Hendrik Van Belleghem
aed609d6f0
Changes in couchdb_enum to also include fill database enumeration
2018-09-15 13:58:54 +02:00
Shelby Pace
d2f587894b
Initial metadata setup
2018-09-14 09:37:23 -05:00
Hendrik Van Belleghem
33037b6b26
Fixes for CouchDB CVE 2017-12635 module
2018-09-14 00:15:11 +02:00
Erin Bleiweiss
e3178faa9a
Add metadata for teradata_odbc_sql.py
2018-09-13 13:09:01 -05:00
Adam Cammack
04cc7843a4
Typo fixes
2018-09-13 11:19:13 -05:00
Hendrik Van Belleghem
3e4c3478f6
Small fixes in couchdb_2017-12635
2018-09-12 23:48:23 +02:00
Hendrik Van Belleghem
537e12ea7e
Added CouchDB user creation with Admin role Auxiliary module - 2017_12635
2018-09-12 23:17:34 +02:00
Shelby Pace
5b81ebd81b
Land #10589 , multidrop support for word xml docs
2018-09-12 11:00:11 -05:00
Jacob Robles
d0e67c5b60
Add SMB2 support to smb_enumshares
2018-09-11 19:05:26 -05:00
Adam Cammack
a8f766cfd5
Update heartbleed description to mention `repeat`
2018-09-11 17:41:06 -05:00
Brent Cook
a3d74d926c
Land #9897 , Fix #8404 ListenerComm Support For Exploit::Remote::TcpServer
2018-09-10 16:25:55 -05:00
Brent Cook
ea2fcb6fc4
Land #10593 , Refactor SSH mixins and update modules
2018-09-10 15:38:53 -05:00
William Vu
3ec4d2f22b
Normalize loot type OID
...
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported
Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die
39a2d9d2a8
save xml files as xml
2018-09-09 21:24:39 -04:00
Oliver Morton
56cb853014
Make Output and Log Files Optional
...
Change the 'required' attribute of the output and logfile options to
False.
Open output file for appending immediately before use and only if output
file name is configured.
2018-09-07 16:26:33 -04:00
Shaksham Jaiswal
552ff027cd
fixes
2018-09-07 15:18:11 +05:30
Shaksham Jaiswal
bc1173a857
code fixes
2018-09-07 15:11:49 +05:30
Oliver Morton
ac144e027a
Add office365userenum.py as external module
...
External python module compatible with v2 and v3.
Enumerate valid usernames (email addresses) from Office 365 using
ActiveSync.
Differences in the HTTP Response code and HTTP Headers can be used to
differentiate between:
- Valid Username (Response code 401)
- Valid Username and Password without 2FA (Response Code 200)
- Valid Username and Password with 2FA (Response Code 403)
- Invalid Username (Response code 404 with Header X-CasErrorCode: UserNotFound)
Note this behaviour appears to be limited to Office365, MS Exchange
does not appear to be affected.
Microsoft Security Response Center stated on 2017-06-28 that this issue
does not "meet the bar for security servicing". As such it is not
expected to be fixed any time soon.
This script is maintaing the ability to run independently of MSF.
2018-09-06 16:42:31 -04:00
William Vu
35fb0d19ab
Refactor SSH mixins and update modules
2018-09-05 23:53:11 -05:00
asoto-r7
14aee3a822
Added auxiliary/fileformat/multidrop support for Word XML documents
2018-09-05 11:51:48 -05:00
BrianWGray
3546b9388c
correct CVE Reference
2018-09-05 10:29:49 -04:00
BrianWGray
b8687d501c
msftidy corrections
2018-08-31 18:55:20 -04:00
Erin Bleiweiss
69a785ff46
Update json for python modules
2018-08-31 16:56:22 -05:00
Erin Bleiweiss
eb17d9b198
Refactor AKA references for modules
2018-08-31 16:56:05 -05:00
Wei Chen
0dea5fcfd9
Land #10565 , Add Dolibarr ERP/CRM Auxiliary Module
2018-08-31 13:47:46 -05:00
Shelby Pace
aa9d0d7c6c
using uri_encode
2018-08-31 08:41:25 -05:00
Shelby Pace
b1151b9d12
modified login_uri
2018-08-31 08:08:46 -05:00
Shelby Pace
42af28a86a
printing and storing credentials
2018-08-30 14:17:37 -05:00
Shelby Pace
85c4abac99
storing credentials
2018-08-30 13:59:00 -05:00
egre55
2304c377db
Add IIS ShortName Scanner module
2018-08-30 08:46:22 +00:00
Shelby Pace
7915c4ac6c
getting user credentials in response
2018-08-29 13:59:06 -05:00
Shelby Pace
bb4a4b8839
initial module setup
2018-08-29 10:28:10 -05:00
Christian Mehlmauer
14fa41a376
merge changes
2018-08-29 06:09:40 +02:00
Ben Schmeckpeper
ed60b767a7
Correct claymore_dos.py's CVE reference
...
