ee0776b095
print when not verbose
2018-09-20 20:54:41 -04:00
c5f6d4b8a5
Land #10670 , Pimcore SQLi module
2018-09-19 20:50:21 -05:00
5477220106
Update documentation
2018-09-19 20:48:42 -05:00
7698b7d7db
changed location of dolibarr module/documentation
2018-09-19 11:17:27 -05:00
42ccc37bca
Added description to module
2018-09-19 10:22:51 -05:00
05095c8f8d
Add documentation
2018-09-19 09:29:51 -05:00
b6ca8cac7f
renamed/relocated files, changed uri
2018-09-19 08:11:45 -05:00
36fa8f2ffc
Added exploit module for Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow.
2018-09-19 15:28:46 +08:00
827219aff3
Revert "Added exploit module for Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow"
...
This reverts commit d06587caef
2018-09-19 15:22:12 +08:00
d06587caef
Added exploit module for Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow
2018-09-19 15:09:40 +08:00
6a63feced4
Merge remote-tracking branch 'upstream/master' into pr/10418
2018-09-18 19:54:44 -05:00
b98dfe0e7f
changed wording and line numbers
2018-09-18 13:33:09 -05:00
4fb223b293
Add Solaris RSH Stack Clash Privilege Escalation module
2018-09-18 17:38:59 +00:00
269da6ac9a
removed remaining line from template
2018-09-18 12:23:13 -05:00
34f07619d5
added documentation for module
2018-09-18 12:08:31 -05:00
03d50f2773
Adding documentation
2018-09-18 15:41:03 +05:30
2f5bd4b714
Add Solaris 'EXTREMEPARR' dtappgather Privilege Escalation module
2018-09-18 07:23:10 +00:00
5089c19453
Land #10620 Solaris 10 LPE for libnspr
2018-09-17 18:10:16 -04:00
86f5b25d8f
Land #10563 , Add 'Notes' metadata section
2018-09-17 11:18:08 -05:00
5a21444d39
Fix documentation
...
Added 'post' when use module.
2018-09-15 14:27:21 +02:00
68750ca19c
Added documentation
...
Documentation is added for the post-exploitation modules vnc_password_osx.
2018-09-15 12:20:01 +02:00
af7d76b52d
changes from first review
2018-09-14 20:10:59 -04:00
6cef61ddbc
finish srsexec add docs
2018-09-13 21:20:09 -04:00
a8c459db18
Update description with correct patched release
2018-09-13 08:22:13 +00:00
0db1c34c40
Add check for Solaris system patches
2018-09-12 07:36:54 +00:00
e75b5592f7
Add ForceExploit option
2018-09-11 09:23:50 +00:00
d658ccf653
Add Solaris libnspr NSPR_LOG_FILE Privilege Escalation module
2018-09-11 08:11:11 +00:00
d8f2d08058
finish up docs and 10 exploit
2018-09-10 21:08:30 -04:00
3d5da50b12
Land #10598 , Store Credentials Found with PhpMyAdmin Password Extractor
2018-09-10 11:49:52 -05:00
589fb4bf3b
first try at ueb mix
2018-09-09 22:41:01 -04:00
7604712e04
Add Documentation for office365userenum
2018-09-07 18:22:09 -04:00
718aaca0f4
Land #10546 , Add Apache Struts exploit: CVE-2018-11776
2018-09-07 14:54:23 -05:00
9abb6aebb3
Fixup reverse_ord_tcp docs
2018-09-07 11:47:14 -05:00
18ffd36409
storing config file, changed regex
2018-09-07 08:13:10 -05:00
8f2ab08c5e
updated docs
2018-09-07 15:06:03 +05:30
41d12166fd
Use a string hash key for documentation
2018-09-06 15:57:52 -05:00
36d125e1a8
modified line in scenarios output
2018-09-06 12:15:04 -05:00
50df5e386a
modified doc to reflect new output
2018-09-06 12:11:14 -05:00
1bee1e3861
Add IIS ShortName Scanner documentation
2018-09-06 12:02:32 +00:00
f34146b288
Add module doc
2018-09-05 19:57:15 -05:00
d25aad571f
Land #10474 , add documention for windows/shell/reverse_ord_tcp
2018-09-05 09:04:47 -05:00
d0b470879b
Add documentation for windows_defender_exe
2018-09-04 14:16:24 -05:00
b1479ec350
Update swagger docs to be compliant with new notes field
2018-08-31 16:53:59 -05:00
34944ff5be
Land #10568 , Update weblogic module docs
2018-08-31 14:05:46 -05:00
da7a29f715
Documentation update
2018-08-31 13:57:41 -05:00
0dea5fcfd9
Land #10565 , Add Dolibarr ERP/CRM Auxiliary Module
2018-08-31 13:47:46 -05:00
e49435a766
Update weblogic module docs
...
