William Vu
672dbb7acb
Land #9364 , HP PJL/SNMP CVE-2017-2741 exploit
...
Finally!
2018-08-23 22:47:09 -05:00
h00die
8213c21dc9
Land #10467 documentation for postgresql hashdump
2018-08-23 21:35:05 -04:00
h00die
a866bdd09d
slight syntax updates to md
2018-08-23 21:34:48 -04:00
h00die
1585eff29f
Land #10466 docs for postgres_version
2018-08-23 21:10:34 -04:00
h00die
3024725122
slight syntax updates to md
2018-08-23 21:09:52 -04:00
h00die
b8ce6782d9
Land #10517 updated docs for CloudMe Sync
2018-08-23 20:54:01 -04:00
Wei Chen
2193dd662d
Land #10504 , add Foxit Reader UAF Module and Docs
2018-08-23 18:56:07 -05:00
Shelby Pace
5f9432ed6a
added rca to cloudme doc
2018-08-23 16:12:13 -05:00
Matthew Kienow
7a534707ab
Add note about unauthenticated telnetd service
2018-08-23 16:16:47 -04:00
Matthew Kienow
ecc6c473d8
Add note about unauthenticated telnetd service
2018-08-23 15:50:41 -04:00
Matthew Kienow
ee6bf7a77c
Fix documentation markdown table format
2018-08-23 15:23:41 -04:00
Matthew Kienow
18712c25cd
Add uname to module documentation scenario
2018-08-23 15:23:41 -04:00
Matthew Kienow
77b77287cc
Add module and payload documentation
2018-08-23 15:23:40 -04:00
Mumbai
46b45f379b
Add documentation for MS16 Reflection DCOM->RPC
2018-08-21 11:27:07 -04:00
Jacob Robles
fd6880d0d0
Add Foxit Reader UAF Module and Docs
2018-08-21 08:21:51 -05:00
William Vu
06582a00a0
Add module doc for ssh_enumusers
...
And update description in module.
2018-08-20 19:26:51 -05:00
Tim W
b8b48fd37a
Land #10313 , add linux autostart persistence module
2018-08-20 18:17:50 +08:00
Tim W
865898cba7
minor fixes
2018-08-20 17:51:41 +08:00
Dhiraj Mishra
3cebfe4e14
Documentation
2018-08-19 23:56:00 +05:30
Brendan Coles
f09148d843
Add documentation
2018-08-19 08:20:41 +00:00
Tim W
ac71bc86ee
Land #10320 , add module for persistence in /etc/rc.local
2018-08-19 15:30:50 +08:00
Tim W
e38775b504
minor tweaks
2018-08-19 15:27:04 +08:00
Arpit Agrawal
a673ca1bc4
Update reverse_ord_tcp.md
2018-08-17 19:59:39 +05:30
agrawalarpit14
59d977edfa
Documentation on windows/shell/reverse_ord_tcp
...
Part of Issue #7142
2018-08-17 16:22:39 +05:30
Eliott Teissonniere
a22acf3f3e
Document autostart module
2018-08-17 14:24:28 +08:00
William Vu
c24ceb9483
Move and update marked_redos module doc
2018-08-16 15:12:36 -05:00
William Vu
5096eee2ec
Land #10120 , npm "marked" ReDoS module
2018-08-16 15:01:12 -05:00
Kevin Kirsche
809a15541c
Create documentation for PostgreSQL hash dumper
...
Documentation on auxiliary/scanner/postgres/postgres_hashdump
Part of issue #8296
Please see and following installation and exploitation steps using your machine. Please replace IP's where appropriate depending on if you are attacking your local machine or another machine on your network.
2018-08-16 08:39:39 -04:00
Kevin Kirsche
45cb0a9f6e
Create documentation for PostgreSQL version scanner
...
Documentation on auxiliary/scanner/postgres/postgres_version
Part of issue #8296
## Verification
Please see and following installation and exploitation steps using your machine. Please replace IP's where appropriate depending on if you are attacking your local machine or another machine on your network.
2018-08-16 08:02:42 -04:00
James Barnett
becd42553a
Land #10462 , Add API documentation for users and auth endpoints
2018-08-15 17:10:26 -05:00
Erin Bleiweiss
4b42e7633c
Add examples for username and password properties
2018-08-15 16:34:11 -05:00
Erin Bleiweiss
a70c5f0c37
Replace strings with reusable constants
2018-08-15 15:26:35 -05:00
Erin Bleiweiss
c19dc52573
Remove extraneous lines from a bad copy/paste
2018-08-15 15:03:27 -05:00
h00die
61dfd75663
Land #10457 docs for elasticsearch indices_enum
2018-08-14 20:55:15 -04:00
h00die
a620958b97
update elasticsearch doc format
2018-08-14 20:53:18 -04:00
h00die
44fd9c63e0
doc format update
2018-08-14 20:39:04 -04:00
Erin Bleiweiss
2abc49641c
Add 401 responses for all endpoints
2018-08-14 13:35:59 -05:00
Erin Bleiweiss
66b761db15
Add doc for user operations
2018-08-14 13:19:56 -05:00
Erin Bleiweiss
f7a0b201d7
Add authorization support for auth/bearer tokens
2018-08-14 11:51:15 -05:00
Kevin Kirsche
d273eb3914
Create elasticsearch indices_enum documentation
...
