Commit Graph

50793 Commits (1faa41aafe43c40701047503acf65cbfb4443025)

Author SHA1 Message Date
Jacob Robles 1faa41aafe
Dont require hook name 2019-04-26 13:11:40 -05:00
@shellfail c643436383
Update modules/exploits/linux/local/apt_package_manager_persistence.rb
Changed Disclosure Date format

Co-Authored-By: aringo <ringo.aaron@gmail.com>
2019-04-25 20:08:50 -05:00
Aaron Ringo 261a4271fa Updated some formatting as requested along with some rubocob requested 2019-04-25 16:15:00 -05:00
Aaron Ringo bd1113d53c Updated some formatting as requested along with some rubocob requested 2019-04-25 15:55:22 -05:00
Aaron Ringo 22c3fe35f7 Changed hook payload to redirect errors, to not show up on target screen 2019-03-31 12:09:40 -05:00
Aaron Ringo 299334ae7f fixed bug where alphanumeric was never hit 2019-03-30 22:51:18 -05:00
Aaron Ringo 38bf99e729 Re-add of module after jacking up rebase, with new arches,conditional logic, documentation 2019-03-30 22:04:21 -05:00
Brent Cook f7e3af212c
Land #11462, Add Reliability REPEATABLE_SESSION to Wemo exploit 2019-02-22 13:16:23 -06:00
William Vu c76714ccc6 Add Reliability REPEATABLE_SESSION to Wemo exploit
Notes copied from auxiliary/admin/wemo/crockpot where it didn't apply.
2019-02-22 13:11:59 -06:00
Brent Cook 2363ceaab9
Land #11444, change default web service port to 5443 2019-02-22 12:39:22 -06:00
Brent Cook 52aae1e077
Land #11451, update module authors to consume JSON cache 2019-02-22 12:37:19 -06:00
Metasploit 3871e45196
Bump version of framework to 5.0.9 2019-02-21 21:30:00 -08:00
Jeffrey Martin 5bd34e7d4c
cleaner read of JSON cache 2019-02-21 23:20:43 -06:00
Jeffrey Martin 98e95eeb18
remove unused imports and vars 2019-02-21 23:14:55 -06:00
Jeffrey Martin dd864e8f6e
enhance -f for `evasion` type 2019-02-21 23:11:39 -06:00
Jeffrey Martin dcaf477097
support -f from JSON 2019-02-21 23:10:07 -06:00
Jeffrey Martin 1bae9ccf31
update module authors to consume JSON cache 2019-02-21 22:56:04 -06:00
Metasploit 885259f58a
automatic module_metadata_base.json update 2019-02-21 20:49:24 -08:00
Pearce Barry ae8e131cab
Land #11449, enhance BigDecimal deprecation message suppression 2019-02-21 22:40:24 -06:00
Jeffrey Martin 087d653cd0
enhance BigDecimal deprecation message suppression
When BigDecimal.new is called without keyword arguments
pass along only the *arg list.
2019-02-21 21:47:03 -06:00
Metasploit a3d0c93ff7
Bump version of framework to 5.0.8 2019-02-21 10:07:03 -08:00
Jacob Robles 5214b90fdf
Land #11292, Add exploit for Nuuo CMS SQL injection 2019-02-21 11:05:53 -06:00
Jacob Robles 1cd7dc8bc9
Update rank, add note 2019-02-21 10:12:02 -06:00
Pedro Ribeiro 382d760540
Merge pull request #6 from jrobles-r7/nuuo_cms_sqli
Nuuo cms sqli update
2019-02-21 22:02:16 +07:00
Jacob Robles 696640a340
Timeout and cleanup files 2019-02-21 06:48:10 -06:00
Jacob Robles 4a4637d7a3
Move execute shell 2019-02-21 06:48:09 -06:00
Brent Cook d19ad1a725 change default database web service port to 5443
The current default is port 8080, which in addition to conflicting with almost any local web app/server you might be running, also makes it seem like this is a plaintext connection, when this is really TLS. Switching to 5443 is somewhat unique (it's not in /etc/services), complements the default database port of 5343, and also decodes to TLS by default in Wireshark.
2019-02-21 04:04:42 -06:00
Metasploit a30213782b
automatic module_metadata_base.json update 2019-02-20 07:25:22 -08:00
Jacob Robles c179e5cdad
Land #11291, Add Nuuo CMS session bruteforcing module 2019-02-20 09:13:33 -06:00
Jacob Robles 49307ae6c7
Deregister unused options 2019-02-20 08:09:06 -06:00
Metasploit 3a346fbb98
automatic module_metadata_base.json update 2019-02-20 05:59:43 -08:00
Brent Cook bf3256a64a
Land #11392, only compute prompt expansions as-needed 2019-02-20 07:48:05 -06:00
Brent Cook fc45e7d1b1
Land #11407, Add support for showing extra help in msfconsole 2019-02-20 07:45:53 -06:00
Jacob Robles 1acc565335
Land #11290, Add Nuuo CMS file upload exploit 2019-02-20 07:43:37 -06:00
Brent Cook 125830c649
Land #11404, Add manageengine_deviceexpert_user_creds docs 2019-02-20 07:41:24 -06:00
Metasploit 5ab4a3821e
automatic module_metadata_base.json update 2019-02-20 05:16:34 -08:00
Jacob Robles bffacff78c
Land #11293, Add Nuuo CMS file download 2019-02-20 07:06:49 -06:00
Jacob Robles d196020df1
Land #11289, Add Nuuo mixin 2019-02-20 06:35:03 -06:00
Brent Cook 1c1103f9da
Land #11400, Add --sec-name to msfvenom, update generate command 2019-02-19 21:11:01 -06:00
Brent Cook 760defd218
Land #11184, update to Ruby 2.6.1 2019-02-19 21:06:40 -06:00
Brent Cook 880e5976bf
Land #11176, support RHOSTS in all auxiliary modules 2019-02-19 21:01:57 -06:00
Brent Cook d2775c02f8
Land #11393, If an option alias is deregistered, also deregister the original option 2019-02-19 20:57:23 -06:00
Matthew Kienow d15095f452
Land #11191, add analyze command 2019-02-19 21:50:20 -05:00
Jeffrey Martin 33948eb5c4
process each individual id returned from ranges 2019-02-19 15:43:38 -06:00
Metasploit 3c9e781eed
automatic module_metadata_base.json update 2019-02-19 11:55:27 -08:00
Wei Chen 661e78beed
Land #11409, Add Belkin Wemo UPnP RCE 2019-02-19 13:47:18 -06:00
William Vu 0c8b260737 Revert ARCH_CMD payload to cmd/unix/generic
There is no telnetd, so cmd/unix/bind_busybox_telnetd won't work.
2019-02-19 13:23:25 -06:00
Metasploit 437b110fbd
automatic module_metadata_base.json update 2019-02-19 11:18:18 -08:00
Jacob Robles 6d619217c5
Land #11430, Deregister RHOSTS instead of RHOST 2019-02-19 13:10:07 -06:00
Jacob Robles 9b78cb034e
Land #11439, Add telnet module docs 2019-02-19 13:06:45 -06:00