exec.rb

…

hyperic_hq_script_console.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

ibm_openadmin_tool_soap_welcomeserver_exec.rb

Update all module splats from http:// to https://

2019-08-15 18:10:44 -05:00

ispconfig_php_exec.rb

…

jboss_bshdeployer.rb

…

jboss_deploymentfilerepository.rb

…

jboss_invoke_deploy.rb

…

jboss_maindeployer.rb

…

jboss_seam_upload_exec.rb

…

jenkins_metaprogramming.rb

Prefer initial slash in normalize_uri

2019-05-30 00:08:17 -05:00

jenkins_script_console.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

jenkins_xstream_deserialize.rb

…

jira_hipchat_template.rb

…

jira_plugin_upload.rb

add checks for xsrf_token

2019-04-26 11:09:33 -05:00

joomla_http_header_rce.rb

…

kordil_edms_upload_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

lcms_php_exec.rb

…

log1cms_ajax_create_folder.rb

…

magento_unserialize.rb

…

makoserver_cmd_exec.rb

…

manage_engine_dc_pmp_sqli.rb

…

manageengine_auth_upload.rb

…

manageengine_sd_uploader.rb

…

manageengine_search_sqli.rb

…

mantisbt_manage_proj_page_rce.rb

…

mantisbt_php_exec.rb

…

mediawiki_syntaxhighlight.rb

…

mediawiki_thumb.rb

…

metasploit_static_secret_key_base.rb

…

metasploit_webui_console_command_execution.rb

…

mma_backdoor_upload.rb

…

mobilecartly_upload_exec.rb

…

monstra_fileupload_exec.rb

…

moodle_cmd_exec.rb

moodle_cmd_exec nil check

2019-05-10 14:02:01 -04:00

movabletype_upgrade_exec.rb

…

mutiny_subnetmask_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

nas4free_php_exec.rb

…

navigate_cms_rce.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

netwin_surgeftp_exec.rb

…

nibbleblog_file_upload.rb

…

novell_servicedesk_rce.rb

…

nuuo_nvrmini_upgrade_rce.rb

…

october_upload_bypass_exec.rb

add filedropper, fix check, add to docs

2019-09-06 09:49:09 -05:00

op5_license.rb

…

op5_welcome.rb

…

openfire_auth_bypass.rb

…

openmediavault_cmd_exec.rb

…

openx_backdoor_php.rb

…

opmanager_socialit_file_upload.rb

…

oracle_ats_file_upload.rb

Fix exploit/multi/http/oracle_ats_file_upload

2019-02-25 11:35:34 -06:00

oracle_reports_rce.rb

…

oracle_weblogic_wsat_deserialization_rce.rb

…

orientdb_exec.rb

Make msftidy happy

2019-08-02 11:17:41 -05:00

oscommerce_installer_unauth_code_exec.rb

…

pandora_upload_exec.rb

…

phoenix_exec.rb

…

php_cgi_arg_injection.rb

…

php_utility_belt_rce.rb

…

php_volunteer_upload_exec.rb

…

phpfilemanager_rce.rb

…

phpldapadmin_query_engine.rb

…

phpmailer_arg_injection.rb

…

phpmoadmin_exec.rb

…

phpmyadmin_3522_backdoor.rb

…

phpmyadmin_lfi_rce.rb

…

phpmyadmin_null_termination_exec.rb

…

phpmyadmin_preg_replace.rb

…

phpscheduleit_start_date.rb

…

phptax_exec.rb

…

phpwiki_ploticus_exec.rb

…

pimcore_unserialize_rce.rb

removed version from module title

2019-04-29 08:43:33 -05:00

playsms_filename_exec.rb

…

playsms_uploadcsv_exec.rb

…

plone_popen2.rb

…

pmwiki_pagelist.rb

…

polarcms_upload_exec.rb

…

processmaker_exec.rb

…

processmaker_plugin_upload.rb

Update all module splats from http:// to https://

2019-08-15 18:10:44 -05:00

qdpm_upload_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

rails_actionpack_inline_exec.rb

…

rails_double_tap.rb

Add a ZDI reference for CVE-2019-5420 Rails exploit

2019-06-20 10:43:21 -05:00

rails_dynamic_render_code_exec.rb

…

rails_json_yaml_code_exec.rb

…

rails_secret_deserialization.rb

…

rails_web_console_v2_code_exec.rb

…

rails_xml_yaml_code_exec.rb

…

rocket_servergraph_file_requestor_rce.rb

…

sflog_upload_exec.rb

…

shopware_createinstancefromnamedarguments_rce.rb

Add correct CVE for shopware module

2019-09-12 16:09:32 -05:00

simple_backdoors_exec.rb

…

sit_file_upload.rb

…

snortreport_exec.rb

…

solarwinds_store_manager_auth_filter.rb

…

sonicwall_gms_upload.rb

…

sonicwall_scrutinizer_methoddetail_sqli.rb

…

splunk_mappy_exec.rb

…

splunk_upload_app_exec.rb

indentation fixes

2019-03-19 15:28:24 +01:00

spree_search_exec.rb

…

spree_searchlogic_exec.rb

…

struts2_code_exec_showcase.rb

…

struts2_content_type_ognl.rb

Don't worry about response code

2019-06-24 13:53:31 -05:00

struts2_namespace_ognl.rb

…

struts2_rest_xstream.rb

Fix missing split in struts2_rest_xstream

2019-07-10 11:15:36 -05:00

struts_code_exec_classloader.rb

…

struts_code_exec_exception_delegator.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

struts_code_exec_parameters.rb

…

struts_code_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

struts_default_action_mapper.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

struts_dev_mode.rb

…

struts_dmi_exec.rb

…

struts_dmi_rest_exec.rb

…

struts_include_params.rb

…

stunshell_eval.rb

…

stunshell_exec.rb

…

sun_jsws_dav_options.rb

…

sysaid_auth_file_upload.rb

…

sysaid_rdslogs_file_upload.rb

…

testlink_upload_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

tomcat_jsp_upload_bypass.rb

Update all module splats from http:// to https://

2019-08-15 18:10:44 -05:00

tomcat_mgr_deploy.rb

…

tomcat_mgr_upload.rb

…

traq_plugin_exec.rb

…

trendmicro_threat_discovery_admin_sys_time_cmdi.rb

…

uptime_file_upload_1.rb

…

uptime_file_upload_2.rb

…

v0pcr3w_exec.rb

…

vbseo_proc_deutf.rb

…

vbulletin_unserialize.rb

…

visual_mining_netcharts_upload.rb

…

vtiger_install_rce.rb

…

vtiger_logo_upload_exec.rb

…

vtiger_php_exec.rb

…

vtiger_soap_upload.rb

…

webnms_file_upload.rb

…

webpagetest_upload_exec.rb

Set needs_cleanup flag for exploits that need it

2019-08-02 10:23:53 -05:00

werkzeug_debug_rce.rb

…

wikka_spam_exec.rb

…

wp_crop_rce.rb

added note in info

2019-04-04 15:19:58 -05:00

wp_db_backup_rce.rb

Minor corrections in check and a unsed return value

2019-07-23 12:20:14 -05:00

wp_ninja_forms_unauthenticated_file_upload.rb

…

wp_responsive_thumbnail_slider_upload.rb

…

x7chat2_php_exec.rb

…

zabbix_script_exec.rb

…

zemra_panel_rce.rb

…

zenworks_configuration_management_upload.rb

…

zenworks_control_center_upload.rb

…

zpanel_information_disclosure_rce.rb

…