Jeffrey Martin cb8e023734 add warning about external links ...

Links to external resources not controlled by the project maintainers
are subject to bitrot and malicious take over. Warnings seem appropriate.

2022-11-23 12:08:05 -06:00

..

alienvault_exec.md

adress a spelling problem

2019-10-05 14:22:18 -04:00

apache_couchdb_cmd_exec.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

apache_druid_js_rce.md

Update apache_druid_js_rce.md

2021-04-10 10:43:00 +08:00

apache_ofbiz_deserialization_soap.md

remove spare comma

2021-04-05 09:33:20 -05:00

apache_ofbiz_deserialization.md

Fix "apache_ofbiz_deserialiation" typo in its doc

2021-05-01 17:23:52 -05:00

apache_spark_rce_cve_2022_33891.md

updated documentation

2022-09-06 19:36:11 +00:00

artica_proxy_auth_bypass_service_cmds_peform_command_injection.md

Remove AUTH_BYPASS target

2020-09-15 01:51:34 +02:00

asuswrt_lan_rce.md

Add sploit doc

2018-02-20 19:35:10 +00:00

axis_app_install.md

Altered some randomization, the json extracted by check, and fixed some wording

2022-02-24 18:48:21 -08:00

axis_srv_parhand_rce.md

Add documentation and a new reference

2018-07-25 14:44:44 -05:00

bitbucket_git_cmd_injection.md

add documentation

2022-09-20 18:45:48 -05:00

bludit_upload_images_exec.md

Fix typos and format

2019-11-11 14:47:56 -06:00

cayin_cms_ntp.md

cleanup

2020-06-12 10:46:44 -04:00

centreon_pollers_auth_rce.md

fix somes code review comments.

2020-03-15 13:30:23 +04:00

centreon_useralias_exec.md

Fix uneven quotes in various documentation files

2017-08-26 19:12:48 -05:00

cisco_asax_sfr_rce.md

Added module for CVE-2022-20828

2022-08-19 12:29:37 -07:00

cisco_firepower_useradd.md

typo fixes in cisco_firepower_useradd.md

2019-01-10 10:47:53 +01:00

cisco_hyperflex_file_upload_rce.md

Cisco HyperFlex File Upload RCE module

2021-06-17 12:38:47 -04:00

cisco_hyperflex_hx_data_platform_cmd_exec.md

Backport print changes to recent modules

2021-07-08 21:26:35 -05:00

cisco_prime_inf_rce.md

Update cisco_prime_inf_rce.md

2018-10-15 22:37:47 +07:00

cisco_rv32x_rce.md

scenario to scenarios

2020-01-16 10:36:38 -05:00

cisco_rv_series_authbypass_and_rce.md

Update documentation/modules/exploit/linux/http/cisco_rv_series_authbypass_and_rce.md

2022-02-01 06:41:26 -05:00

cisco_ucs_cloupia_script_rce.md

Add Cisco UCS Director Cloupia script RCE

2020-06-02 22:13:07 -05:00

cisco_ucs_rce.md

module doc standardizations

2020-01-20 21:26:59 -05:00

cpi_tararchive_upload.md

Add module doc for Cisco TarArchive exploit

2019-06-07 13:09:28 -05:00

cve_2019_1663_cisco_rmi_rce.md

Updated documentation.

2019-07-27 11:09:34 +02:00

dcos_marathon.md

example output to scenarios

2020-01-16 11:41:12 -05:00

denyall_waf_exec.md

Fixing typos and replacing double quotes with single

2017-09-21 23:48:12 +03:00

dlink_dir850l_unauth_exec.md

Clean up module

2017-11-10 18:15:22 -06:00

dlink_dsl2750b_exec_noauth.md

Fixing documentation, improving exploits code

2018-05-20 12:55:46 -04:00

dlink_dwl_2600_command_injection.md

Fixing DLINK DWL-2600 Scenarios

2020-03-27 11:57:39 -05:00

docker_daemon_tcp.md

example output to scenarios

2020-01-16 11:41:12 -05:00

elfinder_archive_cmd_injection.md

escapeshellcmd -> escapeshellarg

2021-09-09 17:28:05 -05:00

epmp1000_get_chart_cmd_shell.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

epmp1000_ping_cmd_shell.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

eyesofnetwork_autodiscovery_rce.md

Minor doc changes, add module notes and SQLi progress output

2020-05-21 16:31:45 -04:00

f5_bigip_tmui_rce.md

Update TMSH escape reliability notes

2020-07-17 06:26:00 -05:00

f5_icontrol_rce.md

Redo explanation of exploit in documentation to appropriately account for various nuances. Also update exploit title and description accordingly.

