Commit Graph

51232 Commits (4018d47b65624dc2b9f15a7fccc863b47986f996)

Author SHA1 Message Date
Shelby Pace 4018d47b65
changed if not to unless 2019-04-09 13:43:54 -05:00
RatioSec Research b56e171172 Fix extraction of session tokens 2019-04-09 09:28:52 +01:00
RatioSec Research 80ca30dc49 Apply fix requests on documentation 2019-03-30 10:19:55 +00:00
RatioSec Research f73e9347b9 Fix documentation for Horde For File Upload 2019-03-29 16:23:53 +00:00
RatioSec Research 8aa2c45cb5 Add documentation for Horde For File Upload 2019-03-29 16:20:59 +00:00
RatioSec Research 5c84e9e61a Remove web root guessing since not reliable 2019-03-29 16:16:06 +00:00
RatioSec Research f8c5852902 Add Horde Form File Upload 2019-03-29 12:31:14 +00:00
Metasploit 6060c7ac06
automatic module_metadata_base.json update 2019-03-28 16:01:53 -07:00
Brent Cook 0a24266029
Land #11482, RV320 Unauthenticated RCE 2019-03-28 17:53:05 -05:00
Metasploit 51e204af70
Bump version of framework to 5.0.15 2019-03-28 10:08:24 -07:00
Metasploit 845805f15e
automatic module_metadata_base.json update 2019-03-28 07:16:26 -07:00
h00die 1e6850fa53
land #11623 oracle 12 support for hashdumper 2019-03-28 10:07:54 -04:00
h00die 2a311931d3 oracle hashdump cleanup 2019-03-28 10:06:56 -04:00
7043mcgeep f2a19d5e32
Final revisions 2019-03-27 21:53:52 -05:00
Brent Cook dbbf1ea5cb
Land #11644, Add check for active database to relevant Msf::Payload::UUID::Options methods 2019-03-27 15:52:20 -05:00
Metasploit 9d5163ca1a
automatic module_metadata_base.json update 2019-03-27 13:29:27 -07:00
Wei Chen 927d20cb95
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE 2019-03-27 15:21:07 -05:00
Wei Chen 38bdccb91a Use instance variables instead of datastore options 2019-03-27 15:17:32 -05:00
fabiocogno fdb1f4adea
Update cmsms_showtime2_rce.rb
Fix to CSRF Token stealing function for older versions of CMSMS
2019-03-27 20:09:14 +01:00
Matthew Kienow 337e061a77
Skip operation if there is no active database 2019-03-27 13:03:37 -04:00
Metasploit 1981e9be0c
automatic module_metadata_base.json update 2019-03-26 16:52:37 -07:00
Jeffrey Martin 6a0a7c996a Land #11637, Fix a git snafu when landing 2019-03-26 18:42:42 -05:00
asoto-r7 399532154d
Fix a git snafu when landing #11131
While landing PR #11131, I tripped over my own shoelaces and overwrote `weblogic_deserialize_rawobject.rb` with `weblogic_deserialize_unicastref.rb`, destroying my changes and introducing a great deal of confusion.

This PR gets us back to where we should have been, with #11131 landed and a few changes to add randomization and expanding on the T3 protocol.
2019-03-26 17:54:37 -05:00
Metasploit e859608b3d
automatic module_metadata_base.json update 2019-03-26 15:18:44 -07:00
asoto-r7 385cfd679a
Land #11131, Weblogic_serialize_rawobject CVE-2015-4852 2019-03-26 17:07:04 -05:00
asoto-r7 26b67bbf91
Fix two-byte error, add randomization, T3 notes from @acamro 2019-03-26 16:45:17 -05:00
asoto-r7 5f5d475c2e
Add expected traceback error to documentation 2019-03-26 16:44:45 -05:00
asoto-r7 f9361324bd
Merge branch 'weblogic_serialize_rawobject' of git://github.com/acamro/metasploit-framework into acamro-weblogic_serialize_rawobject 2019-03-26 16:38:27 -05:00
Metasploit 79d22ef0d7
automatic module_metadata_base.json update 2019-03-26 11:20:46 -07:00
Brent Cook b2d047b0b1
Land #11622, merge common hash identifier code between modules 2019-03-26 13:12:00 -05:00
Metasploit 506105bcf5
automatic module_metadata_base.json update 2019-03-26 11:07:28 -07:00
Brent Cook b204c9999e
Land #11628, Outlook credentials post module update 2019-03-26 12:57:52 -05:00
Brent Cook 8314e456b8
Land #11634, Add defensive check to Msf::Payload::UUID::Options#record_payload_uuid_url 2019-03-26 12:32:44 -05:00
Brent Cook d5e777aabf
Land #11572, bump to Ruby 2.6.2 2019-03-26 12:12:57 -05:00
Matthew Kienow cf42f47e5b
Check that payload was returned before processing 2019-03-26 11:41:27 -04:00
Jeffrey Martin 582f86b75c
Land #11603, Fail nicely when load aggregator. 2019-03-25 23:20:49 -05:00
7043mcgeep f62e9c2e49
Updated doc 2019-03-25 22:42:19 -05:00
Brent Cook d168895311
Land #11631, payloads db fixes 2019-03-25 19:16:11 -05:00
Matthew Kienow dc3be3378d
Process workspace for use in the create operation 2019-03-25 19:41:51 -04:00
Matthew Kienow 1b86c41dcc
Add add_opts_workspace call to query and create 2019-03-25 19:39:25 -04:00
Matthew Kienow 6278563f25
Remove unused code 2019-03-25 19:38:28 -04:00
Matthew Kienow 6709780817
Add entry to autoload PayloadDataProxy 2019-03-25 13:43:16 -04:00
Matthew Kienow 98401072e5
Remove duplicate autoload for WebDataProxy 2019-03-25 13:38:32 -04:00
7043mcgeep a8ccc7eb25
Remove tabbed indents 2019-03-25 11:13:28 -05:00
7043mcgeep b91231021a
Hashdump adheres to better coding style. Add docs 2019-03-25 02:36:34 -05:00
rwincey 9d71020d9c Removed credit 2019-03-24 19:11:22 -04:00
rwincey 8a36a0f410 Added support for later versions of Outlook, rubocop complaints 2019-03-24 18:39:55 -04:00
rwincey 7f2e6866d4 Merge branch 'master' of https://github.com/rapid7/metasploit-framework 2019-03-24 11:13:41 -04:00
h00die 656ea5240d remove space at EOL 2019-03-24 08:11:24 -04:00
7043mcgeep 170d28d46b
12c hashdump supported 2019-03-23 13:37:19 -05:00