The CVE reference shouldn't include the `CVE-` prefix
2018-08-28 13:34:02 -05:00
AverageSecurityGuy
d21c108adf
Fix syntax error.
2018-08-28 12:00:31 -04:00
AverageSecurityGuy
44df7939e9
Added docs. Made suggested code changes.
2018-08-28 10:56:05 -04:00
Christian Mehlmauer
7431ae401b
fix more errors
2018-08-28 13:49:31 +02:00
Christian Mehlmauer
a66556b436
fix msftidy errors
2018-08-28 13:12:43 +02:00
AverageSecurityGuy
0ba1d11218
Add FrontPage Credential Dump
2018-08-27 15:02:39 -04:00
AverageSecurityGuy
4e45100251
Add FrontPage Credential Dump
2018-08-27 14:20:26 -04:00
William Vu
6df235062b
Land #10505 , post-auth and default creds info
2018-08-24 18:08:15 -05:00
Brent Cook
51c024982c
Land #8914 , refactor auxiliary/admin/http credential storage
2018-08-24 13:18:32 -05:00
Brent Cook
0141fc109d
don't backtrace if there is not a response
2018-08-24 13:17:06 -05:00
William Vu
578d2375d7
Add full disclosure for CVE-2018-15473
2018-08-22 14:49:13 -05:00
Wei Chen
2780ae6ba9
Update false negatives
2018-08-21 08:50:26 -05:00
William Vu
06582a00a0
Add module doc for ssh_enumusers
...
And update description in module.
2018-08-20 19:26:51 -05:00
William Vu
819b8504e2
Add a little better randomization
2018-08-20 17:10:14 -05:00
William Vu
b38a442bb0
Refactor once more with feeling
...
Also flesh out malformed-packet auth method. Let's not be lazy here. :-)
2018-08-20 16:25:32 -05:00
William Vu
75403d7e05
Add testing note about logging
2018-08-17 20:20:12 -05:00
William Vu
7287779555
Make false positive check optional
...
I couldn't repro this with pubkey-only auth. It also goes to the log.
2018-08-17 20:05:04 -05:00
William Vu
8e3af2dcfc
Add CVE-2018-15473 to ssh_enumusers
2018-08-17 18:48:44 -05:00
William Vu
5096eee2ec
Land #10120 , npm "marked" ReDoS module
2018-08-16 15:01:12 -05:00
William Vu
3c1befdacb
Clean up module
2018-08-16 15:00:56 -05:00
William Vu
60c0272270
Make style consistent
2018-08-15 21:27:40 -05:00
Kevin Kirsche
45e0b53fc8
Fix spacing issue with rocket
2018-08-15 14:59:52 -07:00
Kevin Kirsche
09434bd57c
Fix tabbing caused by incorrect VM nvim configuration
2018-08-15 07:00:45 -07:00
Kevin Kirsche
905f26372d
Remove host key checks on ssh scanner modules
2018-08-15 06:48:35 -07:00
Jacob Robles
85a137e0a0
Land #10420 , cgit < 1.2.1 Directory Traversal
2018-08-13 16:25:23 -05:00
Jacob Robles
5a3d040d71
Fix module, Add documentation
2018-08-13 15:48:21 -05:00
Shelby Pace
ce8cbd64d4
Land #10404 , Add Path Traversal Oracle GlassFish
2018-08-13 11:15:26 -05:00
Wei Chen
6223685c37
Update auth requirement for json metadata
2018-08-07 16:42:00 -05:00
Dhiraj Mishra
14b12f38d0
Fixing
2018-08-05 23:26:18 +05:30
Dhiraj Mishra
9502c26dc1
Updated
2018-08-05 19:14:12 +05:30
Dhiraj Mishra
8a175f50cd
Indentation
2018-08-05 00:15:04 +05:30
Dhiraj Mishra
ebcc9a3c20
Fixing Indentation
2018-08-04 19:16:12 +05:30
Dhiraj Mishra
502c103d37
cgit < 1.2.1 Directory Traversal
2018-08-04 18:52:24 +05:30
Brent Cook
78f66986e9
Land #10386 , Add IEC104 client module
2018-08-04 07:43:15 -05:00
Brent Cook
919da41aab
Land #9692 , Add DoS module for Siemens Siprotec 4
2018-08-04 07:20:57 -05:00
Dhiraj Mishra
458fca6ff0
Fixing
...