2022-05-11 16:43:36 -05:00

f5_icontrol_rest_ssrf_rce.md

Add module doc

2021-03-31 14:02:32 -05:00

f5_icontrol_soap_csrf_rce_cve_2022_41622.md

Check in exploit script for CVE-2022-41622 (CSRF into SOAP)

2022-11-16 11:58:15 -08:00

flir_ax8_unauth_rce_cve_2022_37061.md

updated module and documentation

2022-10-25 13:33:52 +00:00

fortinet_authentication_bypass_cve_2022_40684.md

Update documentation/modules/exploit/linux/http/fortinet_authentication_bypass_cve_2022_40684.md

2022-10-17 22:49:57 +02:00

geutebruck_cmdinject_cve_2021_335xx.md

Add in documentation and module code cleanness improvements and also make the output easier for readers to understand should something fail midway through.

2021-08-31 18:24:57 -05:00

geutebruck_instantrec_bof.md

Add CVE-2021-33549 exploit for Geutebruck G-CAM

2021-08-27 01:28:26 +01:00

geutebruck_testaction_exec.md

Minor updates to the documentation to reflect the fact that the username and password could be something other than root/admin

2020-08-17 09:12:02 -05:00

github_enterprise_secret.md

add warning about external links

2022-11-23 12:08:05 -06:00

glpi_htmlawed_php_injection.md

Add docs

2022-10-19 17:59:54 -05:00

goahead_ldpreload.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

goautodial_3_rce_code_injection.md

verification to verification steps

2020-01-16 10:41:12 -05:00

grandstream_gxv31xx_settimezone_unauth_cmd_exec.md

Add support for GXV3140 models and ARCH_CMD busybox telnetd payload

2022-01-29 19:38:57 +00:00

grandstream_ucm62xx_sendemail_rce.md

Minor langauge fix and final typo

2022-01-24 21:01:34 -06:00

gravcms_exec.md

Update documentation

2021-05-04 14:12:48 +02:00

hadoop_unauth_exec.md

Change docs to reflect the truth of the "vuln"

2020-11-16 11:38:00 -06:00

hikvision_cve_2021_36260_blind.md

Fixed a couple of typos. Changed a CheckCode. Randomized the replaced tmp file name

2022-02-24 06:38:36 -08:00

hp_van_sdn_cmd_inject.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

huawei_hg532n_cmdinject.md

update documentation to point to meterpreter again

2017-04-26 17:49:08 -05:00

ibm_drm_rce.md

Update IBM DRM RCE docs

2020-06-26 11:29:59 +07:00

ibm_qradar_unauth_rce.md

add module docs

2018-07-10 11:51:57 -05:00

imperva_securesphere_exec.md

Update to use CmdStager

2019-01-08 20:07:35 -08:00

ipfire_bashbug_exec.md

…

ipfire_oinkcode_exec.md

module working and docs

2017-06-14 21:15:56 -04:00

ipfire_pakfire_exec.md

added cve

2021-06-10 09:35:42 -05:00

ipfire_proxy_exec.md

md fix

2016-05-30 10:25:49 -04:00

jenkins_cli_deserialization.md

add steps for producing serialized object

2020-09-17 13:58:48 -05:00

kaltura_unserialize_cookie_rce.md

Updates to documentation per h00die

2018-01-23 12:44:39 -06:00

kaltura_unserialize_rce.md

Another minor grammer changes

2016-09-20 19:23:28 +03:00

klog_server_authenticate_user_unauth_command_injection.md

Add Klog Server authenticate.php user Unauthenticated Command Injection

2021-02-12 17:07:52 +00:00

librenms_addhost_cmd_inject.md

made suggested changes

2019-05-30 14:09:40 -05:00

librenms_collectd_cmd_inject.md

finish documentation and module

2019-08-13 09:47:24 -05:00

linksys_wvbr0_user_agent_exec_noauth.md

Clarification in product linkage and small syntax fixup in repro steps

2018-01-03 17:00:26 -06:00

linuxki_rce.md

Update linuxki_rce.md

2020-06-10 02:13:38 +03:00

logsign_exec.md

add warning about external links

2022-11-23 12:08:05 -06:00

lucee_admin_imgprocess_file_write.md

Add Lucee Administrator CVE-2021-21307 exploit

2021-08-16 10:09:34 -05:00

mailcleaner_exec.md

Update doc

2019-01-08 13:25:13 -06:00

microfocus_obr_cmd_injection.md

Update microfocus_obr_cmd_injection.md

2021-04-25 11:02:54 +08:00

microfocus_secure_messaging_gateway.md

fix install lines

2020-03-24 09:36:17 -04:00

mida_solutions_eframework_ajaxreq_rce.md

resolve qa comments

2020-09-11 17:16:10 +00:00

mobileiron_core_log4shell.md

Initial commit of MobileIron Core Log4Shell exploitation (CVE-2021-44228)