Documentation on auxiliary/scanner/elasticsearch/indices_enum
Part of issue #8296
2018-08-13 22:14:03 -04:00
Jacob Robles
ddebdea8c1
Update cgit doc
2018-08-13 16:45:13 -05:00
Jacob Robles
85a137e0a0
Land #10420 , cgit < 1.2.1 Directory Traversal
2018-08-13 16:25:23 -05:00
Jacob Robles
5a3d040d71
Fix module, Add documentation
2018-08-13 15:48:21 -05:00
Shelby Pace
ce8cbd64d4
Land #10404 , Add Path Traversal Oracle GlassFish
2018-08-13 11:15:26 -05:00
Jacob Robles
66e5685ed2
Moved to exploit/windows
2018-08-09 11:35:14 -05:00
Jacob Robles
228bd4c3ab
Add weblogic_deserialize module CVE-2018-2628
2018-08-08 17:55:41 -05:00
h00die
d299831efe
updated windows udf files and documentation
2018-08-07 14:50:47 -04:00
Dhiraj Mishra
22e3238dbc
Updating Docs
2018-08-04 19:10:08 +05:30
Brent Cook
78f66986e9
Land #10386 , Add IEC104 client module
2018-08-04 07:43:15 -05:00
Brent Cook
919da41aab
Land #9692 , Add DoS module for Siemens Siprotec 4
2018-08-04 07:20:57 -05:00
Dhiraj Mishra
c6eb4994c1
Updating docs
2018-08-04 13:27:27 +05:30
Brendan Coles
1c82592882
Land #10358 , Add Dicoogle PACS Directory Traversal scanner module
2018-08-04 05:31:16 +00:00
h00die
e5dcfa62c9
remove encoding and escaping
2018-08-03 20:23:33 -04:00
Wei Chen
0785d59146
Land #10412 , Add Cisco directory traversal auxiliary module
2018-08-02 16:44:59 -05:00
Tim W
8785ec21b6
Land #9884 , add linux ufo priv esc module
2018-08-02 17:53:36 +08:00
Shelby Pace
bbe6206026
documentation for cisco dir traversal module
2018-08-01 13:04:09 -05:00
James Barnett
888dc43a7e
Land #10348 , Add REST API for module queries
...
This PR also updates the local module queries with more query parameters
and logic.
2018-07-31 16:06:31 -05:00
Matthew Kienow
5308c5eca5
Land #10377 , update REST API JSON format
2018-07-31 16:59:05 -04:00
Erin Bleiweiss
58b3f63c1a
Update to reflect new JSON models
2018-07-31 15:57:26 -05:00
James Barnett
458fb36ec8
Update API docs for GET resource/ID
2018-07-31 15:43:57 -05:00
Erin Bleiweiss
3e8efea57a
Merge branch 'conform_to_api_standards' into exploit-query
...
Prepare for new JSON format.
2018-07-31 14:48:37 -05:00
Erin Bleiweiss
3291931955
Merge branch 'upstream-master' into exploit-query
2018-07-31 11:51:14 -05:00
Dhiraj Mishra
bdd2ceba2b
Documentation
2018-07-31 18:07:57 +05:30
Wei Chen
bcfb3d099b
Land #10255 , Adding Micro Focus Secure Messaging Gateway RCE
2018-07-30 21:07:02 -05:00
Wei Chen
7d08c71722
Update documentation about how to make it vulnerable again
2018-07-30 21:05:46 -05:00
William Vu
129fd44350
Land #10305 , SonicWall XML-RPC RCE
2018-07-30 14:14:26 -05:00
William Vu
51ffe7abba
Add header to doc
2018-07-30 14:07:54 -05:00
Jacob Robles
952ab801e8
Land #10060 , vTiger CRM v6.3.0 Upload RCE
2018-07-30 12:32:24 -05:00
Jacob Robles
fe9315dc89
Update module, Add documentation
2018-07-30 12:11:08 -05:00
Shelby Pace
d58785f959
Land #10247 , add WordPress Arbitrary File Deletion
2018-07-30 09:05:23 -05:00
h00die
53cca07442
bcoles suggestions
2018-07-29 10:31:01 -04:00
Wei Chen
32384cf850
Land #10387 , Update mov_ss and add mov_ss_dll
2018-07-27 14:52:21 -05:00
James Barnett
3411d0bce2
Refactor error JSON responses to use a helper method
2018-07-27 13:59:17 -05:00
bwatters-r7
d343458dc5
Update documentation with build instructions
...
