Brendan Coles e30d8db082 nagios_xi_magpie_debug: add writable paths, improvements, cleanup, fixes ...

Resolve Rubocop violations
Fix off-by-one in array index triggered when no file upload succeeds
Fix cleanup: ensure files are removed when upload succeeds but execution fails
Add AutoCheck
Add module notes
Add error handling and associated operator feedback
Add additional writable paths required for some old Nagios versions
Add fallback to session as `apache` if privlege escalation fails
Update documentation in line with above changes and fix software download links

2021-03-16 07:13:55 +00:00

..

alienvault_exec.md

adress a spelling problem

2019-10-05 14:22:18 -04:00

apache_couchdb_cmd_exec.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

apache_ofbiz_deserialiation.md

Adjust XML whitespace and add commands to the setup docs

2020-08-17 10:03:44 -04:00

artica_proxy_auth_bypass_service_cmds_peform_command_injection.md

Remove AUTH_BYPASS target

2020-09-15 01:51:34 +02:00

asuswrt_lan_rce.md

Add sploit doc

2018-02-20 19:35:10 +00:00

axis_srv_parhand_rce.md

Add documentation and a new reference

2018-07-25 14:44:44 -05:00

bludit_upload_images_exec.md

Fix typos and format

2019-11-11 14:47:56 -06:00

cayin_cms_ntp.md

cleanup

2020-06-12 10:46:44 -04:00

centreon_pollers_auth_rce.md

fix somes code review comments.

2020-03-15 13:30:23 +04:00

centreon_useralias_exec.md

Fix uneven quotes in various documentation files

2017-08-26 19:12:48 -05:00

cisco_firepower_useradd.md

typo fixes in cisco_firepower_useradd.md

2019-01-10 10:47:53 +01:00

cisco_prime_inf_rce.md

Update cisco_prime_inf_rce.md

2018-10-15 22:37:47 +07:00

cisco_rv32x_rce.md

scenario to scenarios

2020-01-16 10:36:38 -05:00

cisco_rv130_rmi_rce.md

Fix numbering.

2019-03-24 17:52:11 +01:00

cisco_ucs_cloupia_script_rce.md

Add Cisco UCS Director Cloupia script RCE

2020-06-02 22:13:07 -05:00

cisco_ucs_rce.md

module doc standardizations

2020-01-20 21:26:59 -05:00

citrix_dir_traversal_rce.md

Improve wording in doc

2020-01-13 21:02:56 -06:00

cpi_tararchive_upload.md

Add module doc for Cisco TarArchive exploit

2019-06-07 13:09:28 -05:00

cve_2019_1663_cisco_rmi_rce.md

Updated documentation.

2019-07-27 11:09:34 +02:00

dcos_marathon.md

example output to scenarios

2020-01-16 11:41:12 -05:00

denyall_waf_exec.md

Fixing typos and replacing double quotes with single

2017-09-21 23:48:12 +03:00

dlink_dir850l_unauth_exec.md

Clean up module

2017-11-10 18:15:22 -06:00

dlink_dsl2750b_exec_noauth.md

Fixing documentation, improving exploits code

2018-05-20 12:55:46 -04:00

dlink_dwl_2600_command_injection.md

Fixing DLINK DWL-2600 Scenarios

2020-03-27 11:57:39 -05:00

docker_daemon_tcp.md

example output to scenarios

2020-01-16 11:41:12 -05:00

epmp1000_get_chart_cmd_shell.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

epmp1000_ping_cmd_shell.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

eyesofnetwork_autodiscovery_rce.md

Minor doc changes, add module notes and SQLi progress output

2020-05-21 16:31:45 -04:00

f5_bigip_tmui_rce.md

Update TMSH escape reliability notes

2020-07-17 06:26:00 -05:00

geutebruck_testaction_exec.md

Minor updates to the documentation to reflect the fact that the username and password could be something other than root/admin