2022-07-29 10:31:15 -07:00

mobileiron_mdm_hessian_rce.md

Add module doc

2021-01-22 01:06:14 -06:00

mvpower_dvr_shell_exec.md

Add documentation

2017-02-23 07:44:45 +00:00

nagios_xi_autodiscovery_webshell.md

Used suggested method for defining user webshell, used suggested depth configuration, and used vars_get in a couple of places

2022-02-08 18:20:03 -08:00

nagios_xi_chained_rce_2_electric_boogaloo.md

Update Docs

2018-06-29 11:08:31 -05:00

nagios_xi_chained_rce.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

nagios_xi_magpie_debug.md

nagios_xi_magpie_debug: add writable paths, improvements, cleanup, fixes

2021-03-16 07:13:55 +00:00

nagios_xi_mibs_authenticated_rce.md

Add in fixes to documentation and module from review

2021-04-16 13:14:17 -05:00

nagios_xi_plugins_check_plugin_authenticated_rce.md

Add in 5.6.5 exploitation scenario to documentation

2021-04-13 17:42:47 -05:00

nagios_xi_plugins_filename_authenticated_rce.md

Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.

2021-04-14 16:32:53 -05:00

nagios_xi_snmptrap_authenticated_rce.md

Add in CentOS 7 with NagiosXI 5.6.5 scenario

2021-04-20 14:12:56 -05:00

netgear_dgn1000_setup_unauth_exec.md

more standardizations

2020-01-16 11:32:02 -05:00

netgear_dnslookup_cmd_exec.md

Fix broken link

2018-02-02 20:08:38 -05:00

netgear_r7000_cgibin_exec.md

Update netgear_r7000_cgibin_exec docs

2018-02-02 20:23:43 -05:00

netgear_unauth_exec.md

Minor changes to module, updated documentation.

2018-10-09 20:39:00 +06:30

netsweeper_webadmin_unixlogin.md

Add Netsweeper WebAdmin unixlogin.php pre-auth RCE

2020-05-12 08:34:20 -05:00

nexus_repo_manager_el_injection.md

Fix nexus_repo_manager_el_injection.md scenario

2020-09-15 13:14:36 -05:00

op5_config_exec.md

fixes all previously identified issues

2016-06-15 20:58:04 -04:00

pandora_fms_events_exec.md

Add installation instructions to docs

2020-07-09 17:20:07 -04:00

pandora_ping_cmd_exec.md

Update documentation/modules/exploit/linux/http/pandora_ping_cmd_exec.md

2020-03-23 17:24:28 +03:00

panos_op_cmd_exec.md

Updated error handling

2022-09-13 12:40:59 -04:00

panos_readsessionvars.md

Doc typo

2018-05-06 22:32:26 -05:00

php_imap_open_rce.md

horde imp h3 imap_open

2019-01-18 19:38:30 -05:00

pineapple_bypass_cmdinject.md

module doc standardizations

2020-01-20 21:26:59 -05:00

pineapple_preconfig_cmdinject.md

module doc standardizations

2020-01-20 21:26:59 -05:00

pulse_secure_cmd_exec.md

Code-block env(1)

2019-11-12 02:46:18 -06:00

pulse_secure_gzip_rce.md

Update the documentation

2020-12-07 10:54:20 -05:00

qnap_qcenter_change_passwd_exec.md

Fix password typo

2018-07-13 16:02:15 +10:00

rancher_server.md

example output to scenarios

2020-01-16 11:41:12 -05:00

rconfig_ajaxarchivefiles_rce.md

Correct broken or redundant CVE references

2021-04-05 13:06:50 -05:00

rconfig_vendors_auth_file_upload_rce.md

rename files, change version check, use cookie jar

2021-06-24 09:47:38 -05:00

roxy_wi_exec.md

Add in updated scenario documentation

2022-07-25 14:14:52 -05:00

saltstack_salt_api_cmd_exec.md

Fix AutoCheck

2020-11-11 15:57:38 -06:00

saltstack_salt_wheel_async_rce.md

add wait time line to test output

2021-03-31 14:47:34 -05:00

samsung_srv_1670d_upload_exec.md

scenario to scenarios

2020-01-16 10:36:38 -05:00

sonicwall_cve_2021_20039.md

Initial commit of CVE-2021-20039 exploit

2022-01-10 12:43:50 -08:00

sophos_utm_webadmin_sid_cmd_injection.md

Add more words to module doc

2021-10-27 19:31:03 -05:00

sourcegraph_gitserver_sshcmd.md

Add sourcegraph RCE module docs

2022-07-08 17:27:27 -04:00

spark_unauth_rce.md

module options to options

2020-01-16 10:49:22 -05:00

spring_cloud_gateway_rce.md

Add in some missing info to examples, set default port, and update IOCs to note we include some IOCs in the logs