Update the module docs to match the new name
of the module.
2018-08-31 06:00:41 -05:00
628ea736a0
delete newline
2018-08-30 15:54:04 -05:00
d0cc05b074
added documentation
2018-08-30 15:28:52 -05:00
a9376266bc
Land #10484 , Add PhpMyAdmin password extractor
2018-08-30 12:16:17 -05:00
6ec8522786
Land #10482 , Add Network Manager VPNC Privesc
2018-08-30 10:46:54 -05:00
9f13d0fc56
Adding documentation
...
As there was no escalate folder I have created one to maintain my documentation, kindly suggest if any issues.
2018-08-30 21:13:33 +05:30
9d3e1c1942
Land #10540 , weblogic_deserialize, add check method and linux target
2018-08-30 06:08:03 -05:00
953bafc7e7
Land #10545 , foxit fix generated strings, update doc
2018-08-30 05:55:44 -05:00
d5ad683ba6
More doc updates
2018-08-29 10:59:36 -05:00
88c908665d
Update documentation
2018-08-29 06:24:30 -05:00
086ec5bdfb
Fix generated strings in pdf
2018-08-29 06:24:20 -05:00
b373dcc5d4
First draft of module and documentation for struts_namespace_rce against CVE-2018-11776
2018-08-28 16:53:26 -05:00
f6b0e720e4
Add documentation for peinjector
2018-08-28 14:02:34 -05:00
94e8cdac37
Move files to correct location
2018-08-28 12:38:54 -05:00
49c5a91fa7
Add linux target to weblogic_deserialize module
2018-08-28 11:51:04 -05:00
672dbb7acb
Land #9364 , HP PJL/SNMP CVE-2017-2741 exploit
...
Finally!
2018-08-23 22:47:09 -05:00
8213c21dc9
Land #10467 documentation for postgresql hashdump
2018-08-23 21:35:05 -04:00
a866bdd09d
slight syntax updates to md
2018-08-23 21:34:48 -04:00
1585eff29f
Land #10466 docs for postgres_version
2018-08-23 21:10:34 -04:00
3024725122
slight syntax updates to md
2018-08-23 21:09:52 -04:00
b8ce6782d9
Land #10517 updated docs for CloudMe Sync
2018-08-23 20:54:01 -04:00
2193dd662d
Land #10504 , add Foxit Reader UAF Module and Docs
2018-08-23 18:56:07 -05:00
5f9432ed6a
added rca to cloudme doc
2018-08-23 16:12:13 -05:00
7a534707ab
Add note about unauthenticated telnetd service
2018-08-23 16:16:47 -04:00
ecc6c473d8
Add note about unauthenticated telnetd service
2018-08-23 15:50:41 -04:00
ee6bf7a77c
Fix documentation markdown table format
2018-08-23 15:23:41 -04:00
18712c25cd
Add uname to module documentation scenario
2018-08-23 15:23:41 -04:00
77b77287cc
Add module and payload documentation
2018-08-23 15:23:40 -04:00
46b45f379b
Add documentation for MS16 Reflection DCOM->RPC
2018-08-21 11:27:07 -04:00
fd6880d0d0
Add Foxit Reader UAF Module and Docs
2018-08-21 08:21:51 -05:00
06582a00a0
Add module doc for ssh_enumusers
...
And update description in module.
2018-08-20 19:26:51 -05:00
b8b48fd37a
Land #10313 , add linux autostart persistence module
2018-08-20 18:17:50 +08:00
865898cba7
minor fixes
2018-08-20 17:51:41 +08:00
3cebfe4e14
Documentation
2018-08-19 23:56:00 +05:30
f09148d843
Add documentation
2018-08-19 08:20:41 +00:00
ac71bc86ee
Land #10320 , add module for persistence in /etc/rc.local
2018-08-19 15:30:50 +08:00
e38775b504
minor tweaks
2018-08-19 15:27:04 +08:00
a673ca1bc4
Update reverse_ord_tcp.md
2018-08-17 19:59:39 +05:30
59d977edfa
Documentation on windows/shell/reverse_ord_tcp
...