2020-08-17 09:12:02 -05:00

github_enterprise_secret.md

Update version info

2017-03-23 13:46:09 -05:00

goahead_ldpreload.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

goautodial_3_rce_code_injection.md

verification to verification steps

2020-01-16 10:41:12 -05:00

hadoop_unauth_exec.md

Change docs to reflect the truth of the "vuln"

2020-11-16 11:38:00 -06:00

hp_van_sdn_cmd_inject.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

huawei_hg532n_cmdinject.md

update documentation to point to meterpreter again

2017-04-26 17:49:08 -05:00

ibm_drm_rce.md

Update IBM DRM RCE docs

2020-06-26 11:29:59 +07:00

ibm_qradar_unauth_rce.md

add module docs

2018-07-10 11:51:57 -05:00

imperva_securesphere_exec.md

Update to use CmdStager

2019-01-08 20:07:35 -08:00

ipfire_bashbug_exec.md

doc/module cleanup

2016-05-30 06:33:48 -04:00

ipfire_oinkcode_exec.md

module working and docs

2017-06-14 21:15:56 -04:00

ipfire_proxy_exec.md

md fix

2016-05-30 10:25:49 -04:00

jenkins_cli_deserialization.md

add steps for producing serialized object

2020-09-17 13:58:48 -05:00

kaltura_unserialize_cookie_rce.md

Updates to documentation per h00die

2018-01-23 12:44:39 -06:00

kaltura_unserialize_rce.md

Another minor grammer changes

2016-09-20 19:23:28 +03:00

klog_server_authenticate_user_unauth_command_injection.md

Add Klog Server authenticate.php user Unauthenticated Command Injection

2021-02-12 17:07:52 +00:00

librenms_addhost_cmd_inject.md

made suggested changes

2019-05-30 14:09:40 -05:00

librenms_collectd_cmd_inject.md

finish documentation and module

2019-08-13 09:47:24 -05:00

linksys_wvbr0_user_agent_exec_noauth.md

Clarification in product linkage and small syntax fixup in repro steps

2018-01-03 17:00:26 -06:00

linuxki_rce.md

Update linuxki_rce.md

2020-06-10 02:13:38 +03:00

logsign_exec.md

Fix uneven quotes in various documentation files

2017-08-26 19:12:48 -05:00

mailcleaner_exec.md

Update doc

2019-01-08 13:25:13 -06:00

microfocus_secure_messaging_gateway.md

fix install lines

2020-03-24 09:36:17 -04:00

mida_solutions_eframework_ajaxreq_rce.md

resolve qa comments

2020-09-11 17:16:10 +00:00

mobileiron_mdm_hessian_rce.md

Add module doc

2021-01-22 01:06:14 -06:00

mvpower_dvr_shell_exec.md

Add documentation

2017-02-23 07:44:45 +00:00

nagios_xi_authenticated_rce.md

Incorporate additional suggestions from code review.

2020-03-09 11:56:15 +02:00

nagios_xi_chained_rce_2_electric_boogaloo.md

Update Docs

2018-06-29 11:08:31 -05:00

nagios_xi_chained_rce.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

nagios_xi_magpie_debug.md

nagios_xi_magpie_debug: add writable paths, improvements, cleanup, fixes

2021-03-16 07:13:55 +00:00

netgear_dgn1000_setup_unauth_exec.md

more standardizations

2020-01-16 11:32:02 -05:00

netgear_dnslookup_cmd_exec.md

Fix broken link

2018-02-02 20:08:38 -05:00

netgear_r7000_cgibin_exec.md

Update netgear_r7000_cgibin_exec docs

2018-02-02 20:23:43 -05:00

netgear_unauth_exec.md

Minor changes to module, updated documentation.