Thanks bcoles
2018-08-04 13:15:25 +05:30
Brendan Coles
1c82592882
Land #10358 , Add Dicoogle PACS Directory Traversal scanner module
2018-08-04 05:31:16 +00:00
h00die
e5dcfa62c9
remove encoding and escaping
2018-08-03 20:23:33 -04:00
Michael John
dc2f893b31
Amended code formating
...
This commit incorporates suggested formatting changes based on feedback and rubocop tool run:
Corrected indentation issues
Using "<<" instead of "+=" for string append
Modified if/else branches as per tool suggestion
2018-08-03 20:13:48 +02:00
Wei Chen
0785d59146
Land #10412 , Add Cisco directory traversal auxiliary module
2018-08-02 16:44:59 -05:00
Shelby Pace
10d4061672
changed default port
2018-08-01 13:30:19 -05:00
Shelby Pace
de83926e6c
separated list_users into two functions
2018-08-01 12:59:53 -05:00
Shelby Pace
0264eb2ea3
cleaned up module
2018-08-01 09:51:45 -05:00
Shelby Pace
021264fd5a
listing files and grabbing logged in user names
2018-07-31 16:03:17 -05:00
William Vu
090624fe17
Correctly set proto and sname in joomla_pages
2018-07-31 11:51:34 -05:00
William Vu
41ce96b19d
Clean up module
2018-07-31 11:01:02 -05:00
Dhiraj Mishra
323c814abf
Fixing some tweaks
2018-07-31 19:52:39 +05:30
Dhiraj Mishra
55dce52bea
Fixing some tabbed indent
2018-07-31 18:24:28 +05:30
Dhiraj Mishra
3a7d18a98d
Fixing, Warning of EOL
2018-07-31 18:11:09 +05:30
Dhiraj Mishra
d9e94f94dc
Oracle GlassFish
2018-07-31 17:59:03 +05:30
Sergey Gorbaty
a0b7a4986e
Making sure we connect to RMI
2018-07-30 23:25:32 -07:00
Alexander Halbarth
80d5d1d4ee
use variable port instead of datastore
2018-07-31 07:38:09 +02:00
Alexander Halbarth
b0fa17ccfb
Better output added to joomla_pages
2018-07-31 07:29:56 +02:00
Shelby Pace
ca8a01d27c
getting filenames in http responses
2018-07-30 16:25:45 -05:00
Sergey Gorbaty
c3534a479e
JMX scanner
2018-07-30 13:25:15 -07:00
Shelby Pace
7cf2c840a3
metadata set up
2018-07-30 14:25:58 -05:00
Shelby Pace
d58785f959
Land #10247 , add WordPress Arbitrary File Deletion
2018-07-30 09:05:23 -05:00
h00die
c440eeaa31
rogue end
2018-07-29 10:35:33 -04:00
h00die
53cca07442
bcoles suggestions
2018-07-29 10:31:01 -04:00
michaelj0hn
7b5e8463ba
msftidy-final
2018-07-27 14:52:10 +02:00
michaelj0hn
4e42834be3
msftidy 538
2018-07-27 14:48:04 +02:00
michaelj0hn
44c1fa9197
msftidy558
2018-07-27 14:29:32 +02:00
michaelj0hn
da1363721f
msftidy 90-91-2
2018-07-27 14:07:10 +02:00
michaelj0hn
07896b0a3c
msftidy 90-91
2018-07-27 13:58:15 +02:00
michaelj0hn
5435c7a5eb
msftidy fix
2018-07-27 13:43:37 +02:00
michaelj0hn
09320ece91
iec104 client
2018-07-27 11:46:26 +02:00
Brent Cook
c1418955f5
Land #10319 , enable VHOST for ms15_034_http_sys_memory_dump
2018-07-25 18:51:57 -05:00
Jacob Robles
5a7c25b498
Fix description
2018-07-25 15:13:41 -05:00
Jacob Robles
1105474fb9
Modify options for smb_login
...
