EgiX df5fdbff41 Add module for KIS-2016-07: SugarCRM REST PHP Object Injection ...

This PR contains a module to exploit KIS-2016-07, a PHP Object Injection vulnerability in SugarCRM CE before version 6.5.24 that allows unauthenticated users to execute arbitrary PHP code with the permissions of the webserver. Successful exploitation of this vulnerability should require SugarCRM to be running on PHP before version 5.6.25 or 7.0.10, which fix CVE-2016-7124.

2016-09-07 01:58:41 +02:00

..

auxiliary

Land #7228, Create zabbix_toggleids_sqli auxiliary module

2016-09-01 16:33:17 -05:00

encoders

Fix pack on big endian host systems

2016-07-12 15:17:52 -05:00

exploits

Add module for KIS-2016-07: SugarCRM REST PHP Object Injection

2016-09-07 01:58:41 +02:00

nops

Fix the ARM NOP generator after #6762, #6768, and #6644

2016-04-12 14:22:57 -05:00

payloads

update to mettle 0.0.6

2016-07-27 08:59:21 -05:00

post

Added some error checking to CredEnuerateA() railgun call

2016-08-26 16:21:54 -05:00