Part of Issue #7142
2018-08-17 16:22:39 +05:30
a22acf3f3e
Document autostart module
2018-08-17 14:24:28 +08:00
c24ceb9483
Move and update marked_redos module doc
2018-08-16 15:12:36 -05:00
5096eee2ec
Land #10120 , npm "marked" ReDoS module
2018-08-16 15:01:12 -05:00
809a15541c
Create documentation for PostgreSQL hash dumper
...
Documentation on auxiliary/scanner/postgres/postgres_hashdump
Part of issue #8296
Please see and following installation and exploitation steps using your machine. Please replace IP's where appropriate depending on if you are attacking your local machine or another machine on your network.
2018-08-16 08:39:39 -04:00
45cb0a9f6e
Create documentation for PostgreSQL version scanner
...
Documentation on auxiliary/scanner/postgres/postgres_version
Part of issue #8296
## Verification
Please see and following installation and exploitation steps using your machine. Please replace IP's where appropriate depending on if you are attacking your local machine or another machine on your network.
2018-08-16 08:02:42 -04:00
becd42553a
Land #10462 , Add API documentation for users and auth endpoints
2018-08-15 17:10:26 -05:00
4b42e7633c
Add examples for username and password properties
2018-08-15 16:34:11 -05:00
a70c5f0c37
Replace strings with reusable constants
2018-08-15 15:26:35 -05:00
c19dc52573
Remove extraneous lines from a bad copy/paste
2018-08-15 15:03:27 -05:00
61dfd75663
Land #10457 docs for elasticsearch indices_enum
2018-08-14 20:55:15 -04:00
a620958b97
update elasticsearch doc format
2018-08-14 20:53:18 -04:00
44fd9c63e0
doc format update
2018-08-14 20:39:04 -04:00
2abc49641c
Add 401 responses for all endpoints
2018-08-14 13:35:59 -05:00
66b761db15
Add doc for user operations
2018-08-14 13:19:56 -05:00
f7a0b201d7
Add authorization support for auth/bearer tokens
2018-08-14 11:51:15 -05:00
d273eb3914
Create elasticsearch indices_enum documentation
...
Documentation on auxiliary/scanner/elasticsearch/indices_enum
Part of issue #8296
2018-08-13 22:14:03 -04:00
ddebdea8c1
Update cgit doc
2018-08-13 16:45:13 -05:00
85a137e0a0
Land #10420 , cgit < 1.2.1 Directory Traversal
2018-08-13 16:25:23 -05:00
5a3d040d71
Fix module, Add documentation
2018-08-13 15:48:21 -05:00
ce8cbd64d4
Land #10404 , Add Path Traversal Oracle GlassFish
2018-08-13 11:15:26 -05:00
66e5685ed2
Moved to exploit/windows
2018-08-09 11:35:14 -05:00
228bd4c3ab
Add weblogic_deserialize module CVE-2018-2628
2018-08-08 17:55:41 -05:00
d299831efe
updated windows udf files and documentation
2018-08-07 14:50:47 -04:00
22e3238dbc
Updating Docs
2018-08-04 19:10:08 +05:30
78f66986e9
Land #10386 , Add IEC104 client module
2018-08-04 07:43:15 -05:00
919da41aab
Land #9692 , Add DoS module for Siemens Siprotec 4
2018-08-04 07:20:57 -05:00
c6eb4994c1
Updating docs
2018-08-04 13:27:27 +05:30
1c82592882
Land #10358 , Add Dicoogle PACS Directory Traversal scanner module
2018-08-04 05:31:16 +00:00
e5dcfa62c9
remove encoding and escaping
2018-08-03 20:23:33 -04:00
0785d59146
Land #10412 , Add Cisco directory traversal auxiliary module
2018-08-02 16:44:59 -05:00
8785ec21b6
Land #9884 , add linux ufo priv esc module
2018-08-02 17:53:36 +08:00
bbe6206026
documentation for cisco dir traversal module
2018-08-01 13:04:09 -05:00
888dc43a7e
Land #10348 , Add REST API for module queries
...
This PR also updates the local module queries with more query parameters
and logic.
