Jacob Robles
1faa41aafe
Dont require hook name
2019-04-26 13:11:40 -05:00
@shellfail
c643436383
Update modules/exploits/linux/local/apt_package_manager_persistence.rb
...
Changed Disclosure Date format
Co-Authored-By: aringo <ringo.aaron@gmail.com>
2019-04-25 20:08:50 -05:00
Aaron Ringo
261a4271fa
Updated some formatting as requested along with some rubocob requested
2019-04-25 16:15:00 -05:00
Aaron Ringo
bd1113d53c
Updated some formatting as requested along with some rubocob requested
2019-04-25 15:55:22 -05:00
Aaron Ringo
22c3fe35f7
Changed hook payload to redirect errors, to not show up on target screen
2019-03-31 12:09:40 -05:00
Aaron Ringo
299334ae7f
fixed bug where alphanumeric was never hit
2019-03-30 22:51:18 -05:00
Aaron Ringo
38bf99e729
Re-add of module after jacking up rebase, with new arches,conditional logic, documentation
2019-03-30 22:04:21 -05:00
Brent Cook
f7e3af212c
Land #11462 , Add Reliability REPEATABLE_SESSION to Wemo exploit
2019-02-22 13:16:23 -06:00
William Vu
c76714ccc6
Add Reliability REPEATABLE_SESSION to Wemo exploit
...
Notes copied from auxiliary/admin/wemo/crockpot where it didn't apply.
2019-02-22 13:11:59 -06:00
Brent Cook
2363ceaab9
Land #11444 , change default web service port to 5443
2019-02-22 12:39:22 -06:00
Brent Cook
52aae1e077
Land #11451 , update module authors to consume JSON cache
2019-02-22 12:37:19 -06:00
Metasploit
3871e45196
Bump version of framework to 5.0.9
2019-02-21 21:30:00 -08:00
Jeffrey Martin
5bd34e7d4c
cleaner read of JSON cache
2019-02-21 23:20:43 -06:00
Jeffrey Martin
98e95eeb18
remove unused imports and vars
2019-02-21 23:14:55 -06:00
Jeffrey Martin
dd864e8f6e
enhance -f for `evasion` type
2019-02-21 23:11:39 -06:00
Jeffrey Martin
dcaf477097
support -f from JSON
2019-02-21 23:10:07 -06:00
Jeffrey Martin
1bae9ccf31
update module authors to consume JSON cache
2019-02-21 22:56:04 -06:00
Metasploit
885259f58a
automatic module_metadata_base.json update
2019-02-21 20:49:24 -08:00
Pearce Barry
ae8e131cab
Land #11449 , enhance BigDecimal deprecation message suppression
2019-02-21 22:40:24 -06:00
Jeffrey Martin
087d653cd0
enhance BigDecimal deprecation message suppression
...
When BigDecimal.new is called without keyword arguments
pass along only the *arg list.
2019-02-21 21:47:03 -06:00
Metasploit
a3d0c93ff7
Bump version of framework to 5.0.8
2019-02-21 10:07:03 -08:00
Jacob Robles
5214b90fdf
Land #11292 , Add exploit for Nuuo CMS SQL injection
2019-02-21 11:05:53 -06:00
Jacob Robles
1cd7dc8bc9
Update rank, add note
2019-02-21 10:12:02 -06:00
Pedro Ribeiro
382d760540
Merge pull request #6 from jrobles-r7/nuuo_cms_sqli
...
Nuuo cms sqli update
2019-02-21 22:02:16 +07:00
Jacob Robles
696640a340
Timeout and cleanup files
2019-02-21 06:48:10 -06:00
Jacob Robles
4a4637d7a3
Move execute shell
2019-02-21 06:48:09 -06:00
Brent Cook
d19ad1a725
change default database web service port to 5443
...
The current default is port 8080, which in addition to conflicting with almost any local web app/server you might be running, also makes it seem like this is a plaintext connection, when this is really TLS. Switching to 5443 is somewhat unique (it's not in /etc/services), complements the default database port of 5343, and also decodes to TLS by default in Wireshark.
2019-02-21 04:04:42 -06:00
Metasploit
a30213782b
automatic module_metadata_base.json update
2019-02-20 07:25:22 -08:00
Jacob Robles
c179e5cdad
Land #11291 , Add Nuuo CMS session bruteforcing module
2019-02-20 09:13:33 -06:00
Jacob Robles
49307ae6c7
Deregister unused options
2019-02-20 08:09:06 -06:00
Metasploit
3a346fbb98
automatic module_metadata_base.json update
2019-02-20 05:59:43 -08:00
Brent Cook
bf3256a64a
Land #11392 , only compute prompt expansions as-needed
2019-02-20 07:48:05 -06:00
Brent Cook
fc45e7d1b1
Land #11407 , Add support for showing extra help in msfconsole
2019-02-20 07:45:53 -06:00
Jacob Robles
1acc565335
Land #11290 , Add Nuuo CMS file upload exploit
2019-02-20 07:43:37 -06:00
Brent Cook
125830c649
Land #11404 , Add manageengine_deviceexpert_user_creds docs
2019-02-20 07:41:24 -06:00
Metasploit
5ab4a3821e
automatic module_metadata_base.json update
2019-02-20 05:16:34 -08:00
Jacob Robles
bffacff78c
Land #11293 , Add Nuuo CMS file download
2019-02-20 07:06:49 -06:00
Jacob Robles
d196020df1
Land #11289 , Add Nuuo mixin
2019-02-20 06:35:03 -06:00
Brent Cook
1c1103f9da
Land #11400 , Add --sec-name to msfvenom, update generate command
2019-02-19 21:11:01 -06:00
Brent Cook
760defd218
Land #11184 , update to Ruby 2.6.1
2019-02-19 21:06:40 -06:00
Brent Cook
880e5976bf
Land #11176 , support RHOSTS in all auxiliary modules
2019-02-19 21:01:57 -06:00
Brent Cook
d2775c02f8
Land #11393 , If an option alias is deregistered, also deregister the original option
2019-02-19 20:57:23 -06:00
Matthew Kienow
d15095f452
Land #11191 , add analyze command
2019-02-19 21:50:20 -05:00
Jeffrey Martin
33948eb5c4
process each individual id returned from ranges
2019-02-19 15:43:38 -06:00
Metasploit
3c9e781eed
automatic module_metadata_base.json update
2019-02-19 11:55:27 -08:00
Wei Chen
661e78beed
Land #11409 , Add Belkin Wemo UPnP RCE
2019-02-19 13:47:18 -06:00
William Vu
0c8b260737
Revert ARCH_CMD payload to cmd/unix/generic
...
There is no telnetd, so cmd/unix/bind_busybox_telnetd won't work.
2019-02-19 13:23:25 -06:00
Metasploit
437b110fbd
automatic module_metadata_base.json update
2019-02-19 11:18:18 -08:00
Jacob Robles
6d619217c5
Land #11430 , Deregister RHOSTS instead of RHOST
2019-02-19 13:10:07 -06:00
Jacob Robles
9b78cb034e
Land #11439 , Add telnet module docs
2019-02-19 13:06:45 -06:00