2022-10-12 11:19:47 -05:00

suitecrm_log_file_rce.md

Added module and documentation for SuiteCRM Log File RCE

2021-05-22 00:11:19 -05:00

supervisor_xmlrpc_exec.md

cleaned up version, and docs

2017-09-23 10:51:52 -04:00

symantec_messaging_gateway_exec.md

Adding Symantec messaging gateway rce

2017-06-10 12:23:12 +03:00

synology_dsm_smart_exec_auth.md

add docs for 410

2020-05-21 17:43:46 -04:00

tiki_calendar_exec.md

Update tiki_calendar_exec module and documentation

2016-06-22 11:17:45 -05:00

tp_link_ncxxx_bonjour_command_injection.md

msftidy_docs changes

2020-09-18 09:42:14 -05:00

trend_micro_imsva_exec.md

Adding Trend Micro IMSVA module

2017-01-18 11:34:16 +03:00

trendmicro_imsva_widget_exec.md

Fixing grammer issue

2017-10-09 22:31:13 +03:00

trendmicro_websecurity_exec.md

fixing up some styles and such

2020-06-20 12:05:48 -04:00

ueb_api_rce.md

finish up docs and 10 exploit

2018-09-10 21:08:30 -04:00

unraid_auth_bypass_exec.md

add warning about external links

2022-11-23 12:08:05 -06:00

vestacp_exec.md

Fix up clarity and spelling issues in module and documentation

2020-04-13 16:28:39 -05:00

vmware_nsxmgr_xstream_rce_cve_2021_39144.md

fixed some typos in documentation

2022-11-05 15:36:42 +00:00

vmware_vcenter_analytics_file_upload.md

Add module doc

2021-10-06 16:43:57 -05:00

vmware_vcenter_vsan_health_rce.md

Add log IOC

2021-07-12 20:54:54 -05:00

vmware_view_planner_4_6_uploadlog_rce.md

Update the exploit to use Python as its payload since this is a lot more flexible, allows Meterpreter, returns a shell faster, and we are already injecting into and executing a Python file

2021-03-14 00:00:06 -06:00

vmware_vrops_mgr_ssrf_rce.md

Update vmware_vrops_mgr_ssrf_rce documentation

2021-05-06 18:30:20 -05:00

vmware_workspace_one_access_cve_2022_22954.md

Deregister VHOST

2022-05-03 11:52:50 -05:00

wd_mycloud_multiupload_upload.md

Add wd_mycloud_multiupload_upload exploit

2017-11-28 07:12:00 -06:00

webmin_backdoor.md

Move unix/webapp/webmin_backdoor to linux/http

2020-01-14 00:50:04 -06:00

webmin_file_manager_rce.md

Update documentation/modules/exploit/linux/http/webmin_file_manager_rce.md

2022-11-01 10:40:01 -05:00

webmin_package_updates_rce.md

Fix from code review

2022-08-09 15:09:25 +02:00

webmin_packageup_rce.md

removed some whitespace, added a check

2019-06-17 15:29:08 -05:00

wepresent_cmd_injection.md

Switched to vars_post in send_request_cgi and removed unnecessary documentation

2020-01-14 05:42:06 -05:00

wipg1000_cmd_injection.md

added version numbers

2017-04-22 09:45:55 -04:00

xplico_exec.md

Updatig documentation and tweaking initiate_session

2017-11-15 01:04:06 +03:00

zimbra_cpio_cve_2022_41352.md

Fix the doc to make msftidy_docs.rb happy

2022-10-20 14:33:40 +02:00

zimbra_mboximport_cve_2022_27925.md

Add in documentation on how to install the target from scratch

2022-08-23 11:44:09 -05:00

zimbra_unrar_cve_2022_30333.md

Add module docs for the split-up unrar modules

2022-07-27 13:24:29 -07:00

zimbra_xxe_rce.md

Fix words because words...

2019-04-01 17:21:23 -05:00

zyxel_ztp_rce.md

Revised setup guidance

2022-05-13 13:41:05 -07:00