Commit Graph

2118 Commits (06e1d16c60c88a96b9c8e523671166bd4a86fcd7)

Author SHA1 Message Date
William Vu 672dbb7acb
Land #9364, HP PJL/SNMP CVE-2017-2741 exploit
Finally!
2018-08-23 22:47:09 -05:00
h00die 8213c21dc9
Land #10467 documentation for postgresql hashdump 2018-08-23 21:35:05 -04:00
h00die a866bdd09d slight syntax updates to md 2018-08-23 21:34:48 -04:00
h00die 1585eff29f
Land #10466 docs for postgres_version 2018-08-23 21:10:34 -04:00
h00die 3024725122 slight syntax updates to md 2018-08-23 21:09:52 -04:00
h00die b8ce6782d9
Land #10517 updated docs for CloudMe Sync 2018-08-23 20:54:01 -04:00
Wei Chen 2193dd662d
Land #10504, add Foxit Reader UAF Module and Docs 2018-08-23 18:56:07 -05:00
Shelby Pace 5f9432ed6a
added rca to cloudme doc 2018-08-23 16:12:13 -05:00
Matthew Kienow 7a534707ab
Add note about unauthenticated telnetd service 2018-08-23 16:16:47 -04:00
Matthew Kienow ecc6c473d8
Add note about unauthenticated telnetd service 2018-08-23 15:50:41 -04:00
Matthew Kienow ee6bf7a77c
Fix documentation markdown table format 2018-08-23 15:23:41 -04:00
Matthew Kienow 18712c25cd
Add uname to module documentation scenario 2018-08-23 15:23:41 -04:00
Matthew Kienow 77b77287cc
Add module and payload documentation 2018-08-23 15:23:40 -04:00
Mumbai 46b45f379b Add documentation for MS16 Reflection DCOM->RPC 2018-08-21 11:27:07 -04:00
Jacob Robles fd6880d0d0
Add Foxit Reader UAF Module and Docs 2018-08-21 08:21:51 -05:00
William Vu 06582a00a0 Add module doc for ssh_enumusers
And update description in module.
2018-08-20 19:26:51 -05:00
Tim W b8b48fd37a
Land #10313, add linux autostart persistence module 2018-08-20 18:17:50 +08:00
Tim W 865898cba7 minor fixes 2018-08-20 17:51:41 +08:00
Dhiraj Mishra 3cebfe4e14
Documentation 2018-08-19 23:56:00 +05:30
Brendan Coles f09148d843 Add documentation 2018-08-19 08:20:41 +00:00
Tim W ac71bc86ee
Land #10320, add module for persistence in /etc/rc.local 2018-08-19 15:30:50 +08:00
Tim W e38775b504 minor tweaks 2018-08-19 15:27:04 +08:00
Arpit Agrawal a673ca1bc4
Update reverse_ord_tcp.md 2018-08-17 19:59:39 +05:30
agrawalarpit14 59d977edfa
Documentation on windows/shell/reverse_ord_tcp
Part of Issue #7142
2018-08-17 16:22:39 +05:30
Eliott Teissonniere a22acf3f3e Document autostart module 2018-08-17 14:24:28 +08:00
William Vu c24ceb9483 Move and update marked_redos module doc 2018-08-16 15:12:36 -05:00
William Vu 5096eee2ec
Land #10120, npm "marked" ReDoS module 2018-08-16 15:01:12 -05:00
Kevin Kirsche 809a15541c Create documentation for PostgreSQL hash dumper
Documentation on auxiliary/scanner/postgres/postgres_hashdump

Part of issue #8296

Please see and following installation and exploitation steps using your machine. Please replace IP's where appropriate depending on if you are attacking your local machine or another machine on your network.
2018-08-16 08:39:39 -04:00
Kevin Kirsche 45cb0a9f6e
Create documentation for PostgreSQL version scanner
Documentation on auxiliary/scanner/postgres/postgres_version