Change default value for DETECT_ANY_AUTH
and add option for DETECT_ANY_DOMAIN
2018-07-25 14:53:06 -05:00
William Vu
9fde9127ad
Land #10370 , minor CouchDB fix
2018-07-25 01:11:23 -05:00
William Vu
d3b7dffcdc
Prefer res.body over res
2018-07-25 01:05:18 -05:00
William Vu
bc89d7fe52
Land #10357 , CouchDB improvements and docs
2018-07-25 00:54:55 -05:00
Wei Chen
625ea87ea9
Land #10368 , PhpMyAdmin Login Scanner Module
2018-07-24 23:25:27 -05:00
Wei Chen
5df5ab30f6
Use store_valid_credential to save good credentials
2018-07-24 23:21:59 -05:00
Shelby Pace
efa3a77adc
modified name
2018-07-24 15:00:14 -05:00
Shelby Pace
4f81fcdc87
retn versions in chk_setup, tests to reflect, doc
2018-07-24 14:51:00 -05:00
Shelby Pace
976a3464e1
added phpmyadmin login scanner and aux module
2018-07-24 09:47:01 -05:00
timoles
aaf664db42
Update jboss_vulnscan.rb
...
Fixed a paste error, or sneaked in character in the app url.
2018-07-24 04:24:49 -07:00
Matthew Kienow
dac5780feb
Land #10176 , creds data service CRUD operations
2018-07-23 23:36:32 -04:00
Timo
01acaa3ad9
Changed the app scan layout to reduce the complexity of the app_check branch. (as of suggestion by bcoles)
2018-07-23 00:41:49 -07:00
h00die
83ae5cb14d
fix backup_file.rb and add a few docs
2018-07-22 20:50:22 -04:00
h00die
2a969d70db
dicoogle
2018-07-21 21:31:45 -04:00
h00die
abfed97e03
remove EOL spaces
2018-07-21 11:21:11 -04:00
h00die
8b324c19d8
update couchdb scanner
2018-07-21 11:02:50 -04:00
Timo
c9e47d6d2b
Added check and response for CVE-2017-12149 in jboss_vulnscan.rb
2018-07-20 03:52:29 -07:00
James Barnett
65d42380d3
Merge branch 'master' into remote_creds_data
2018-07-19 16:25:06 -05:00
Sunny Neo
8e1f68f384
Update ms15_034_http_sys_memory_dump.rb with VHOST
...
