Brent Cook
7849743789
update stageless python sizes
2018-01-18 00:41:58 -06:00
Brent Cook
d6e966b079
Land #9414 , wp_admin_shell_upload - remove plugin dir after exploitation
2018-01-16 21:08:22 -06:00
William Vu
e5bd36da1c
Land #9402 , NIS bootparamd domain name disclosure
2018-01-15 15:36:00 -06:00
Christian Mehlmauer
2f9eebe28b
remove plugin dir
2018-01-15 14:48:59 +01:00
William Vu
736d438813
Address second round of feedback
...
Brain fart on guard clauses when I've been using them all this time...
Updating the conditions made the ternary fall out of favor.
Changed some wording in the doc to suggest the domain name for a
particular NIS server may be different from the bootparamd client's
configuration.
2018-01-13 22:55:01 -06:00
William Vu
1a8eb7bf2a
Update nis_ypserv_map after bootparam feedback
...
Yes, yes, I see the off-by-one "error." It's more accurate this way.
Basically, we want to ensure there's actually data to dump.
2018-01-13 15:40:17 -06:00
William Vu
c080329ee6
Update module after feedback
...
Looks like I can't decide on certain style preferences.
Not keen on using blank?, but I've used it before. Time to commit?
Also, fail_with has been fixed for aux and post since #8643 . Use it!
2018-01-13 15:40:11 -06:00
William Vu
eb8429cbd3
Revert "umlaut"
...
This reverts commit ffd7073420
.
2018-01-12 22:57:22 -06:00
Brendan Coles
ffd7073420
umlaut
2018-01-13 15:48:45 +11:00
Jeffrey Martin
1f1dc59d17
Land #9392 , python meterpreter whitespace normalization
2018-01-12 21:24:13 -06:00
William Vu
2916c5ae45
Rescue Rex::Proto::SunRPC::RPCTimeout
...
Coincidentally, this also fixes the rescue in the library, since
rescuing Timeout instead of Timeout::Error does nothing.
2018-01-12 19:34:59 -06:00
William Vu
0c9f1d71d3
Add NIS bootparamd domain name disclosure
2018-01-12 19:34:53 -06:00
Agahlot
488f27bf76
Small Typo
2018-01-12 07:05:30 -05:00
Wei Chen
e6c4fb1dab
Land #9269 , Add a new target for Sync Breeze Enterprise GET BoF
...
Land #9269
2018-01-11 16:54:23 -06:00
Wei Chen
f395e07fc6
Land #9269 , add new target for Sync Breeze Enterprise GET BoF
...
Land #9269
2018-01-11 16:53:02 -06:00
William Vu
4b225c30fd
Land #9368 , ye olde NIS ypserv map dumper
2018-01-10 22:02:36 -06:00
William Vu
f66b11f262
Nix an unneeded variable declaration
2018-01-10 20:24:02 -06:00
Wei Chen
6510ee53bc
Land #9204 , Add exploit for Samsung SRN-1670D (CVE-2017-16524)
...
Land #9204
2018-01-10 20:15:29 -06:00
Wei Chen
18c179a091
Update module and add documentation
...
This updates the module to pass:
* msftidy
* Ruby style guidelines
* Proper usage of Metasploit API
* Mostly other cosmetic fixes
A documentation is also added.
2018-01-10 20:13:42 -06:00
William Vu
b66889ac86
Rescue additional errors and refactor code
...
https://jvns.ca/blog/2015/11/27/why-rubys-timeout-is-dangerous-and-thread-dot-raise-is-terrifying/
2018-01-10 20:11:25 -06:00
Wei Chen
7e2c7837e5
Land #9325 , Add CVE-2017-6090 phpCollab 2.5.1 file upload exploit module
...
Land #9325
2018-01-10 17:39:50 -06:00
Wei Chen
b1f3f471f3
Update phpcollab_upload_exec code (also module documentation)
2018-01-10 17:38:52 -06:00
Wei Chen
dd737c3bc8
Land #9317 , remove multiple deprecated modules
...