Part of issue #8296

## Verification
Please see and following installation and exploitation steps using your machine. Please replace IP's where appropriate depending on if you are attacking your local machine or another machine on your network.
2018-08-16 08:02:42 -04:00
James Barnett becd42553a
Land #10462, Add API documentation for users and auth endpoints 2018-08-15 17:10:26 -05:00
Erin Bleiweiss 4b42e7633c Add examples for username and password properties 2018-08-15 16:34:11 -05:00
Erin Bleiweiss a70c5f0c37 Replace strings with reusable constants 2018-08-15 15:26:35 -05:00
Erin Bleiweiss c19dc52573 Remove extraneous lines from a bad copy/paste 2018-08-15 15:03:27 -05:00
h00die 61dfd75663
Land #10457 docs for elasticsearch indices_enum 2018-08-14 20:55:15 -04:00
h00die a620958b97 update elasticsearch doc format 2018-08-14 20:53:18 -04:00
h00die 44fd9c63e0 doc format update 2018-08-14 20:39:04 -04:00
Erin Bleiweiss 2abc49641c Add 401 responses for all endpoints 2018-08-14 13:35:59 -05:00
Erin Bleiweiss 66b761db15 Add doc for user operations 2018-08-14 13:19:56 -05:00
Erin Bleiweiss f7a0b201d7 Add authorization support for auth/bearer tokens 2018-08-14 11:51:15 -05:00
Kevin Kirsche d273eb3914
Create elasticsearch indices_enum documentation
Documentation on auxiliary/scanner/elasticsearch/indices_enum

