William Vu
236606838a
Land #7987 , MVPower DVR exploit
2017-02-23 01:46:04 -06:00
Brendan Coles
c9e09491dd
Add documentation
2017-02-23 07:44:45 +00:00
William Vu
bf47ac2fa9
chmod -x a couple module docs
...
Hat tip @bcoles.
2017-02-22 23:43:54 -06:00
Brendan Coles
5d3a4cce67
Use all caps for module option names
2017-02-23 16:30:01 +11:00
h00die
6a7dab0b1c
add key explain line
2017-02-22 22:15:05 -05:00
h00die
aee6707713
ssh_login docs
2017-02-22 22:13:07 -05:00
bigendiansmalls
27a7b279f5
Major rewrite and cleanup of reverse shell jcl
...
The shell does exactly the same as the previous, just made the code read much
better so as to not severely anger the gray beards and other lesser
mainframe deities. The only architectural change is the payload uses the
spawn system call vs exec - this provides for a cleaner exit in some cases.
2017-02-22 17:17:27 -06:00
bwatters-r7
40e6413867
Land #7980 , Add a sploit for CVE-2017-5982, kodi file traversal
2017-02-22 13:11:48 -06:00
Jeff Tang
84ab3c66cc
Use obfuscated JS in BES
2017-02-22 12:47:36 -05:00
Brendan Coles
47fec5626e
Style update
2017-02-22 07:56:17 +00:00
Brendan Coles
e491f01c70
Add MVPower DVR Shell Unauthenticated Command Execution module
2017-02-22 05:15:57 +00:00
wchen-r7
48f6740fee
Land #7969 , Add Module Trend Micro IMSVA Remote Code Execution
2017-02-21 17:29:04 -06:00
bwatters-r7
4f839299f1
Land #7978 , Add a test module for railgun API calls
2017-02-21 17:15:49 -06:00
Metasploit
01558d3d51
Bump version of framework to 4.13.26
2017-02-21 14:01:15 -08:00
James Barnett
d738b63fa6
Land #7985 , Fix bug in check_setup for bavision
...
@wchen-r7 fix uncovered another bug in the logic for the
check_setup return. This switches the return to the expected
values.
Fixes #7984
2017-02-21 14:29:21 -06:00
James Barnett
93f75746c4
Fix logic error in #7985
...
The check_setup method expects an error message if the
web server is not compatible with the module, and false otherwise.
We were previously returning the opposite of the expected behavior.
2017-02-21 13:49:59 -06:00
bwatters-r7
a9b9a58d4d
Land #7893 , Add Module AlienVault OSSIM/USM Remote Code Execution
2017-02-21 13:35:56 -06:00
William Webb
2a20d24c29
Land #7966 , Fix 'rm' to handle multiple files
2017-02-21 13:32:19 -06:00
William Webb
83cc28a091
Land #7972 , Microsoft Office Word Macro Generator OS X Edition
2017-02-21 13:26:42 -06:00
wchen-r7
adf1385427
Fix #7984 , Fix NoMethodError `match' for bavision_cameras.rb
...
Fix #7984
2017-02-21 12:00:01 -06:00
Pearce Barry
243ec5fc3f
Land #7982 , Fix typo in smtp fuzzer
2017-02-20 15:02:37 -06:00
Jan-Erik Rediger
49da6289a9
Fix typo in smtp fuzzer
2017-02-20 21:47:59 +01:00
Rich Whitcroft
f08478e02f
fix handler persistence
2017-02-20 13:51:07 -05:00
jvoisin
73eed104a9
Take into account @h00die's comments.
2017-02-20 13:22:20 +01:00
William Vu
dad21b1c1d
Land #7979 , another downcase fix for a password
2017-02-19 21:26:52 -06:00
jvoisin
7bd6aff1cf
Add a sploit for CVE-2017-5982
2017-02-19 21:57:27 +01:00
h00die
92c1fa8390
remove downcase
2017-02-18 20:13:32 -05:00
Spencer McIntyre
7d1fadb84f
Add a test module for railgun api calls
2017-02-18 17:37:49 -05:00
Metasploit
647020289f
Bump version of framework to 4.13.25
2017-02-17 17:03:42 -08:00
Brent Cook
5001097a78
Land #7977 , Python Meterpreter compatibilty fixes
2017-02-17 18:58:40 -06:00
Brent Cook
ef2fff798e
update sizes
2017-02-17 18:57:02 -06:00
Brent Cook
86c04cd9f4
update metasploit payloads with Python fixes
2017-02-17 18:52:14 -06:00
Brent Cook
052bf7d99c
fix some module documentation formatting
2017-02-17 18:12:57 -06:00
Brent Cook
24151a9c27
Land #7753 , Add auxiliary RomPager misfortune cookie authentication bypass
2017-02-17 18:07:15 -06:00
dmohanty-r7
c4f1e0db1f
Land #7913 , Fix Console Route Print with ipv4 and ipv6
2017-02-17 17:42:57 -06:00
Brent Cook
2c570b6709
Land #7942 , Microsoft SQL Server Clr Stored Procedure Payload Execution
2017-02-17 17:28:54 -06:00
Brent Cook
014fe2520c
module docs
2017-02-17 17:28:30 -06:00
Brent Cook
17b88da080
Land #7964 , fix running a scanner with USER_AS_PASS and USER_FILE
2017-02-17 17:16:49 -06:00
Brent Cook
e4c324c988
Land #7941 , treat a user with no mailbox as a valid credential anyway
2017-02-17 17:09:57 -06:00
Brent Cook
566bafe65d
Land #7962 , Uploading files without specifying the destination closes a Meterpreter session.
2017-02-17 17:04:22 -06:00
Brent Cook
5207cb6c3a
Land #7914 , send the correct exception on channel open failure
2017-02-17 17:00:30 -06:00
Brent Cook
807a27e73d
clarify error handling when a channel cannot be opened
2017-02-17 16:59:09 -06:00
William Vu
91df7d8004
Land #7976 , target hash fix for autotargeting
2017-02-17 16:02:17 -06:00
Brent Cook
0e3eba18b3
simplify guard logic
2017-02-17 16:00:15 -06:00
Brent Cook
f4befda59b
inherit the options from the default target so we can autocomplete before the rhost resolution occurs
2017-02-17 15:50:45 -06:00
Brent Cook
8019a9e519
Land #7947 , fix crash in panda_psevents when an unexpected target OS is found
2017-02-17 14:08:27 -06:00
Metasploit
6e62899e1c
Bump version of framework to 4.13.24
2017-02-17 10:02:51 -08:00
Brent Cook
da82f0891e
Land #7860 , Add OverrideScheme option to reverse_http/s handler
2017-02-17 11:12:49 -06:00
wchen-r7
1f23b44003
I modified windows/fileformat/office_word_macro the wrong way
2017-02-16 23:16:06 -06:00
Jin Qian
584850f1f8
Merge branch 'wchen-r7-fix_7959' into upstream-master
2017-02-16 18:12:00 -06:00