2018-07-31 16:06:31 -05:00
5308c5eca5
Land #10377 , update REST API JSON format
2018-07-31 16:59:05 -04:00
58b3f63c1a
Update to reflect new JSON models
2018-07-31 15:57:26 -05:00
458fb36ec8
Update API docs for GET resource/ID
2018-07-31 15:43:57 -05:00
3e8efea57a
Merge branch 'conform_to_api_standards' into exploit-query
...
Prepare for new JSON format.
2018-07-31 14:48:37 -05:00
3291931955
Merge branch 'upstream-master' into exploit-query
2018-07-31 11:51:14 -05:00
bdd2ceba2b
Documentation
2018-07-31 18:07:57 +05:30
bcfb3d099b
Land #10255 , Adding Micro Focus Secure Messaging Gateway RCE
2018-07-30 21:07:02 -05:00
7d08c71722
Update documentation about how to make it vulnerable again
2018-07-30 21:05:46 -05:00
129fd44350
Land #10305 , SonicWall XML-RPC RCE
2018-07-30 14:14:26 -05:00
51ffe7abba
Add header to doc
2018-07-30 14:07:54 -05:00
952ab801e8
Land #10060 , vTiger CRM v6.3.0 Upload RCE
2018-07-30 12:32:24 -05:00
fe9315dc89
Update module, Add documentation
2018-07-30 12:11:08 -05:00
d58785f959
Land #10247 , add WordPress Arbitrary File Deletion
2018-07-30 09:05:23 -05:00
53cca07442
bcoles suggestions
2018-07-29 10:31:01 -04:00
32384cf850
Land #10387 , Update mov_ss and add mov_ss_dll
2018-07-27 14:52:21 -05:00
3411d0bce2
Refactor error JSON responses to use a helper method
2018-07-27 13:59:17 -05:00
d343458dc5
Update documentation with build instructions
...
remove superfluous directory
2018-07-27 11:31:59 -05:00
1981c3c24b
Fix documentation
2018-07-27 11:21:06 -05:00
15fe80de06
Merge branch 'master' into conform_to_api_standards
2018-07-27 11:08:18 -05:00
eab62c18c6
Update mov_ss and add mov_ss_dll
2018-07-27 09:40:34 -05:00
7bbb44401d
added definition of IEC104
2018-07-27 15:21:00 +02:00
09320ece91
iec104 client
2018-07-27 11:46:26 +02:00
1bcf2f9b37
Land #10383 , Add WP Responsive Thumbnail Slider Plugin Exploit Module
2018-07-26 23:53:25 -05:00
72d634b10b
Update module and its documentation
2018-07-26 23:08:20 -05:00
32d6344e6b
Land #9964 , android post module to extract subscriber info
2018-07-26 16:58:27 -05:00
6accca4181
added documentation and check method
2018-07-26 15:32:37 -05:00
2572a297a2
clean up parameter delcarations in docs and rename doc files to module_search
2018-07-26 11:43:55 -05:00
b1022d16bf
Fix typo in delete response message in docs
2018-07-26 08:43:05 -05:00
ec62815d6e
Add error responses to API docs
2018-07-25 21:46:33 -05:00
cc21c0a673
Update documentation for new format
2018-07-25 18:01:05 -05:00
6c2e8f2402
Land #10300 , Add root exploit for Axis network cameras
2018-07-25 14:46:04 -05:00
f169afff6a
Add documentation and a new reference
2018-07-25 14:44:44 -05:00
bc89d7fe52
Land #10357 , CouchDB improvements and docs
2018-07-25 00:54:55 -05:00
625ea87ea9
Land #10368 , PhpMyAdmin Login Scanner Module
2018-07-24 23:25:27 -05:00
87434ef22d
pull changes
2018-07-24 15:42:31 -05:00
4f81fcdc87
retn versions in chk_setup, tests to reflect, doc
2018-07-24 14:51:00 -05:00
eccd223a3e
Merge branch 'master' into conform_to_api_standards
2018-07-24 12:11:14 -05:00
eb72edc84a
added documentation for aux module
2018-07-24 10:22:53 -05:00
dac5780feb
Land #10176 , creds data service CRUD operations
2018-07-23 23:36:32 -04:00
e3da0a6828
Merge branch 'master' into remote_creds_data
2018-07-23 16:39:13 -05:00
e1100572ac
add afp docs
2018-07-22 20:56:52 -04:00
