3b5db26ff5
Fix #6872 , change upload action for CVE-2016-0854 exploit
...
This patch includes the following changes:
* Instead of the uploadFile action, this patch uses uploadImageCommon
to be able to support both Advantech WebAccess builds: 2014 and
2015.
* It uses an explicit check instead of the passive version check.
* It cleans up the malicious file after getting a session.
* Added module documentation to explain the differences between
different builds of Advantech WebAccess 8.0s, and 8.1.
Fix #6872
2016-05-13 19:47:18 -05:00
2d5cf6cfe4
Authorized FTP JCL exploit for z/OS
...
This exploit module allows a user with credentials to execute JCL on a
vulnerable mainframe system running z/OS and an appropriately configured
FTP server.
2016-05-12 14:46:31 -05:00
756673fcd7
Fix another typo
2016-05-12 00:13:53 -05:00
9d128cfd9f
Add Dell SonicWALL Scrutinizer 11.0.1 MethodDetail SQL Injection
2016-05-11 22:27:18 -05:00
08416c600f
Grammatical and style fixes for priv_migrate
2016-05-04 11:14:29 -07:00
d617ca59f3
Land #6844 , Add documentation for struts_dmi_exec
2016-05-02 14:31:34 -07:00
027855def4
Add module documentation for struts_dmi_exec
2016-05-02 15:43:34 -05:00
3aca699d09
Add priv_migrate.md
2016-04-30 19:02:45 -05:00
2f66442f1d
Fix #5191 , bad LHOST format causes shell_to_meterpreter to backtrace
...
When using shell_to_meterpreter via a pivot, the LHOST input's format
might be invalid. This is kind of a design limitation, so first we
check the input, and there is a module doc to go with it to explain
a workaround.
Fix #5191
2016-04-28 23:03:54 -05:00
ffdd3b1c92
Finish up autoroute.md
2016-04-17 18:23:30 -05:00
fb7194c125
Work on autoroute.md
2016-04-17 00:04:42 -05:00
880697d00a
Add documentation for make_csv_orgchart
2016-04-07 17:17:57 -05:00
c072028f0e
Add documentation for post/windows/gather/ad_to_sqlite
2016-04-07 16:43:55 -05:00
76c6f8c19d
Move module_doc_template
2016-03-24 17:07:19 -05:00
925cc3b56f
Adding docs for Lester https://issues.corp.rapid7.com/browse/MS-1193
2016-03-24 16:51:02 -05:00
0852973b18
Minor edits for the following:
...
https://issues.corp.rapid7.com/browse/MS-1197
https://issues.corp.rapid7.com/browse/MS-1198
https://issues.corp.rapid7.com/browse/MS-1199
https://issues.corp.rapid7.com/browse/MS-1200
https://issues.corp.rapid7.com/browse/MS-1201
2016-03-24 12:13:03 -05:00
7e5fced46b
MS-1196 Minor edits to the kb for the web_delivery module
2016-03-22 12:26:55 -05:00
4c42a74d48
MS-1195 minor grammatical edits to psexec kb
2016-03-21 14:18:16 -05:00
12b456e452
Add module documentation for android/meterpreter/reverse_tcp
2016-03-08 16:55:04 -06:00
f831d58c1c
Support tables
2016-03-08 12:19:27 -06:00
698f425821
Auto <hr>
2016-03-08 11:25:15 -06:00
ee63464b8c
Update doc
2016-03-07 15:41:54 -06:00
26b64a0702
Add correct doc for tomcat_mgr_login
2016-03-07 15:41:03 -06:00
d859194e4e
Update doc
2016-03-07 12:29:32 -06:00
1bfbbe918c
Add documentation for post/windows/gather/hashdump
2016-03-07 12:17:21 -06:00
03eb568af7
Add --- to make sections to stand out more
2016-03-05 15:17:19 -06:00
b82b1b0a47
Update windows/meterpreter/reverse_tcp doc
2016-03-05 15:14:05 -06:00
1b39d5f593
Add work in progress: windows/meterpreter/reverse_tcp.md
2016-03-05 00:43:08 -06:00
f4866fd5f0
Update template and web_delivery doc
2016-03-03 01:27:14 -06:00
11964c5c1a
Add remote exploit demo and web_delivery doc
2016-03-02 19:52:11 -06:00
eede7c9193
Link to WbemExec writeup
2016-03-02 11:05:33 -06:00
e615e1072e
Update information about SMBv1
2016-03-02 10:51:45 -06:00
c8e1396cb4
Add documentation for smb_login
2016-03-01 22:03:16 -06:00
d4c433e29f
Update psexec.md
2016-03-01 19:29:25 -06:00
876a5b55f9
Update psexec.md
2016-03-01 19:06:40 -06:00
f27d24fd60
Add module documentation for psexec
2016-03-01 18:52:47 -06:00
99d593e9a0
missing an of
2016-03-01 15:11:29 -06:00
552f2a148b
Add documentation for ms08_067_netapi
2016-03-01 15:09:30 -06:00
fd8e3e719d
real demo
2016-02-26 14:43:53 -06:00
250ce6fb17
lets be clear
2016-02-26 14:30:12 -06:00
4c58b67e37
Update browser_autopwn2.md
2016-02-24 19:09:35 -06:00
3125c99e45
Remove this fake doc
2016-02-24 15:17:18 -06:00
3f3b76bc86
Add example md for BAP2
2016-02-18 15:39:38 -06:00
509a1e8de1
Add manual for demo purposes
2016-02-16 23:18:29 -06:00
wchen-r7
Bigendian Smalls
thao doan
Josh Hale