2018-10-09 20:39:00 +06:30

netsweeper_webadmin_unixlogin.md

Add Netsweeper WebAdmin unixlogin.php pre-auth RCE

2020-05-12 08:34:20 -05:00

nexus_repo_manager_el_injection.md

Fix nexus_repo_manager_el_injection.md scenario

2020-09-15 13:14:36 -05:00

op5_config_exec.md

fixes all previously identified issues

2016-06-15 20:58:04 -04:00

pandora_fms_events_exec.md

Add installation instructions to docs

2020-07-09 17:20:07 -04:00

pandora_ping_cmd_exec.md

Update documentation/modules/exploit/linux/http/pandora_ping_cmd_exec.md

2020-03-23 17:24:28 +03:00

panos_readsessionvars.md

Doc typo

2018-05-06 22:32:26 -05:00

php_imap_open_rce.md

horde imp h3 imap_open

2019-01-18 19:38:30 -05:00

pineapple_bypass_cmdinject.md

module doc standardizations

2020-01-20 21:26:59 -05:00

pineapple_preconfig_cmdinject.md

module doc standardizations

2020-01-20 21:26:59 -05:00

pulse_secure_cmd_exec.md

Code-block env(1)

2019-11-12 02:46:18 -06:00

pulse_secure_gzip_rce.md

Update the documentation

2020-12-07 10:54:20 -05:00

qnap_qcenter_change_passwd_exec.md

Fix password typo

2018-07-13 16:02:15 +10:00

rancher_server.md

example output to scenarios

2020-01-16 11:41:12 -05:00

rconfig_ajaxarchivefiles_rce.md

Create rconfig_ajaxarchivefiles_rce.md

2020-03-13 10:07:39 +01:00

saltstack_salt_api_cmd_exec.md

Fix AutoCheck

2020-11-11 15:57:38 -06:00

samsung_srv_1670d_upload_exec.md

scenario to scenarios

2020-01-16 10:36:38 -05:00

spark_unauth_rce.md

module options to options

2020-01-16 10:49:22 -05:00

supervisor_xmlrpc_exec.md

cleaned up version, and docs

2017-09-23 10:51:52 -04:00

symantec_messaging_gateway_exec.md

Adding Symantec messaging gateway rce

2017-06-10 12:23:12 +03:00

synology_dsm_smart_exec_auth.md

add docs for 410

2020-05-21 17:43:46 -04:00

tiki_calendar_exec.md

Update tiki_calendar_exec module and documentation

2016-06-22 11:17:45 -05:00

tp_link_ncxxx_bonjour_command_injection.md

msftidy_docs changes

2020-09-18 09:42:14 -05:00

trend_micro_imsva_exec.md

Adding Trend Micro IMSVA module

2017-01-18 11:34:16 +03:00

trendmicro_imsva_widget_exec.md

Fixing grammer issue

2017-10-09 22:31:13 +03:00

trendmicro_websecurity_exec.md

fixing up some styles and such

2020-06-20 12:05:48 -04:00

ueb_api_rce.md

finish up docs and 10 exploit

2018-09-10 21:08:30 -04:00

unraid_auth_bypass_exec.md

Update Unraid 6.8.0 exploit module

2020-03-21 11:44:35 +01:00

vestacp_exec.md

Fix up clarity and spelling issues in module and documentation

2020-04-13 16:28:39 -05:00

wd_mycloud_multiupload_upload.md

Add wd_mycloud_multiupload_upload exploit

2017-11-28 07:12:00 -06:00

webmin_backdoor.md

Move unix/webapp/webmin_backdoor to linux/http

2020-01-14 00:50:04 -06:00

webmin_packageup_rce.md

removed some whitespace, added a check

2019-06-17 15:29:08 -05:00

wepresent_cmd_injection.md

Switched to vars_post in send_request_cgi and removed unnecessary documentation

2020-01-14 05:42:06 -05:00

wipg1000_cmd_injection.md

added version numbers

2017-04-22 09:45:55 -04:00

xplico_exec.md

Updatig documentation and tweaking initiate_session

2017-11-15 01:04:06 +03:00

zimbra_xxe_rce.md

Fix words because words...

2019-04-01 17:21:23 -05:00