William Webb
d4ba28a20b
Land #8457 , Update multi/fileformat/office_word_macro to allow custom templates
2017-05-26 15:09:23 -05:00
Renato Piccoli
ab8326755d
Travis: disable the failing tests. #8444
...
They have not been executed for a while.
TODO: re-enable them when they succeed again.
2017-05-26 21:25:56 +02:00
Renato Piccoli
a91c954361
Fix .travis.yml
...
- Try to update the bundler before using it.
- Use single quotes (') around the variable definition.
- Echo the final command right before running it.
- Call bash to run the final command.
2017-05-26 21:25:55 +02:00
William Webb
f176315942
Land #8462 , Remove deprecated windows/fileformat/office_word_macro
2017-05-26 13:38:02 -05:00
h00die
06ccd17d49
land #8466 update to docs for is_known_pipename
2017-05-26 14:14:01 -04:00
h00die
b3a5a8840b
added ubuntu information
2017-05-26 14:10:26 -04:00
Metasploit
15b3b7de41
Bump version of framework to 4.14.23
2017-05-26 10:02:14 -07:00
root
9b9d2f2345
Final version of configurable depth
2017-05-26 16:23:22 +02:00
root
33ddef9303
Add documentation, add configurable depth path
2017-05-26 16:14:03 +02:00
wchen-r7
162a660d45
Remove the old windows/fileformat/office_word_macro
...
windows/fileformat/office_word_macro.rb has been deprecated and
it should have been removed on March 16th.
If you want to create a Microsoft Office macro exploit, please
use the multi/fileformat/office_word_macro exploit instead, which
supports multiple platforms, and will support template injection.
2017-05-26 07:33:46 -05:00
wchen-r7
04a701dba5
Check template file extension name
2017-05-26 07:31:34 -05:00
HD Moore
072ab7291c
Add /tank (from ryan-c) to search path
2017-05-26 06:56:41 -05:00
wchen-r7
2835c165d7
Land #8390 , Add module to execute powershell on Octopus Deploy server
2017-05-25 17:33:07 -05:00
wchen-r7
330526af72
Update check method
2017-05-25 17:30:58 -05:00
William Vu
ae22b4ccf4
Land #8450 , Samba is_known_pipename() exploit
2017-05-25 16:36:28 -05:00
HD Moore
4ec5831bd4
Merge pull request #15 from h00die/sambapwn
...
docs for is_known_pipename
2017-05-25 17:32:06 -04:00
HD Moore
1474faf909
Remove ARMLE for now, will re-PR once functional
2017-05-25 16:14:35 -05:00
HD Moore
2ad386948f
Small cosmetic typo
2017-05-25 16:10:37 -05:00
HD Moore
18a871d6a4
Delete the .so, add PID bruteforce option, cleanup
2017-05-25 16:03:14 -05:00
wchen-r7
ee13195760
Update office_word_macro exploit to support template injection
2017-05-25 15:53:45 -05:00
h00die
e8a34c5797
updates to docs
2017-05-25 16:53:39 -04:00
William Webb
eb1f6fcd8d
Land #8456 , Correct typo in exploits/unix/webapp/webmin_show_cgi_exec
2017-05-25 14:17:09 -05:00
nks
1a8961b5e3
fied typo
2017-05-25 19:14:59 +02:00
HD Moore
cf7cfa9b2c
Add check() implementation based on bcoles notes
2017-05-25 09:49:45 -05:00
h00die
98ad754475
updated OJ info and wvu ubuntu box
2017-05-25 08:09:37 -04:00
itsmeroy2012
92a1a3ecf7
Adding for loop instead of while, removing 'counter'
2017-05-25 15:09:34 +05:30
h00die
b1514fcbc0
docs
2017-05-24 22:18:46 -04:00
HD Moore
0520d7cf76
First crack at Samba CVE-2017-7494
2017-05-24 19:42:04 -05:00
William Vu
e4ea618edf
Land #8419 , ETERNALBLUE fixes (round two)
...
Hope I resolved the conflicts correctly.
2017-05-23 17:03:21 -05:00
William Vu
46eb6bdf62
Land #8399 , ETERNALBLUE fixes (round one)
2017-05-23 16:51:19 -05:00
William Vu
f80c3aa3f4
Correct absolute path
2017-05-23 16:50:25 -05:00
bwatters-r7
461649ed34
Land #8378 , Add check in archmigrate to prevent privdesc
2017-05-23 14:37:29 -05:00
Carter
c73e7673b1
Please the rubocop god
2017-05-23 15:13:55 -04:00
Carter
e945773576
Update archmigrate.rb
2017-05-23 14:40:42 -04:00
Jeffrey Martin
b7b1995238
Land #8274 , Wordpress admin upload `check`
2017-05-22 22:08:32 -05:00
Brent Cook
fc3af168d4
Land #8424 , change postgres docker image to alpine and add timezone
2017-05-22 22:07:01 -04:00
Brent Cook
47d2917a5f
Land #8418 , Add docs for 3 smb related aux modules
2017-05-22 22:04:22 -04:00
Brent Cook
0733790091
Land #8435 , update payload sizes
2017-05-22 22:01:11 -04:00
Brent Cook
0f4ad4994d
Land #8428 , Session listing from aggregator should show any remote id found.
2017-05-22 21:55:39 -04:00
Brent Cook
3e4e5dc810
Land #8421 , fix rspec failures with newer OpenSSL
2017-05-22 21:49:52 -04:00
Jeffrey Martin
4a43e9bcb2
add spec for reverse_ncat_ssl
2017-05-22 18:34:18 -05:00
Jeffrey Martin
5395d8f17c
update python stageless payload sizes
2017-05-22 18:21:13 -05:00
William Webb
9a0e2e6c8a
Land #8324 , Update Gemfile.local example, use Gemfile.local if it exists
2017-05-22 17:05:15 -05:00
Jeffrey Martin
d69bfd509f
store the credential using the new store_valid_credential
2017-05-22 15:08:03 -05:00
William Webb
467f1ce0ca
Land #8411 , Buffer overflow in VXSearch Enterprise v9.5.12
2017-05-22 07:37:31 -05:00
William Webb
b83853d7bc
Land #8433 , Fix proxy_type references to handle nil case
2017-05-22 07:21:30 -05:00
OJ
86aad6b7c3
Fix proxy_type references to handle nil case
2017-05-22 21:47:37 +10:00
William Webb
ec2ce6e473
Land #8432 , Restrict iis_webdav_ScStoragePathFromUrl to 32 bit targets
2017-05-22 06:17:36 -05:00
Christian Mehlmauer
b5caeb29dd
only support for 32bit so far
2017-05-22 12:30:52 +02:00
Jeffrey Martin
f6f421afb7
remote id not suppressed based on local
2017-05-21 19:21:52 -05:00