Land #9317
The following modules are replaced by the following:
auxiliary/scanner/discovery/udp_probe
is replaced by:
auxiliary/scanner/discovery/udp_sweep
exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload
is replaced by:
exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload
exploit/windows/misc/regsvr32_applocker_bypass_server
is replaced by:
exploits/multi/script/web_delivery
2018-01-10 15:47:20 -06:00
Wei Chen
8d77f35b16
Land #9373 , Add LabF nfsAxe FTP Client 3.7 Stack Buffer Overflow
...
Land #9373
2018-01-09 22:40:50 -06:00
Wei Chen
25280e3319
Update labf_nfsaxe and module documentation
2018-01-09 22:39:40 -06:00
Brent Cook
f125e13278
python meterpreter whitespace normalization
2018-01-09 16:08:52 -05:00
Wei Chen
777e383568
Land #9377 , Add HPE iMC dbman RestoreDBase Unauthenticated RCE exploit
...
Land #9377
2018-01-09 13:56:53 -06:00
Wei Chen
a0c9cdd73d
Land #9376 , Add HPE iMC dbman RestartDB Unauthenticated RCE exploit
...
Land #9376
2018-01-09 13:28:03 -06:00
Brent Cook
573ee28631
Land #9378 , Detect and return on bad VNC negotiations
2018-01-09 03:46:00 -05:00
William Vu
4a5a17a8e1
Add NIS ypserv map dumper
2018-01-08 14:27:53 -06:00
Wei Chen
d138f1508c
Land #9340 , Add exploit for Commvault Remote Command Injection
...
Land #9340
2018-01-07 12:17:26 -06:00
Daniel Teixeira
ff1806ef5f
Update labf_nfsaxe.rb
2018-01-07 16:46:06 +00:00
Daniel Teixeira
a69f275a39
Update labf_nfsaxe.rb
2018-01-05 21:14:47 +00:00
Daniel Teixeira
c819aebc76
Add files via upload
2018-01-05 21:11:21 +00:00
Daniel Teixeira
e797ca4781
Add files via upload
2018-01-05 21:00:47 +00:00
Daniel Teixeira
aca76e2a4e
Update labf_nfsaxe.rb
2018-01-05 20:58:36 +00:00
Daniel Teixeira
2643acbc25
Update labf_nfsaxe.rb
2018-01-05 20:55:49 +00:00
Daniel Teixeira
b29710c66b
Add files via upload
2018-01-05 20:47:27 +00:00
Daniel Teixeira
94a1198485
Update labf_nfsaxe.rb
2018-01-05 20:41:49 +00:00
Daniel Teixeira
b97785c7a9
Update labf_nfsaxe.rb
2018-01-05 18:46:33 +00:00
Daniel Teixeira
e7946549d7
Update labf_nfsaxe.rb
2018-01-05 18:31:40 +00:00
jgor
51e5fb450f
Detect and return on bad VNC negotiations
2018-01-05 10:12:13 -06:00
Brendan Coles
006514864b
Add HPE iMC dbman RestoreDBase Unauthenticated RCE exploit
2018-01-05 11:28:48 +00:00
Brendan Coles
52a5fc9e0a
Add HPE iMC dbman RestartDB Unauthenticated RCE exploit
2018-01-05 11:28:14 +00:00
Daniel Teixeira
a3fb8b6619
Update labf_nfsaxe.rb
2018-01-04 20:55:38 +00:00
Daniel Teixeira
e5bb4bf057
Add files via upload
2018-01-04 20:26:28 +00:00
h00die
65f444ddcc
land #9362 exploit for pfsense graph injection
2018-01-04 14:35:52 -05:00
wetw0rk
c9d6d0a7a7
-51
2018-01-04 12:25:31 -06:00
William Vu
366a20a4a4
Fix #9215 , minor style nitpick
2018-01-03 23:11:51 -06:00
Brent Cook
520e890520
Land #8581 , VMware Workstation ALSA Config File Local Privilege Escalation
2018-01-03 21:35:57 -06:00