Added VHOST to cater to targets that require virtual hostname to be defined
2018-07-16 15:13:23 +08:00
Brendan Coles
7524af35ec
Check if IPRANGE was supplied - Fix #10316
2018-07-15 15:38:56 +00:00
asoto-r7
1a3a4ef5e4
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
William Vu
cce3b6f369
Clean up module
2018-07-12 02:57:14 -05:00
Agora Security
7d8b9a90d7
Add more reporting
2018-07-11 17:22:48 -04:00
Agora Security
30c43e22d9
Fix typo
2018-07-11 17:04:31 -04:00
Agora Security
bb8ac4a7ab
Add info & update_info
2018-07-11 16:52:16 -04:00
James Barnett
c26fcc0af1
Merge branch 'master' into remote_creds_data
2018-07-11 10:27:49 -05:00
Agora Security
1f0045fa03
Improve Description
2018-07-11 01:27:10 -04:00
Agora Security
00f4d3967c
Add basic reporting
2018-07-11 00:47:43 -04:00
Agora Security
d488b51264
Use peer instead of ip & port
2018-07-11 00:41:55 -04:00
Agora Security
5a89642ddd
Simplify the module greatly
2018-07-11 00:15:56 -04:00
Agora Security
ffc2f044cc
Remove lines that were not required
2018-07-11 00:04:44 -04:00
Agora Security
7b1e7eb085
Minor improvement to description
2018-07-11 00:04:12 -04:00
Agora Security
2b2029b487
Align Hashrockets
2018-07-11 00:03:26 -04:00
Agora Security
9491c63778
Fix several minor details
2018-07-10 23:56:05 -04:00
Agora Security
66c207a124
Remove timeout of 25 seconds
2018-07-10 23:53:13 -04:00
Agora Security
718606c9f2
Add Auxiliary module to enumerate the Docker Server Version
2018-07-10 19:34:49 -04:00
Jacob Robles
4403a4ab47
Fix CVE number
2018-07-09 12:56:00 -05:00
James Barnett
bbc16e1873
Merge branch 'master' into remote_creds_data
2018-07-09 09:49:14 -05:00
Wei Chen
aff39e65d5
Update missing CVE references for auxiliary modules
...
Based on existing references such as BID, OSVDB, blog posts, etc
2018-07-08 19:00:11 -05:00
Jacob Robles
1c448de882
Land #10107 , Add the scanner/smb/impacket/secretsdump module
2018-07-06 14:59:33 -05:00
Aloïs Thévenot
e1a9aae109
Add Wordress Arbitrary File Deletion module
2018-07-03 12:21:38 +02:00
Adam Cammack
ce7d4cd280
Land #10109 , Teradata login scanner and SQL runner
2018-06-27 15:35:57 -05:00
Adam Cammack
9d8294fcc9
Mark Teradata login scanner executable
2018-06-27 15:35:13 -05:00
Adam Cammack
8b2bd35659
Fixup option references in Teradata SQL
2018-06-27 15:34:29 -05:00
Adam Cammack
1dbcf0fd09
Cleanup Teradata SQL options
2018-06-27 15:12:21 -05:00
Adam Cammack
3985191e0f
Add `userpass` option to Teradata login scanner
2018-06-27 15:10:02 -05:00
Adam Cammack
ef309e0d5f
Fixup metadata whitespace
2018-06-27 15:09:23 -05:00
Wei Chen
76535b5e51
Check hidden val && check auth requirement
2018-06-25 17:24:13 -05:00
Shelby Pace
10c36bbd7d
modified get_creds, renamed make_request
2018-06-25 12:45:06 -05:00
Shelby Pace
81bdbd712c
added disclosureDate and modified style
2018-06-22 15:58:21 -05:00
Shelby Pace
510c2d04ef
add auxiliary module and documentation - SickRage
2018-06-22 11:18:02 -05:00
Brent Cook
eaf043d30b
Land #10156 , WebKit, as used in WebKitGTK+ Crash - CVE-2018-11646
2018-06-21 16:28:37 -05:00
Wei Chen
72432c200a
Land #10183 , Add auxiliary mod to exploit httpdasm dir traversal vuln
2018-06-19 14:56:36 -05:00
Wei Chen
b315886f9b
Update option description
2018-06-19 14:55:53 -05:00
Wei Chen
9be8aa6877
Be more verbose on error handling
2018-06-19 14:54:27 -05:00
Shelby Pace
a0189cc3f6
made suggested changes to module
2018-06-19 12:22:44 -05:00
Shelby Pace
b78bb78f95
added auxiliary module and documentation
2018-06-18 10:25:33 -05:00
James Barnett
2ded48a510
Merge branch 'master' into remote_creds_data
2018-06-15 10:26:10 -05:00
James Barnett
9f2f61c481
Implement create_credential_and_login in the dataproxy
2018-06-14 13:28:03 -05:00
Nicholas Starke
936632f180
Minor Tweaks to Module
...
This commit changes some logic around
on a few different conditional portions
of code.