83ae5cb14d
fix backup_file.rb and add a few docs
2018-07-22 20:50:22 -04:00
03e8f45634
add more version info for docs
2018-07-21 21:39:19 -04:00
2a969d70db
dicoogle
2018-07-21 21:31:45 -04:00
f1e1407901
add musl-cross info
2018-07-21 14:22:27 -04:00
17b94f7cf3
add smap disabling instructions
2018-07-21 14:20:24 -04:00
85c2e5298f
patch up docs
2018-07-21 14:06:57 -04:00
4a9e6fac66
patch up docs
2018-07-21 14:00:29 -04:00
abfed97e03
remove EOL spaces
2018-07-21 11:21:11 -04:00
357f221b93
update doc
2018-07-21 11:09:16 -04:00
8b324c19d8
update couchdb scanner
2018-07-21 11:02:50 -04:00
65d42380d3
Merge branch 'master' into remote_creds_data
2018-07-19 16:25:06 -05:00
04a6cf8f0a
pull latest changes and re-register module servlet in new sinatra base
2018-07-19 14:42:39 -05:00
ce7eb9f3fe
add list of valid fields to documenation and update aliases
2018-07-19 14:31:46 -05:00
462655dea1
update response example documentation
2018-07-19 14:10:04 -05:00
4c71268b38
add documentation for aliases
2018-07-19 13:38:18 -05:00
e3716305dc
add new fields to swagger doc
2018-07-19 13:31:41 -05:00
19239c72c0
Update cmsms_upload_rename_rce check and docs
2018-07-19 18:26:42 +00:00
28e3f3a5f0
Land #10327 , Add CMS Made Simple Upload/Rename Authenticated RCE
2018-07-19 12:18:12 -05:00
59962c5273
Merge branch 'master' into conform_to_api_standards
2018-07-19 09:26:17 -05:00
8010c58220
add module documentation to swagger (WIP)
2018-07-18 17:36:31 -05:00
4d2e0e51e4
Update docs for /endpoit/ID GET requests
2018-07-18 16:01:12 -05:00
70a1df70a1
Land #9753 , Linux BPF sign extension local privesc
2018-07-18 18:44:14 +08:00
1e004769ca
CMS Made Simple Upload/Rename Authenticated RCE
2018-07-17 09:00:39 -05:00
01e6362828
Fix documentation wording
2018-07-17 13:01:49 +02:00
6bf184dbcf
Update tested versions
2018-07-17 06:24:16 +00:00
9a7c34e6e9
Land #10064 , Claymore Dual Miner API RCE
2018-07-16 18:02:20 -05:00
bfd521f2cb
Small note about network not available
2018-07-16 11:56:55 +02:00
aa58634b24
Document rc.local
2018-07-16 09:34:20 +02:00
6e450973b9
Land #10295 , Add QNAP Q'Center change_passwd Command Execution exploit
2018-07-14 10:09:46 -05:00
9bdec97b2e
Fix bpf_sign_extension_priv_esc
2018-07-13 23:01:17 +00:00
b40a146723
Land #10297 , Add priv escalation mod for CVE-2018-8897
2018-07-13 10:54:25 -05:00
d7a0d7ecf3
Add some documentation for mov_ss.md
2018-07-13 01:17:28 -05:00
1ad571f136
Fix password typo
2018-07-13 16:02:15 +10:00
392cf3bbe1
Are hosts?
2018-07-13 15:00:31 +10:00
a020d48caf
Move module documentation to documentation directory
2018-07-13 04:46:25 +00:00
358347358f
Add documentation
2018-07-13 04:18:56 +00:00
ed163c11a0
Land #10296 , a few aux module docs
2018-07-12 22:20:25 -05:00
c9001699cd
Land #10027 , Hadoop unauthed command execution
2018-07-12 21:58:49 -05:00
50252c75d6
Clean up module
...
With a little rubocop -a.
2018-07-12 21:58:00 -05:00
6751d48564
A few aux module docs
2018-07-12 17:50:47 -04:00
acb20e5a29
Land #9780 , CouchDB auth bypass and RCE
2018-07-12 03:36:17 -05:00
h00die
William Vu
Shelby Pace
Jacob Robles
Hubert Lin
Brendan Coles
Dhiraj Mishra
Brent Cook
Kevin Gonzalvo
Oliver Morton
Wei Chen
Shaksham Jaiswal
Erin Bleiweiss
root
asoto-r7
7echSec
bwatters-r7
Matthew Kienow
Mumbai
Tim W
Arpit Agrawal
Eliott Teissonniere
Kevin Kirsche
James Barnett
Kevin Kirsche
michaelj0hn