Spencer McIntyre
dabc163076
Modify the shellcode stub to save the process
2015-02-05 13:54:52 -05:00
Tod Beardsley
c633c710bc
Mostly caps/grammar/spelling, GoodRanking on MBAM
2015-02-05 12:36:47 -06:00
sinn3r
562063c4d5
Rename file again
2015-02-05 12:26:17 -06:00
sinn3r
80ebde4fe1
Credit @joevennix
2015-02-05 12:25:38 -06:00
sinn3r
27b8d1057f
Another update
...
Thanks @joevennix
2015-02-05 12:23:32 -06:00
sinn3r
988b54f594
Another update
2015-02-05 12:01:19 -06:00
sinn3r
53134aeb17
Another update
2015-02-05 11:46:38 -06:00
sinn3r
871c8aa8d0
Use store_loot to store coookie
2015-02-05 11:36:35 -06:00
sinn3r
dbe99014f2
An update
2015-02-05 11:29:52 -06:00
sinn3r
08d796c5e3
Don't need this line
2015-02-05 10:53:29 -06:00
sinn3r
d6fe077f79
Try to make the filename more self explanatory
2015-02-05 09:53:38 -06:00
sinn3r
ed6ee27896
Change public ip option name and store cookie to db
2015-02-05 09:48:45 -06:00
sinn3r
75c697c4dc
Final
2015-02-05 04:36:44 -06:00
sinn3r
1ccfb6cb43
IE UXSS
2015-02-05 03:03:28 -06:00
William Vu
b43522a2b8
Fix scadapro_cmdexe datastore
2015-02-05 02:54:03 -06:00
William Vu
a12d1244b9
Fix zenworks_helplauncher_exec datastore
2015-02-05 02:53:47 -06:00
William Vu
148ffaf55f
Fix real_arcade_installerdlg datastore
2015-02-05 02:53:38 -06:00
William Vu
a7156cf4a8
Fix zabbix_script_exec datastore
2015-02-05 02:53:22 -06:00
William Vu
9c1487c944
Fix dns_fuzzer datastore
2015-02-05 02:53:14 -06:00
William Vu
c22865fb71
Fix nexpose_xxe_file_read datastore
2015-02-05 02:53:00 -06:00
scriptjunkie
5b2eb986c9
Land #4678 Add post module to phish credentials
2015-02-04 23:43:02 -06:00
sinn3r
434bca0b27
Land #4613 , auxiliary/server/capture/smb credential creation
2015-02-04 22:45:36 -06:00
Spencer McIntyre
aebf5056ac
Dont compare a string to an integer
2015-02-04 16:55:43 -05:00
Tod Beardsley
47d4acd91d
Land #4605 , Malwarebytes fake update exploit
2015-02-04 10:28:17 -06:00
jvazquez-r7
72007a5daa
Land #4708 , @julianvilas's fix for struts_code_exec_classloader HTTP requests
2015-02-04 09:47:52 -06:00
jvazquez-r7
fbf32669c6
Use single quote
2015-02-04 09:47:27 -06:00
julianvilas
de09559cc8
Change HTTP requests to succeed when going through HTTP proxies
2015-02-04 15:32:14 +01:00
Gabor Seljan
99f5b4bf00
Merge pull request #4 from todb-r7/land-4605-malwarebytes
...
Malwarebytes poisoned update fixes
2015-02-04 10:57:45 +01:00
sinn3r
df22ed2132
Land #4702 , Fix bug in Firefox XPCOM payload on Linux
2015-02-03 21:36:01 -06:00
jvazquez-r7
c0e1440572
Land #4685 , @FireFart's module for Wordpress Platform Theme RCE
2015-02-03 17:35:59 -06:00
jvazquez-r7
28f303d431
Decrease timeout
2015-02-03 17:33:29 -06:00
jvazquez-r7
a1c157a4db
Land #4609 , @h0ng10's module for Wordpress Pixabay Images PHP Code Upload
2015-02-03 17:01:32 -06:00
jvazquez-r7
eebee7c066
Do better session creation handling
2015-02-03 17:00:37 -06:00
jvazquez-r7
4ca4fd1be2
Allow to provide the traversal depth
2015-02-03 16:38:40 -06:00
jvazquez-r7
e62a5a4fff
Make the calling payload code easier
2015-02-03 16:23:04 -06:00
jvazquez-r7
61cdb5dfc9
Change filename
2015-02-03 16:13:10 -06:00
Christian Catalan
3deac54d3f
Convert find_or_initialize_by_X to Rails 4 compatible.
...
MSP-12018
2015-02-03 16:09:49 -06:00
jvazquez-r7
82be43ea58
Do minor cleanup
2015-02-03 16:07:27 -06:00
William Vu
8a17acf847
Land #4699 , fresh terp binaries from @bcook-r7
2015-02-03 15:46:28 -06:00
Tod Beardsley
b5794db973
Spelling
2015-02-03 14:10:47 -06:00
Tod Beardsley
edd5ec3b0d
Refactor and rename of @sgabe's module
...
Renamed because it's not just MBAM, and having malwarebytes in the name
is more memorable anyway.
This refactor's @sgabe's original module to prefer if/else over
unless/else, clearly labelling variables, and wrapping up discrete
functionality into specific methods, and adds an OSVDB and the original
discoverer's URL.
2015-02-03 14:08:25 -06:00
William Vu
07438d3ec4
Land #4704 , Asterisk 1.8 support for IAX2 stack
...
https://github.com/rapid7/warvox/issues/27
2015-02-02 23:11:06 -06:00
HD Moore
ffe0e52cb6
The iax2 stack now works properly with asterisk 1.8
...
Note that the requirecalltoken=no setting is still required in the asterisk configuration at this point.
2015-02-02 22:29:13 -06:00
William Vu
ef216059df
Land #4703 , IAX2 self.debugging for dprint
...
Needs to be set for iaxrecord.rb -d to work.
2015-02-02 21:52:24 -06:00
HD Moore
0ba34422d5
Pass the debugging option for IAX2 Client
2015-02-02 21:08:16 -06:00
joev
ee1af83cc8
Go ahead and trim whitespace on all commands coming in.
2015-02-02 16:56:22 -06:00
William Vu
54a5dd69a9
Land #4698 , WP GHOST scanner dead code removal
2015-02-02 16:54:09 -06:00
Brent Cook
8934854f4d
Land #4701 , @wvu-r7 decollides search_filter, fixing slow searches
2015-02-02 16:49:40 -06:00
William Vu
9e030143e7
Fix slow search due to method name conflict
...
Changed "search_filter" in enum_ad_users module to "query_filter" to
avoid conflicting with "search_filter" in command_dispatcher/core.rb.
2015-02-02 16:36:20 -06:00
Brent Cook
2fdeeb3b13
Rebuilt Java Payloads with the latest NDK/SDK and meterpreter-javapayload
...
Fix rapid7/meterpreter#95 , rebuilt with all outstanding PRs from
rapid7/metasploit-javapayload.
2015-02-02 13:09:15 -06:00