Part of issue #8296
2018-08-13 22:14:03 -04:00
Jacob Robles ddebdea8c1
Update cgit doc 2018-08-13 16:45:13 -05:00
Jacob Robles 85a137e0a0
Land #10420, cgit < 1.2.1 Directory Traversal 2018-08-13 16:25:23 -05:00
Jacob Robles 5a3d040d71
Fix module, Add documentation 2018-08-13 15:48:21 -05:00
Shelby Pace ce8cbd64d4
Land #10404, Add Path Traversal Oracle GlassFish 2018-08-13 11:15:26 -05:00
Jacob Robles 66e5685ed2
Moved to exploit/windows 2018-08-09 11:35:14 -05:00
Jacob Robles 228bd4c3ab
Add weblogic_deserialize module CVE-2018-2628 2018-08-08 17:55:41 -05:00
h00die d299831efe updated windows udf files and documentation 2018-08-07 14:50:47 -04:00
Dhiraj Mishra 22e3238dbc
Updating Docs 2018-08-04 19:10:08 +05:30
Brent Cook 78f66986e9
Land #10386, Add IEC104 client module 2018-08-04 07:43:15 -05:00
Brent Cook 919da41aab
Land #9692, Add DoS module for Siemens Siprotec 4 2018-08-04 07:20:57 -05:00
Dhiraj Mishra c6eb4994c1
Updating docs 2018-08-04 13:27:27 +05:30
Brendan Coles 1c82592882
Land #10358, Add Dicoogle PACS Directory Traversal scanner module 2018-08-04 05:31:16 +00:00
h00die e5dcfa62c9 remove encoding and escaping 2018-08-03 20:23:33 -04:00
Wei Chen 0785d59146
Land #10412, Add Cisco directory traversal auxiliary module 2018-08-02 16:44:59 -05:00
Tim W 8785ec21b6
Land #9884, add linux ufo priv esc module 2018-08-02 17:53:36 +08:00
Shelby Pace bbe6206026
documentation for cisco dir traversal module 2018-08-01 13:04:09 -05:00
James Barnett 888dc43a7e
Land #10348, Add REST API for module queries
This PR also updates the local module queries with more query parameters
and logic.
2018-07-31 16:06:31 -05:00
Matthew Kienow 5308c5eca5
Land #10377, update REST API JSON format 2018-07-31 16:59:05 -04:00
Erin Bleiweiss 58b3f63c1a Update to reflect new JSON models 2018-07-31 15:57:26 -05:00
James Barnett 458fb36ec8
Update API docs for GET resource/ID 2018-07-31 15:43:57 -05:00
Erin Bleiweiss 3e8efea57a Merge branch 'conform_to_api_standards' into exploit-query
Prepare for new JSON format.
2018-07-31 14:48:37 -05:00
Erin Bleiweiss 3291931955 Merge branch 'upstream-master' into exploit-query 2018-07-31 11:51:14 -05:00
Dhiraj Mishra bdd2ceba2b
Documentation 2018-07-31 18:07:57 +05:30
Wei Chen bcfb3d099b
Land #10255, Adding Micro Focus Secure Messaging Gateway RCE 2018-07-30 21:07:02 -05:00
Wei Chen 7d08c71722 Update documentation about how to make it vulnerable again 2018-07-30 21:05:46 -05:00
William Vu 129fd44350
Land #10305, SonicWall XML-RPC RCE 2018-07-30 14:14:26 -05:00
William Vu 51ffe7abba Add header to doc 2018-07-30 14:07:54 -05:00
Jacob Robles 952ab801e8
Land #10060, vTiger CRM v6.3.0 Upload RCE 2018-07-30 12:32:24 -05:00
Jacob Robles fe9315dc89
Update module, Add documentation 2018-07-30 12:11:08 -05:00
Shelby Pace d58785f959
Land #10247, add WordPress Arbitrary File Deletion 2018-07-30 09:05:23 -05:00
h00die 53cca07442 bcoles suggestions 2018-07-29 10:31:01 -04:00
Wei Chen 32384cf850
Land #10387, Update mov_ss and add mov_ss_dll 2018-07-27 14:52:21 -05:00
James Barnett 3411d0bce2
Refactor error JSON responses to use a helper method 2018-07-27 13:59:17 -05:00
bwatters-r7 d343458dc5
Update documentation with build instructions
remove superfluous directory
2018-07-27 11:31:59 -05:00
bwatters-r7 1981c3c24b
Fix documentation 2018-07-27 11:21:06 -05:00
James Barnett 15fe80de06 Merge branch 'master' into conform_to_api_standards 2018-07-27 11:08:18 -05:00
bwatters-r7 eab62c18c6
Update mov_ss and add mov_ss_dll 2018-07-27 09:40:34 -05:00
michaelj0hn 7bbb44401d
added definition of IEC104 2018-07-27 15:21:00 +02:00
michaelj0hn 09320ece91 iec104 client 2018-07-27 11:46:26 +02:00
Wei Chen 1bcf2f9b37
Land #10383, Add WP Responsive Thumbnail Slider Plugin Exploit Module 2018-07-26 23:53:25 -05:00
Wei Chen 72d634b10b Update module and its documentation 2018-07-26 23:08:20 -05:00
Brent Cook 32d6344e6b
Land #9964, android post module to extract subscriber info 2018-07-26 16:58:27 -05:00
Shelby Pace 6accca4181
added documentation and check method 2018-07-26 15:32:37 -05:00
Erin Bleiweiss 2572a297a2 clean up parameter delcarations in docs and rename doc files to module_search 2018-07-26 11:43:55 -05:00
James Barnett b1022d16bf
Fix typo in delete response message in docs 2018-07-26 08:43:05 -05:00
James Barnett ec62815d6e
Add error responses to API docs 2018-07-25 21:46:33 -05:00
James Barnett cc21c0a673
Update documentation for new format 2018-07-25 18:01:05 -05:00
Wei Chen 6c2e8f2402
Land #10300, Add root exploit for Axis network cameras 2018-07-25 14:46:04 -05:00
Wei Chen f169afff6a Add documentation and a new reference 2018-07-25 14:44:44 -05:00
William Vu bc89d7fe52
Land #10357, CouchDB improvements and docs 2018-07-25 00:54:55 -05:00
Wei Chen 625ea87ea9
Land #10368, PhpMyAdmin Login Scanner Module 2018-07-24 23:25:27 -05:00
Erin Bleiweiss 87434ef22d pull changes 2018-07-24 15:42:31 -05:00
Shelby Pace 4f81fcdc87
