Wei Chen
a19046dedb
Land #10793 , improve windows_defender_js_hta
2018-10-15 17:42:21 -05:00
Wei Chen
8e442cc980
Update documenation
2018-10-15 15:45:39 -05:00
Wei Chen
b0313dd25c
Update getgodm_http_response_bof for proper auto targets
2018-10-15 15:25:55 -05:00
Wei Chen
ff9f3ed9ff
Add support for v5
2018-10-15 15:14:12 -05:00
Wei Chen
5433d2cca9
Sync up upstream master
2018-10-15 14:19:07 -05:00
h00die
8877582086
Land #10668 rsh stack clash solaris priv esc
2018-10-14 10:34:48 -04:00
William Vu
5b14d94957
Land #10671 , struts2_namespace_ognl updates
...
There are still some outstanding concerns, but I want to unblock this.
2018-10-12 11:08:33 -05:00
William Vu
2989507b85
Copy check for data_header to avoid crash
...
Variable was used but out of scope.
2018-10-12 11:06:26 -05:00
amaloteaux
f8ad47d475
improve windows_defender_js_hta :
...
-add platform detection for jsc
-prevent cmd prompt when launching jsc
2018-10-11 17:38:47 +02:00
Patrick DeSantis
c0aff8f134
Description update / typo fix
...
fix typo in module description (added one word)
2018-10-10 17:56:17 -04:00
Jacob Robles
fb689da24c
Land #10335 , Add vlc_mkv exploit module
2018-10-10 13:47:08 -05:00
Jacob Robles
50a7ee5e6a
Minor modifications
2018-10-10 12:22:47 -05:00
Jacob Robles
796579e265
Use fail_with
2018-10-10 11:24:16 -05:00
Jacob Robles
4beb434054
Default Payloads
...
exploit:vlc_mkv default target payloads
2018-10-10 11:23:17 -05:00
Brendan Coles
8826932f72
Fix syntax errors
2018-10-10 14:39:07 +00:00
Brendan Coles
15cfeb37ea
CamelCase
2018-10-10 14:35:34 +00:00
Brendan Coles
7a048afd14
Make WritableDir an advanced option
2018-10-10 14:12:29 +00:00
Jeffrey Martin
6cdfbdd281
Land #10554 , Rescue REX runtime errors in x86 encoders
2018-10-09 22:52:48 -05:00
Jacob Robles
1cb8418b2d
Filename options
...
exploit:vlc_mkv overwrite fileformat filename method
to supply options
2018-10-09 21:15:10 -05:00
Jacob Robles
94f260f289
exploit rand_text
...
exploit:vlc_mkv use rand_text functions defined in exploit.rb
2018-10-09 21:15:05 -05:00
Jacob Robles
e07da5c518
EDB Ref Fix
...
exploit:vlc_mkv
2018-10-09 20:57:44 -05:00
Jacob Robles
af594f6744
Merge in master
2018-10-09 12:56:31 -05:00
William Vu
9ec989a1bd
Address @bcoles' review in #10672
2018-10-08 14:15:21 -05:00
Tod Beardsley
6e10718ed5
Format ZDI ref correctly.
2018-10-08 13:48:52 -05:00
Tod Beardsley
f7d2815a01
Add a ZDI reference
2018-10-08 13:23:50 -05:00
Shelby Pace
bed497c6ae
Land #10672 , Add COMMGR Buffer Overflow module
2018-10-08 10:04:52 -05:00
Wei Chen
5951f5724e
Pass msftidy
2018-10-06 16:04:07 -05:00
Wei Chen
7c1fbf2c5a
Update description
2018-10-06 09:22:35 -05:00
Wei Chen
a25a7086b2
Rename file
2018-10-06 09:20:15 -05:00
Wei Chen
c7efd57144
Sync up with master
2018-10-06 08:27:01 -05:00
Brent Cook
3d507250b0
Land #9745 , Update QNX iwatchd to use newer APIs
2018-10-06 05:06:42 -04:00
Brent Cook
c9ebe5ae23
Land #9745 , Add ifwatchd QNX privilege escalation exploit module
2018-10-06 05:03:50 -04:00
Brendan Coles
89b6aafd85
Use register_file_for_cleanup
2018-10-06 04:37:04 +00:00
Brent Cook
e2f97c75a0
Land #10616 , update Unitrends UEB module to support vulnerabilities in version 10
2018-10-05 16:20:38 -05:00
Brent Cook
a51243ce91
Land #10745 , Update lastore_daemon_dbus_priv_esc tested versions
2018-10-05 11:35:31 -04:00
William Vu
7bc98e0ea8
Fix formatting and convert a missed AKA reference
2018-10-05 03:22:08 -05:00
William Vu
d9cb052189
Fix improper use of the Ruby shovel operator (<<)
...
junk would be modified and returned, and we just want to return the
concatenated string. Practically doesn't matter, but it's incorrect.
This was my first public module. I've been wanting to fix this since.
I'm noticing it again now as I look for how I used Ret in a target.
2018-10-05 02:18:06 -05:00
bwatters-r7
28fb27187a
Land #10418 , Add DCOM/RPC NTLM Reflection (MS16-075) Via Reflective DLL
...
Merge branch 'land-10418' into upstream-master
2018-10-04 16:54:53 -05:00
bwatters-r7
9a45c66db4
Fixed check to you know, check.
2018-10-04 16:38:35 -05:00
Brendan Coles
fe7ce02dfd
Update tested versions
2018-10-04 21:13:21 +00:00
William Vu
9f30512532
Land #10707 , module traits to augment module rank
2018-10-04 13:26:14 -05:00
Jacob Robles
071aa04111
Land #10738 , Add Zahir Enterprise 6 build 10b BOF
2018-10-04 11:00:12 -05:00
Wei Chen
fb60558777
Land #10712 , Make exploit/linux/http/axis_srv_parhand_rce more stable
2018-10-04 10:10:28 -05:00
Jacob Robles
060c68d2e0
Aligment, minor modifications
2018-10-04 10:10:09 -05:00
Jacob Robles
8b955f8ec5
Land #10704 , Navigate CMS Unauthenticated RCE
2018-10-04 06:44:21 -05:00
Brent Cook
ff0ee51da1
Land #10686 , ARGS, TIMEOUT, and output to upload_exec module
...
Merge remote-tracking branch 'upstream/pr/10686' into upstream-master
2018-10-04 04:28:02 -05:00
Thomas Gregory
144c76ecd4
Latest fix based on @jrobles-r7 recommendations
...
Fixing:
- MetasploitModule class changed
- Remove the word 'exploit' from name
- Remove StackAdjustment
- Remove Privileged option
- Remove make_nops(12)
- Remove extra buffer at the end of exploit
2018-10-04 16:18:02 +07:00
Thomas Gregory
991ac3c671
Fixing for msftidy
...
Fixing some format because still throw errors
2018-10-03 18:55:29 +07:00
Thomas Gregory
cb5d68b641
Fixing based on msftidy.rb
...
Makes msftidy happy
2018-10-03 17:13:24 +07:00
William Vu
e0a664c0cd
Improve prints, use FileDropper, and bump TIMEOUT
2018-10-02 21:53:18 -05:00