Commit Graph

42003 Commits (35bc1fbf28d7c2acdff2d003cdaf615d2494ac91)

Author SHA1 Message Date
wchen-r7 35bc1fbf28
Land #8282, Add module doc for auxiliary/scanner/chargen/chargen_probe 2017-04-24 16:14:19 -05:00
wchen-r7 5bbb4d755a
Land #8254, Add CVE-2017-0199 - Office Word HTA Module 2017-04-24 16:05:00 -05:00
wchen-r7 6029a9ee2b Use a built-in HTA server and update doc 2017-04-24 16:04:27 -05:00
h00die 562389df57 add comma 2017-04-23 11:49:52 -04:00
h00die c6109f7138 add newline 2017-04-23 11:41:08 -04:00
h00die e8e2a3dd61 chargen_probe docs 2017-04-23 11:38:29 -04:00
h00die a4f29fbd26
Land #8270 exploit for wipg-1000 cmd injection 2017-04-22 09:46:40 -04:00
h00die 8e4c093a22 added version numbers 2017-04-22 09:45:55 -04:00
Metasploit 89e81253ed
Bump version of framework to 4.14.15 2017-04-21 10:02:32 -07:00
Brent Cook 6b37e1ecfc
Land #8268, Improve metasploit-aggregator UX 2017-04-21 11:21:49 -05:00
Matthias Brun ca03140531 Add documentation for WiPG-1000 module 2017-04-21 15:37:47 +02:00
Matthias Brun 714ada2b66 Inline execute_cmd function 2017-04-21 15:32:15 +02:00
Matthias Brun 8218f024e0 Add WiPG-1000 Command Injection module 2017-04-20 16:32:23 +02:00
Pearce Barry fc3a880c0d
Land #8214, Fix ELM327 ISOTP commands 2017-04-19 15:05:12 -05:00
Jeffrey Martin 32da0ed3d7
fix some comment typos 2017-04-19 14:14:26 -05:00
Jeffrey Martin 6c448d22b4
improve aggregator session listings
adjust session lists generated from a metasploit aggregator connection to be match calls to sessions and sessions -v against the local console
2017-04-19 14:12:21 -05:00
Metasploit f90911e09e
Bump version of framework to 4.14.14 2017-04-19 09:35:29 -07:00
h00die 9f892c56fb
land #8244 docs for manageengine_connectionid_write 2017-04-18 21:43:58 -04:00
dmaloney-r7 524bbd7ad6 Merge pull request #8261 from dmaloney-r7/bug/disable_smb_login_nbss
Bug/disable smb login nbss
2017-04-18 16:46:11 -05:00
William Vu 3b38d0d900
Land #8262, PR ref for huawei_hg532n_cmdinject 2017-04-18 16:29:13 -05:00
David Maloney aa9c037307
fix spec for reals this time 2017-04-18 14:30:29 -05:00
Tod Beardsley 1fcc1f7417
Trailing comma. Why isn't this Lua? 2017-04-18 14:27:44 -05:00
wchen-r7 0428e12b10
Land #8216, Add CVE-2016-7552/CVE-2016-7547 exploit 2017-04-18 14:26:55 -05:00
Tod Beardsley 4ec71f9272
Add a reference to the original PR
This was the source of first public disclosure, so may as well include
it.
2017-04-18 14:20:25 -05:00
David Maloney db246e6076
update spec 2017-04-18 14:19:29 -05:00
David Maloney 8d4ccb5d51
SMB over NtBIOS no longer works
don't try to run the smb loginscanner
against port 139
2017-04-18 13:34:00 -05:00
David Maloney eb29bf05b3 Merge branch 'master' of github.com:rapid7/metasploit-framework 2017-04-18 13:33:06 -05:00
Metasploit 05e15cee18
Bump version of framework to 4.14.13 2017-04-18 08:17:22 -07:00
James Barnett a444444a04 Land #8256. Handle blank creds in smb login scanner. 2017-04-18 10:11:37 -05:00
nixawk 0a085c4e83 add doc for exploit/windows/fileformat/office_word_hta 2017-04-18 03:26:10 -05:00
David Maloney 1d52e269a7
update ruby_smb 2017-04-17 22:20:02 -05:00
David Maloney 6ed15a6df8
update ruby_smb 2017-04-17 22:18:36 -05:00
David Maloney 9634248211
treat socket reads as a connection error
treat failures to read from the socket
as a connection error
2017-04-17 21:58:22 -05:00
Adam Cammack 85845b3be5
Land #8257, Fix typo in exploit/linux/smtp/haraka 2017-04-17 13:31:28 -05:00
itsmeroy2012 5f921859f0 adding hotlinks 2017-04-17 23:37:44 +05:30
itsmeroy2012 84220d6617 Minor edits 2017-04-17 23:30:07 +05:30
Nate Caroe 92e7183a74 Small typo fix
Running msfconsole would generate an Ubuntu crash report (?). This seems to be the culprit.
2017-04-17 11:14:51 -06:00
William Vu 942959f7e8
Land #8255, fixes for smb_ms17_010 2017-04-17 11:38:34 -05:00
David Maloney a597de516d
actually use the coerced values 2017-04-17 11:24:57 -05:00
David Maloney bbdf06af5d
coerece nil credentials to empty strings
rubySMB doesn't take nils for credential data, so coerce any nils into
empty strings bfore sending it on
2017-04-17 11:17:09 -05:00
Brent Cook 5a1e2d6f98
Land #8253, Auto-close and hide HTA windows 2017-04-17 07:42:49 -05:00
Brent Cook 7b936b0012
Land #8184, convert IPMI protocol and modules to bindata 2017-04-17 07:40:15 -05:00
Brent Cook 6f70efcfa1 add module documentation 2017-04-17 07:39:43 -05:00
Brent Cook 7384212656
Land #8245, Add Huawei HG532n command injection exploit 2017-04-17 07:04:05 -05:00
William Vu cf8854b0e0
Land #8252, Msf::Util::EXE loop-vbs double var fix 2017-04-17 03:19:11 -05:00
William Vu b1c7f1302b Fix report_vuln and prefer vprint_error 2017-04-17 02:48:56 -05:00
Ahmed S. Darwish e21504b22d huawei_hg532n_cmdinject: Use send_request_cgi() 'vars_get' key
Instead of rolling our own GET parameters implementation.

Thanks @wvu-r7!
2017-04-17 09:11:50 +02:00
nixawk 3d082814cb Fix default options 2017-04-17 01:09:48 -05:00
Ahmed S. Darwish 7daec53106 huawei_hg532n_cmdinject: Improve overall documentation
- Add section on compiling custom binaries for the device
- Add documentation for Huawei's wget flavor (thanks @h00die)
- Abridge the module's info hash contents (thanks @wwebb-r7)
- Abridge the module's comments; reference documentation (@h00die)
2017-04-17 08:00:51 +02:00
nixawk 637098466c Hidden black flash windows / Close HTA windows 2017-04-16 22:53:17 -05:00