metasploit-gs

agent_tesla_panel_rce.md

…

apache_activemq_upload_jsp.md

Update exploit code to add missing slashes to certain important parts of the code where the exploit might fail if a custom path is supplied, and also improve the error handling in the code overall

2021-06-14 15:02:38 -05:00

apache_apisix_api_default_token_rce.md

Fixup typos

2022-03-04 12:34:14 -05:00

apache_flink_jar_upload_exec.md

…

apache_nifi_processor_rce.md

…

apache_normalize_path_rce.md

Tweak the verbiage for clarity, update docs

2021-10-22 12:38:03 -04:00

atlassian_confluence_webwork_ognl_injection.md

Add Windows support to CVE-2021-26084 exploit

2021-10-14 16:58:04 -05:00

atlassian_crowd_pdkinstall_plugin_upload_rce.md

Final fixup edits to change the timeout value to be an advanced option and also to use send_req_cgi

2021-08-05 13:10:24 -05:00

atutor_upload_traversal.md

…

axis2_deployer.md

…

baldr_upload_exec.md

…

builderengine_upload_exec.md

…

caidao_php_backdoor_exec.md

…

cisco_dcnm_upload_2019.md

…

clipbucket_fileupload_exec.md

…

cmsms_object_injection_rce.md

…

cmsms_showtime2_rce.md

…

cmsms_upload_rename_rce.md

…

cockpit_cms_rce.md

Update cockpit cms module

2021-05-12 17:20:31 +01:00

coldfusion_ckeditor_file_upload.md

…

confluence_widget_connector.md

…

cve_2021_35464_forgerock_openam.md

Add in ForgeRock demonstration and fix up some last minor issues with the documentation to make it more accurate

2021-07-09 16:43:25 -05:00

drupal_drupageddon.md

…

freenas_exec_raw.md

…

getsimplecms_unauth_code_exec.md

Move getsimplecms_unauth_code_exec.md documentation to http dir

2022-04-16 16:53:34 +00:00

git_lfs_clone_command_exec.md

remove GIT_HOOK option

2021-08-12 10:18:13 -05:00

git_submodule_command_exec.md

…

git_submodule_url_exec.md

…

gitea_git_hooks_rce.md

…

gitlab_exif_rce.md

Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload

2021-11-03 10:51:37 -07:00

gitlab_file_read_rce.md

Add ssl setup documentation for gitlab

2021-05-17 23:59:08 +01:00

gitlist_arg_injection.md

…

glassfish_deployer.md

…

gogs_git_hooks_rce.md

…

horde_csv_rce.md

…

horde_form_file_upload.md

…

horizontcms_upload_exec.md

…

ibm_openadmin_tool_soap_welcomeserver_exec.md

…

jenkins_metaprogramming.md

…

jenkins_script_console.md

…

jenkins_xstream_deserialize.md

…

jira_plugin_upload.md

…

kong_gateway_admin_api_rce.md

…

liferay_java_unmarshalling.md

…

log4shell_header_injection.md

Preemptively tweak references to ysoserial

2022-01-11 16:25:21 -05:00

magento_unserialize.md

…

makoserver_cmd_exec.md

…

mantisbt_manage_proj_page_rce.md

…

maracms_upload_exec.md

…

mediawiki_syntaxhighlight.md

…

microfocus_obm_auth_rce.md

…

microfocus_ucmdb_unauth_deser.md

UCMDB: remove warning from docs and change Linux target to reverse_python

2021-05-02 16:53:02 +07:00

monstra_fileupload_exec.md

…

moodle_admin_shell_upload.md

more libs for moodle and teacher priv esc to rce module

2021-09-04 13:31:11 -04:00

moodle_spelling_path_rce.md

moodle lib and module

2021-08-29 10:50:25 -04:00

moodle_teacher_enrollment_priv_esc_to_rce.md

more libs for moodle and teacher priv esc to rce module

2021-09-04 13:31:11 -04:00

navigate_cms_rce.md

…

nostromo_code_exec.md

…

october_upload_bypass_exec.md

…

openmrs_deserialization.md

…

opmanager_sumpdu_deserialization.md

add older path, fix typo

2021-09-20 12:14:42 -05:00

oracle_weblogic_wsat_deserialization_rce.md

…

orientdb_exec.md

…

oscommerce_installer_unauth_code_exec.md

…

php_fpm_rce.md

…

phpmailer_arg_injection.md

…

phpmyadmin_lfi_rce.md

…

phpmyadmin_null_termination_exec.md

…

phpstudy_backdoor_rce.md

…

pimcore_unserialize_rce.md

…

playsms_filename_exec.md

…

playsms_template_injection.md

…

playsms_uploadcsv_exec.md

…

processmaker_exec.md

…

processmaker_plugin_upload.md

…

rails_actionpack_inline_exec.md

…

rails_double_tap.md

…

rails_dynamic_render_code_exec.md

…

rails_web_console_v2_code_exec.md

…

shiro_rememberme_v124_deserialize.md

…

shopware_createinstancefromnamedarguments_rce.md

…

solr_velocity_rce.md

…

sonicwall_scrutinizer_methoddetail_sqli.md

…

splunk_upload_app_exec.md

…

spring_cloud_function_spel_injection.md

Fix the check method, add docs

2022-03-31 09:01:08 -04:00

spring_framework_rce_spring4shell.md

Quick update to the vulhub guidance

2022-05-10 08:42:02 -05:00

struts2_content_type_ognl.md

…

struts2_multi_eval_ognl.md

…

struts2_namespace_ognl.md

…

struts2_rest_xstream.md

…

struts_dmi_exec.md

…

struts_dmi_rest_exec.md

…

tomcat_jsp_upload_bypass.md

…

tomcat_mgr_deploy.md

…

tomcat_mgr_upload.md

Add in minor changes to improve overall formatting and presentation of documentation

2022-05-10 12:02:45 -05:00

totaljs_cms_widget_exec.md

…

trendmicro_threat_discovery_admin_sys_time_cmdi.md

…

ubiquiti_unifi_log4shell.md

Add details to check codes and PR feedback

2022-01-21 09:40:23 -05:00

vbulletin_getindexablecontent.md

…

vbulletin_widget_template_rce.md

…

vbulletin_widgetconfig_rce.md

…

vmware_vcenter_log4shell.md

Add vCenter Log4Shell docs

2022-01-13 14:50:28 -05:00

vmware_vcenter_uploadova_rce.md

…

vtiger_logo_upload_exec.md

…

weblogic_admin_handle_rce.md

…

werkzeug_debug_rce.md

…

wp_ait_csv_rce.md

…

wp_catch_themes_demo_import.md

more wp catch themes doc and error handling

2022-01-04 04:34:42 -05:00

wp_crop_rce.md

…

wp_db_backup_rce.md

…

wp_dnd_mul_file_rce.md

…

wp_file_manager_rce.md

…

wp_plugin_backup_guard_rce.md

rename docs, modify privileged to false

2021-07-20 15:31:38 -05:00

wp_plugin_modern_events_calendar_rce.md

modify info, fix spacing

2021-07-26 09:43:34 -05:00

wp_plugin_sp_project_document_rce.md

modify doc description

2021-07-23 12:33:41 -05:00

wp_popular_posts_rce.md

wp_popular_posts_rce

2021-12-08 16:45:19 -05:00

wp_responsive_thumbnail_slider_upload.md

…

wp_simple_file_list_rce.md

…

wso2_file_upload_rce.md

Responded to comments added retry_until_true

2022-04-27 09:45:18 -07:00

zabbix_script_exec.md

Cleanup some minor typos

2022-02-04 15:12:57 -05:00