2018-06-14 10:06:42 -05:00
Dhiraj Mishra
c0a5a65e0c
Updated
...
Suggestion's by acammack-r7
2018-06-14 11:25:00 +05:30
Adam Cammack
9681c59f1d
Land #10138 , Update psnuffle RHOSTS and style
2018-06-13 14:45:05 -05:00
James Barnett
71651a33f6
Update jtr modules to use remote data store
2018-06-13 12:09:58 -05:00
bwatters-r7
1cd76eb833
Land #10148 , Add New Module - Badpdf
...
Merge branch 'land-10148' into upstream-master
2018-06-12 17:19:32 -05:00
rmdavy
477d709ff6
Code Improvements
...
Ran module through rubocop
2018-06-12 22:55:38 +01:00
Dhiraj Mishra
b44265fcb2
Minor tweaks
...
Suggestion's made by bcoles
2018-06-11 13:25:02 +05:30
rmdavy
6b58163fde
Code Improvement
...
Added further code improvement suggested by bcoles
2018-06-11 08:06:02 +01:00
rmdavy
f10b2b12d4
Implemented changes suggested by bcoles
2018-06-10 22:18:17 +01:00
rmdavy
22538bfd63
Fixed Minor Code Error & Removed Spaces
2018-06-10 21:53:40 +01:00
rmdavy
f4334828d0
Minor Improvement
...
URL File Creation also supports IconFile - this has now been added
2018-06-09 17:46:27 +01:00
rmdavy
5e630b34e1
Minor Update
...
Removed some Spaces at EOL
2018-06-09 17:03:32 +01:00
rmdavy
5ca538541a
Code Improvements
...
Code improvements as suggested by bcoles.
2018-06-09 16:44:37 +01:00
rmdavy
f9c74419bb
Minor Code Update
...
Improved injection and Minor Code Improvement
2018-06-09 12:24:33 +01:00
Dhiraj Mishra
51823b1d3d
Spaces at EOL
2018-06-09 15:58:11 +05:30
Dhiraj Mishra
d3a18b2ce9
Some tweak
...
Thanks bcloes 😎
2018-06-09 12:15:21 +05:30
Dhiraj Mishra
76588aed09
Error at disclosure date format
2018-06-09 12:03:41 +05:30
Dhiraj Mishra
f1d29e730f
Spaces at EOL
2018-06-09 11:53:21 +05:30
Dhiraj Mishra
6e8412fa73
CVE-2018-11646 - Webkit+
2018-06-09 11:43:47 +05:30
rmdavy
7e0c8d279f
Minor Code Update
2018-06-07 21:16:41 +01:00
rmdavy
ab80eadc3f
Minor Code Improvement
2018-06-07 21:06:47 +01:00
rmdavy
98507b2e51
Update badpdf.rb
2018-06-07 19:08:51 +01:00
rmdavy
aba05275ae
BadPDF Generator
...
Generated PDF files which contain a UNC link back to listener, can be used to capture NetNTLM hashes.
2018-06-07 16:40:57 +01:00
rmdavy
16fcaa3d00
Delete badpdf.rb
2018-06-07 16:38:57 +01:00
rmdavy
c790537bb2
BadPDF Generator
2018-06-07 16:38:22 +01:00
Aaron Soto
f53d2a14df
Land #10067 , Added `auxiliary/fileformat/odt_badodt`
2018-06-06 11:27:23 -05:00
Aaron Soto
20e773498f
Moved to `auxiliary/fileformat/odt_badodt` and updated docs
2018-06-06 11:27:07 -05:00
Aaron Soto
61074d1220
Land #10115 , Added module `auxiliary/fileformat/multidrop`
2018-06-05 16:30:30 -05:00
Aaron Soto
c94263c915
Create 'fileformat' and move 'auxiliary/multidrop' to 'auxiliary/fileformat/multidrop'
2018-06-05 16:27:57 -05:00
Jacob Robles
3b2889cd77
Land #10106 , Add the scanner/smb/impacket/wmiexec module
2018-06-05 08:33:34 -05:00
rmdavy
59873ba81a
Updated Authors
2018-06-04 23:03:00 +01:00
rmdavy
4fcbb5d03d
Minor Code Updates
...