remove superfluous directory
2018-07-27 11:31:59 -05:00
bwatters-r7
1981c3c24b
Fix documentation
2018-07-27 11:21:06 -05:00
James Barnett
15fe80de06
Merge branch 'master' into conform_to_api_standards
2018-07-27 11:08:18 -05:00
bwatters-r7
eab62c18c6
Update mov_ss and add mov_ss_dll
2018-07-27 09:40:34 -05:00
michaelj0hn
7bbb44401d
added definition of IEC104
2018-07-27 15:21:00 +02:00
michaelj0hn
09320ece91
iec104 client
2018-07-27 11:46:26 +02:00
Wei Chen
1bcf2f9b37
Land #10383 , Add WP Responsive Thumbnail Slider Plugin Exploit Module
2018-07-26 23:53:25 -05:00
Wei Chen
72d634b10b
Update module and its documentation
2018-07-26 23:08:20 -05:00
Brent Cook
32d6344e6b
Land #9964 , android post module to extract subscriber info
2018-07-26 16:58:27 -05:00
Shelby Pace
6accca4181
added documentation and check method
2018-07-26 15:32:37 -05:00
Erin Bleiweiss
2572a297a2
clean up parameter delcarations in docs and rename doc files to module_search
2018-07-26 11:43:55 -05:00
James Barnett
b1022d16bf
Fix typo in delete response message in docs
2018-07-26 08:43:05 -05:00
James Barnett
ec62815d6e
Add error responses to API docs
2018-07-25 21:46:33 -05:00
James Barnett
cc21c0a673
Update documentation for new format
2018-07-25 18:01:05 -05:00
Wei Chen
6c2e8f2402
Land #10300 , Add root exploit for Axis network cameras
2018-07-25 14:46:04 -05:00
Wei Chen
f169afff6a
Add documentation and a new reference
2018-07-25 14:44:44 -05:00
William Vu
bc89d7fe52
Land #10357 , CouchDB improvements and docs
2018-07-25 00:54:55 -05:00
Wei Chen
625ea87ea9
Land #10368 , PhpMyAdmin Login Scanner Module
2018-07-24 23:25:27 -05:00
Erin Bleiweiss
87434ef22d
pull changes
2018-07-24 15:42:31 -05:00
Shelby Pace
4f81fcdc87
retn versions in chk_setup, tests to reflect, doc
2018-07-24 14:51:00 -05:00
James Barnett
eccd223a3e
Merge branch 'master' into conform_to_api_standards
2018-07-24 12:11:14 -05:00
Shelby Pace
eb72edc84a
added documentation for aux module
2018-07-24 10:22:53 -05:00
Matthew Kienow
dac5780feb
Land #10176 , creds data service CRUD operations
2018-07-23 23:36:32 -04:00
James Barnett
e3da0a6828
Merge branch 'master' into remote_creds_data
2018-07-23 16:39:13 -05:00
h00die
e1100572ac
add afp docs
2018-07-22 20:56:52 -04:00
h00die
83ae5cb14d
fix backup_file.rb and add a few docs
2018-07-22 20:50:22 -04:00
h00die
03e8f45634
add more version info for docs
2018-07-21 21:39:19 -04:00
h00die
2a969d70db
dicoogle
2018-07-21 21:31:45 -04:00
h00die
f1e1407901
add musl-cross info
2018-07-21 14:22:27 -04:00
h00die
17b94f7cf3
add smap disabling instructions
2018-07-21 14:20:24 -04:00
h00die
85c2e5298f
patch up docs
2018-07-21 14:06:57 -04:00
h00die
4a9e6fac66
patch up docs
2018-07-21 14:00:29 -04:00
h00die
abfed97e03
remove EOL spaces
2018-07-21 11:21:11 -04:00
h00die
357f221b93
update doc
2018-07-21 11:09:16 -04:00
h00die
8b324c19d8
update couchdb scanner
2018-07-21 11:02:50 -04:00
James Barnett
65d42380d3
Merge branch 'master' into remote_creds_data
2018-07-19 16:25:06 -05:00
Erin Bleiweiss
04a6cf8f0a
pull latest changes and re-register module servlet in new sinatra base
2018-07-19 14:42:39 -05:00
Erin Bleiweiss
ce7eb9f3fe
add list of valid fields to documenation and update aliases
2018-07-19 14:31:46 -05:00
Erin Bleiweiss
462655dea1
update response example documentation
2018-07-19 14:10:04 -05:00
Erin Bleiweiss
4c71268b38