retn versions in chk_setup, tests to reflect, doc 2018-07-24 14:51:00 -05:00
James Barnett eccd223a3e
Merge branch 'master' into conform_to_api_standards 2018-07-24 12:11:14 -05:00
Shelby Pace eb72edc84a
added documentation for aux module 2018-07-24 10:22:53 -05:00
Matthew Kienow dac5780feb
Land #10176, creds data service CRUD operations 2018-07-23 23:36:32 -04:00
James Barnett e3da0a6828 Merge branch 'master' into remote_creds_data 2018-07-23 16:39:13 -05:00
h00die e1100572ac add afp docs 2018-07-22 20:56:52 -04:00
h00die 83ae5cb14d fix backup_file.rb and add a few docs 2018-07-22 20:50:22 -04:00
h00die 03e8f45634 add more version info for docs 2018-07-21 21:39:19 -04:00
h00die 2a969d70db dicoogle 2018-07-21 21:31:45 -04:00
h00die f1e1407901 add musl-cross info 2018-07-21 14:22:27 -04:00
h00die 17b94f7cf3 add smap disabling instructions 2018-07-21 14:20:24 -04:00
h00die 85c2e5298f patch up docs 2018-07-21 14:06:57 -04:00
h00die 4a9e6fac66 patch up docs 2018-07-21 14:00:29 -04:00
h00die abfed97e03 remove EOL spaces 2018-07-21 11:21:11 -04:00
h00die 357f221b93 update doc 2018-07-21 11:09:16 -04:00
h00die 8b324c19d8 update couchdb scanner 2018-07-21 11:02:50 -04:00
James Barnett 65d42380d3
Merge branch 'master' into remote_creds_data 2018-07-19 16:25:06 -05:00
Erin Bleiweiss 04a6cf8f0a pull latest changes and re-register module servlet in new sinatra base 2018-07-19 14:42:39 -05:00
Erin Bleiweiss ce7eb9f3fe add list of valid fields to documenation and update aliases 2018-07-19 14:31:46 -05:00
Erin Bleiweiss 462655dea1 update response example documentation 2018-07-19 14:10:04 -05:00
Erin Bleiweiss 4c71268b38 add documentation for aliases 2018-07-19 13:38:18 -05:00
Erin Bleiweiss e3716305dc add new fields to swagger doc 2018-07-19 13:31:41 -05:00
Brendan Coles 19239c72c0 Update cmsms_upload_rename_rce check and docs 2018-07-19 18:26:42 +00:00
Wei Chen 28e3f3a5f0
Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE 2018-07-19 12:18:12 -05:00
James Barnett 59962c5273 Merge branch 'master' into conform_to_api_standards 2018-07-19 09:26:17 -05:00
Erin Bleiweiss 8010c58220 add module documentation to swagger (WIP) 2018-07-18 17:36:31 -05:00
James Barnett 4d2e0e51e4
Update docs for /endpoit/ID GET requests 2018-07-18 16:01:12 -05:00
Tim W 70a1df70a1
Land #9753, Linux BPF sign extension local privesc 2018-07-18 18:44:14 +08:00
Jacob Robles 1e004769ca
CMS Made Simple Upload/Rename Authenticated RCE 2018-07-17 09:00:39 -05:00
Eliott Teissonniere 01e6362828 Fix documentation wording 2018-07-17 13:01:49 +02:00
Brendan Coles 6bf184dbcf Update tested versions 2018-07-17 06:24:16 +00:00
William Vu 9a7c34e6e9
Land #10064, Claymore Dual Miner API RCE 2018-07-16 18:02:20 -05:00
Eliott Teissonniere bfd521f2cb Small note about network not available 2018-07-16 11:56:55 +02:00
Eliott Teissonniere aa58634b24 Document rc.local 2018-07-16 09:34:20 +02:00
Jacob Robles 6e450973b9
Land #10295, Add QNAP Q'Center change_passwd Command Execution exploit 2018-07-14 10:09:46 -05:00
Brendan Coles 9bdec97b2e Fix bpf_sign_extension_priv_esc 2018-07-13 23:01:17 +00:00
Wei Chen b40a146723
Land #10297, Add priv escalation mod for CVE-2018-8897 2018-07-13 10:54:25 -05:00
Wei Chen d7a0d7ecf3 Add some documentation for mov_ss.md 2018-07-13 01:17:28 -05:00
Brendan Coles 1ad571f136
Fix password typo 2018-07-13 16:02:15 +10:00
Brendan Coles 392cf3bbe1
Are hosts? 2018-07-13 15:00:31 +10:00
Brendan Coles a020d48caf Move module documentation to documentation directory 2018-07-13 04:46:25 +00:00
Brendan Coles 358347358f Add documentation 2018-07-13 04:18:56 +00:00
William Vu ed163c11a0
Land #10296, a few aux module docs 2018-07-12 22:20:25 -05:00
William Vu c9001699cd
Land #10027, Hadoop unauthed command execution 2018-07-12 21:58:49 -05:00
William Vu 50252c75d6 Clean up module
With a little rubocop -a.
2018-07-12 21:58:00 -05:00
h00die 6751d48564 A few aux module docs 2018-07-12 17:50:47 -04:00
William Vu acb20e5a29
Land #9780, CouchDB auth bypass and RCE 2018-07-12 03:36:17 -05:00
William Vu a08420e0d0
Land #10286, Docker server version scanner 2018-07-12 03:08:41 -05:00
William Vu e62dbecbef Add module doc 2018-07-12 03:06:16 -05:00
Shelby Pace 1ded8ffb29
Land #10260, Add phpMyAdmin v4.8.1/4.8.0 LFI RCE 2018-07-11 11:10:52 -05:00
James Barnett c26fcc0af1 Merge branch 'master' into remote_creds_data 2018-07-11 10:27:49 -05:00
James Barnett b119622408
GET with ID is NYI for credentials 2018-07-10 17:30:44 -05:00
James Barnett 0270b0269b
Update Credential API documentation 2018-07-10 17:29:25 -05:00
Shelby Pace 10cd6c99d9
Land #10231, Monstra Fileupload Exec 2018-07-10 14:23:15 -05:00
James Barnett e7ddb6fdf5
Add API docs for logins endpoints 2018-07-10 14:21:19 -05:00
Shelby Pace 476a3a276f
modified capitalization and wording 2018-07-10 14:12:02 -05:00
Brent Cook 1af360d7e0
Land #10108, add IBM QRadar SIEM exploit 2018-07-10 11:52:32 -05:00
Brent Cook 625050767e add module docs 2018-07-10 11:51:57 -05:00