Minor Code Updates as per recommendations by Aaron Soto
2018-06-04 19:20:37 +01:00
Brendan Coles
e1d69d6307
Cleanup pSnuffle
2018-06-04 15:27:20 +00:00
rmdavy
061bb84a5a
Updated Code
...
Updated code with suggestions provided by bcoles
2018-06-01 11:13:40 +01:00
Aaron Soto
2bf5e26bfe
Removed `Deprecated` include from `udp_probe`
2018-05-31 14:32:31 -05:00
Aaron Soto
918705d510
Removed deprecated modules: `epmp1000_cmd_exec` and `cambium_snmp_loot`
2018-05-31 14:31:58 -05:00
Nicholas Starke
53d9dc75d8
Adding npm component "marked" ReDoS module
...
This commit adds a module for the npm component
"marked" which exploits a Regular Expression
Denial of Service (ReDoS) vulnerability in the
"heading" regular expression. Also included
is the documentation markdown for this module.
2018-05-31 13:33:09 -05:00
Aaron Soto
829e1c306a
Land #10102 , SOCKS5 updates for BIND, parsing specs, refactoring
2018-05-30 16:15:53 -05:00
rmdavy
51a9fc4c55
Multidrop
...
Multidrop is a single module which can be used to create *.scf, *.url, *.lnk and desktop.ini files which contain a SMB/UNC link to a listener ready to capture NetNTLM hashes
2018-05-30 17:36:11 +01:00
Aaron Soto
c8b2fc8a35
Land #9701 , Flexense HTTP Server DoS exploit
2018-05-29 16:19:59 -05:00
Aaron Soto
026b22d061
Refined packet sizes and counts, improved error messages
2018-05-29 16:09:27 -05:00
actuated
b0d8e93e79
Added Teradata ODBC Login and SQL modules and documentation
2018-05-29 10:12:43 -05:00
Spencer McIntyre
7ac8af03d2
Remove the LD_PRELOAD hook for proxychains
2018-05-27 17:12:06 -04:00
Spencer McIntyre
28d15a113f
Add the secretsdump impacket module and docs
2018-05-27 17:09:59 -04:00
Spencer McIntyre
9fab2316c5
Add the wmiexec impacket module and documentation
2018-05-27 16:24:56 -04:00
Spencer McIntyre
c85cc9ad9e
Refactor SOCKS5 TcpRelay and add packet tests
2018-05-26 13:46:00 -04:00
Spencer McIntyre
49341fc87d
Add credential authentication support to socks5
2018-05-25 20:14:03 -04:00
Spencer McIntyre
9b5ae34896
Drop udp associate support and cleanup logging
2018-05-25 20:14:03 -04:00
Spencer McIntyre
6859856101
Refactor the socks5 code into multiple files
2018-05-25 20:14:03 -04:00
Spencer McIntyre
04bec0bdf0
Progress on the socks5 proxy module
2018-05-25 20:14:02 -04:00
Ege Balcı
3ab7526786
Name & description Change
...
Exploit::CheckCode changed to Unknown as suggested.
2018-05-25 20:22:51 +03:00
rmdavy
affa0bdc6f
Minor Update
...
Removed Unused Comment
2018-05-24 13:45:08 +01:00
rmdavy
7143f04ea7
Add files via upload
...
Updated to use recommended method of creating zip files
2018-05-24 09:53:53 +01:00
rmdavy
04a27e0221
Delete thumbnail.png
...
Moved folder location
2018-05-24 09:37:45 +01:00
rmdavy
81c4e9f7b9
Delete styles.xml
...
Moved folder location
2018-05-24 09:37:31 +01:00
rmdavy
73bfe1c9ab
Delete settings.xml
...
Moved folder location
2018-05-24 09:37:18 +01:00
rmdavy
247904746c
Delete meta.xml
...
Moved folder location
2018-05-24 09:37:04 +01:00
rmdavy
f9bda873d2
Delete manifest.xml
...
Moved folder location
2018-05-24 09:36:55 +01:00
rmdavy
5002eae655
Delete manifest.rdf
...
Moved folder location
2018-05-24 09:36:45 +01:00
rmdavy
02afeb3e29
Delete content.xml
...
