Commit Graph

47297 Commits (358347358fd9dcd4db96fac07b1bb0cd7c87e097)

Author SHA1 Message Date
Brendan Coles 358347358f Add documentation 2018-07-13 04:18:56 +00:00
Brendan Coles 4b62f41369 Add QNAP Q'Center change_passwd Command Execution exploit 2018-07-12 20:00:17 +00:00
Metasploit 4114d5e8fa
Weekly dependency update 2018-07-12 10:05:32 -07:00
Jacob Robles f30c4e0465
Land #10226, Add code randomization capabilities to Metasploit::Framework::Compiler 2018-07-12 11:20:04 -05:00
Metasploit a9728d1bf1
automatic module_metadata_base.json update 2018-07-12 09:14:02 -07:00
Brendan Coles 904de2dd09
Land #10238, Add ManageEngine Exchange Reporter Plus RCE exploit 2018-07-12 16:07:32 +00:00
Wei Chen faf3adaee2 Update 2018-07-12 10:11:45 -05:00
Kacper Szurek 486225c2a8
Code review changes
Use target_uri, split url inside normalize function, replace print with vprint, return CheckCode::Appears
2018-07-12 14:27:28 +02:00
Metasploit 9c2777c6b9
automatic module_metadata_base.json update 2018-07-12 01:56:07 -07:00
William Vu aae98cb12a
Land #9780, once more with feeling
Missed the merge, lol.
2018-07-12 03:42:27 -05:00
William Vu acb20e5a29
Land #9780, CouchDB auth bypass and RCE 2018-07-12 03:36:17 -05:00
Metasploit 048c1ee7b7
automatic module_metadata_base.json update 2018-07-12 01:18:45 -07:00
Green-m 2652971c5d
Merge pull request #1 from wvu-r7/pr/9780
exploit/linux/http/apache_couchdb_cmd_exec fixes some problems.
2018-07-12 16:16:06 +08:00
William Vu a08420e0d0
Land #10286, Docker server version scanner 2018-07-12 03:08:41 -05:00
William Vu e62dbecbef Add module doc 2018-07-12 03:06:16 -05:00
William Vu cce3b6f369 Clean up module 2018-07-12 02:57:14 -05:00
William Vu f53080ee60 Fix exploit and do final cleanup 2018-07-12 02:13:30 -05:00
William Vu 167745c124 Selectively add RuboCop fixes 2018-07-11 22:49:46 -05:00
William Vu ccc3267166 Correct rubocop -a
We'll update .rubocop.yml later.
2018-07-11 22:49:46 -05:00
William Vu ca5e496b8f Run rubocop -a 2018-07-11 21:40:19 -05:00
Agora Security 7d8b9a90d7 Add more reporting 2018-07-11 17:22:48 -04:00
Agora Security 30c43e22d9 Fix typo 2018-07-11 17:04:31 -04:00
Agora Security bb8ac4a7ab Add info & update_info 2018-07-11 16:52:16 -04:00
Adam Cammack adff986908
Land #10287, Add advanced option to skip WP checks 2018-07-11 14:25:19 -05:00
Shelby Pace f855a5ab51
Land #10284, Inform the user about lack of CVE 2018-07-11 11:47:43 -05:00
Shelby Pace 70837deeb1
Land #10268, Ensure module_reference loads rb modules 2018-07-11 11:33:26 -05:00
Metasploit 147511dc66
automatic module_metadata_base.json update 2018-07-11 09:22:09 -07:00
Shelby Pace 1ded8ffb29
Land #10260, Add phpMyAdmin v4.8.1/4.8.0 LFI RCE 2018-07-11 11:10:52 -05:00
Brendan Coles df2f58fb08 Add WPCHECK (Bool) advanced option to Exploit::Remote::HTTP::Wordpress 2018-07-11 07:09:28 +00:00
Agora Security 1f0045fa03 Improve Description 2018-07-11 01:27:10 -04:00
Agora Security 00f4d3967c Add basic reporting 2018-07-11 00:47:43 -04:00
Agora Security d488b51264 Use peer instead of ip & port 2018-07-11 00:41:55 -04:00
Agora Security 5a89642ddd Simplify the module greatly 2018-07-11 00:15:56 -04:00
Agora Security ffc2f044cc Remove lines that were not required 2018-07-11 00:04:44 -04:00
Agora Security 7b1e7eb085 Minor improvement to description 2018-07-11 00:04:12 -04:00
Agora Security 2b2029b487 Align Hashrockets 2018-07-11 00:03:26 -04:00
Agora Security 9491c63778 Fix several minor details 2018-07-10 23:56:05 -04:00
Agora Security 66c207a124 Remove timeout of 25 seconds 2018-07-10 23:53:13 -04:00
Agora Security 718606c9f2 Add Auxiliary module to enumerate the Docker Server Version 2018-07-10 19:34:49 -04:00
Metasploit c2094c8ca8
automatic module_metadata_base.json update 2018-07-10 15:50:27 -07:00
Erin Bleiweiss ef3ea2dd44
Land #10280, Use default CheckCode in ETERNALBLUE 2018-07-10 17:39:42 -05:00
Metasploit 5f092c03a1
automatic module_metadata_base.json update 2018-07-10 12:43:02 -07:00
Shelby Pace 10cd6c99d9
Land #10231, Monstra Fileupload Exec 2018-07-10 14:23:15 -05:00
Shelby Pace 07dca243ff
changed grammar, removed redundant code 2018-07-10 14:13:57 -05:00
Shelby Pace 476a3a276f
modified capitalization and wording 2018-07-10 14:12:02 -05:00
Wei Chen 6aa5349513 Add a link explaining the message 2018-07-10 13:25:09 -05:00
Metasploit f3ff95944f
automatic module_metadata_base.json update 2018-07-10 10:02:11 -07:00
Brent Cook 1af360d7e0
Land #10108, add IBM QRadar SIEM exploit 2018-07-10 11:52:32 -05:00
Brent Cook 625050767e add module docs 2018-07-10 11:51:57 -05:00
William Vu f64c9588e9 Undefine check method and let the base class do it
Preserve the to-do without rewording - should be enough.
2018-07-10 11:05:00 -05:00