add documentation for aliases
2018-07-19 13:38:18 -05:00
Erin Bleiweiss
e3716305dc
add new fields to swagger doc
2018-07-19 13:31:41 -05:00
Brendan Coles
19239c72c0
Update cmsms_upload_rename_rce check and docs
2018-07-19 18:26:42 +00:00
Wei Chen
28e3f3a5f0
Land #10327 , Add CMS Made Simple Upload/Rename Authenticated RCE
2018-07-19 12:18:12 -05:00
James Barnett
59962c5273
Merge branch 'master' into conform_to_api_standards
2018-07-19 09:26:17 -05:00
Erin Bleiweiss
8010c58220
add module documentation to swagger (WIP)
2018-07-18 17:36:31 -05:00
James Barnett
4d2e0e51e4
Update docs for /endpoit/ID GET requests
2018-07-18 16:01:12 -05:00
Tim W
70a1df70a1
Land #9753 , Linux BPF sign extension local privesc
2018-07-18 18:44:14 +08:00
Jacob Robles
1e004769ca
CMS Made Simple Upload/Rename Authenticated RCE
2018-07-17 09:00:39 -05:00
Eliott Teissonniere
01e6362828
Fix documentation wording
2018-07-17 13:01:49 +02:00
Brendan Coles
6bf184dbcf
Update tested versions
2018-07-17 06:24:16 +00:00
William Vu
9a7c34e6e9
Land #10064 , Claymore Dual Miner API RCE
2018-07-16 18:02:20 -05:00
Eliott Teissonniere
bfd521f2cb
Small note about network not available
2018-07-16 11:56:55 +02:00
Eliott Teissonniere
aa58634b24
Document rc.local
2018-07-16 09:34:20 +02:00
Jacob Robles
6e450973b9
Land #10295 , Add QNAP Q'Center change_passwd Command Execution exploit
2018-07-14 10:09:46 -05:00
Brendan Coles
9bdec97b2e
Fix bpf_sign_extension_priv_esc
2018-07-13 23:01:17 +00:00
Wei Chen
b40a146723
Land #10297 , Add priv escalation mod for CVE-2018-8897
2018-07-13 10:54:25 -05:00
Wei Chen
d7a0d7ecf3
Add some documentation for mov_ss.md
2018-07-13 01:17:28 -05:00
Brendan Coles
1ad571f136
Fix password typo
2018-07-13 16:02:15 +10:00
Brendan Coles
392cf3bbe1
Are hosts?
2018-07-13 15:00:31 +10:00
Brendan Coles
a020d48caf
Move module documentation to documentation directory
2018-07-13 04:46:25 +00:00
Brendan Coles
358347358f
Add documentation
2018-07-13 04:18:56 +00:00
William Vu
ed163c11a0
Land #10296 , a few aux module docs
2018-07-12 22:20:25 -05:00
William Vu
c9001699cd
Land #10027 , Hadoop unauthed command execution
2018-07-12 21:58:49 -05:00
William Vu
50252c75d6
Clean up module
...
With a little rubocop -a.
2018-07-12 21:58:00 -05:00
h00die
6751d48564
A few aux module docs
2018-07-12 17:50:47 -04:00
William Vu
acb20e5a29
Land #9780 , CouchDB auth bypass and RCE
2018-07-12 03:36:17 -05:00
William Vu
a08420e0d0
Land #10286 , Docker server version scanner
2018-07-12 03:08:41 -05:00
William Vu
e62dbecbef
Add module doc
2018-07-12 03:06:16 -05:00
Shelby Pace
1ded8ffb29
Land #10260 , Add phpMyAdmin v4.8.1/4.8.0 LFI RCE
2018-07-11 11:10:52 -05:00
James Barnett
c26fcc0af1
Merge branch 'master' into remote_creds_data
2018-07-11 10:27:49 -05:00
James Barnett
b119622408
GET with ID is NYI for credentials
2018-07-10 17:30:44 -05:00
James Barnett
0270b0269b
Update Credential API documentation
2018-07-10 17:29:25 -05:00
Shelby Pace
10cd6c99d9
Land #10231 , Monstra Fileupload Exec
2018-07-10 14:23:15 -05:00
James Barnett
e7ddb6fdf5
Add API docs for logins endpoints
2018-07-10 14:21:19 -05:00
Shelby Pace
476a3a276f
modified capitalization and wording
2018-07-10 14:12:02 -05:00
Brent Cook
1af360d7e0
Land #10108 , add IBM QRadar SIEM exploit
2018-07-10 11:52:32 -05:00
Brent Cook
625050767e
add module docs
2018-07-10 11:51:57 -05:00