Moved folder location
2018-05-24 09:36:35 +01:00
Brent Cook
86a5b951aa
Land #9990 , add SOCKS5 proxy support
2018-05-23 17:31:09 -05:00
Jan Rude
567e2dbc7e
Update telpho10_credential_dump.rb
...
Current version still vulnerable, developer ignores mails. It seems like this is going to be a 'won´t fix'
2018-05-23 09:32:41 +02:00
Aaron Soto
72efe66403
Refactored for better logging, IPv6 support, and prep for auth
2018-05-22 18:57:00 -05:00
James Barnett
0472b9df3f
Land #10024 , Fix find_or_create_* methods for remote data service
...
This PR updates the find_or_create_* methods associated with each model to
no longer just proxy to the report_* model. It now performs a lookup through
the DataProxy and returns the found object if it exists, or creates a new
record if needed.
2018-05-22 17:08:46 -05:00
Matthew Kienow
4ecc1ff551
Modify loots, notes and services search methods
...
Modify loots and services method signatures. Remove workspace as a
positional argument, move into opts hash argument and update callers.
Made host search for these models more uniform. Update find_or_create
methods to handle difference in opts between find and report
operations.
2018-05-21 17:37:51 -04:00
rmdavy
ef229111c8
Delete readme.txt
2018-05-19 16:58:45 +01:00
rmdavy
5d3c95e51b
Create badodt
2018-05-19 16:58:14 +01:00
rmdavy
a0d8f70dee
Create readme.txt
2018-05-19 16:57:40 +01:00
rmdavy
077a7c7c9e
Delete test.txt
2018-05-19 16:57:07 +01:00
rmdavy
018a8a3060
Create test.txt
2018-05-19 16:56:49 +01:00
rmdavy
622bc272fb
Delete odt
2018-05-19 16:56:30 +01:00
rmdavy
b293ddfe5d
Create odt
2018-05-19 16:56:10 +01:00
Brent Cook
7af7587519
Land #9999 , Optionally test empty group in cisco_ssl_vpn
2018-05-18 10:57:15 -05:00
Aaron Soto
c35c8e9c75
Update module name, per a good catch by @bcook
2018-05-16 13:55:45 -05:00
Jacob Robles
999b895735
Land #9816 , Add the scanner/smb/impacket/dcomexec module
2018-05-16 07:15:32 -05:00
Jacob Robles
cc0fdee788
EmptyGroup advanced option, just in case...
2018-05-10 09:57:50 -05:00
Jacob Robles
79a0610436
remove empty group
2018-05-09 11:11:03 -05:00
Brent Cook
a4ecd43a8f
remove unused constants
2018-05-07 00:24:38 -05:00
Jacob Robles
534d05ff44
simpleclient versions option
2018-05-07 00:24:38 -05:00
Jacob Robles
ff202a5f5b
Simpleclient/SMB2 support
2018-05-07 00:24:38 -05:00
Aaron Soto
2cd0d3d90a
Rudamentary SOCKS5 functionality, CONNECT, IPv4, non-DNS only
2018-05-04 14:44:03 -05:00
Auxilus
d29bc920c1
print o/p to new line
2018-04-27 20:58:25 +05:30
Auxilus
912970ad3b
change vprint to print for printing o/p in psexec_command
2018-04-27 20:47:21 +05:30
Auxilus
0374de5e0d
change vprint to print for printing o/p
2018-04-27 10:49:04 +05:30
Auxilus
25cf8d175a
report command execution o/p
2018-04-27 08:43:30 +05:30
Auxilus
382a7f8aa3
Merge https://github.com/rapid7/metasploit-framework into psexec_cleanup
2018-04-25 09:09:48 +05:30
Auxilus
cbfdaf23a0
updated for requested changes
2018-04-25 08:56:54 +05:30
Auxilus
3353102dc1
fix opt dependencies
2018-04-24 21:55:09 +05:30
nixawk
273e25265b
Add a QUERY OPTION
2018-04-23 20:51:04 -05:00
Wei Chen
f9a804e7d8
Bring the PR up to date
2018-04-23 08:52:05 -05:00