Shelby Pace
4018d47b65
changed if not to unless
2019-04-09 13:43:54 -05:00
RatioSec Research
b56e171172
Fix extraction of session tokens
2019-04-09 09:28:52 +01:00
RatioSec Research
80ca30dc49
Apply fix requests on documentation
2019-03-30 10:19:55 +00:00
RatioSec Research
f73e9347b9
Fix documentation for Horde For File Upload
2019-03-29 16:23:53 +00:00
RatioSec Research
8aa2c45cb5
Add documentation for Horde For File Upload
2019-03-29 16:20:59 +00:00
RatioSec Research
5c84e9e61a
Remove web root guessing since not reliable
2019-03-29 16:16:06 +00:00
RatioSec Research
f8c5852902
Add Horde Form File Upload
2019-03-29 12:31:14 +00:00
Metasploit
6060c7ac06
automatic module_metadata_base.json update
2019-03-28 16:01:53 -07:00
Brent Cook
0a24266029
Land #11482 , RV320 Unauthenticated RCE
2019-03-28 17:53:05 -05:00
Metasploit
51e204af70
Bump version of framework to 5.0.15
2019-03-28 10:08:24 -07:00
Metasploit
845805f15e
automatic module_metadata_base.json update
2019-03-28 07:16:26 -07:00
h00die
1e6850fa53
land #11623 oracle 12 support for hashdumper
2019-03-28 10:07:54 -04:00
h00die
2a311931d3
oracle hashdump cleanup
2019-03-28 10:06:56 -04:00
7043mcgeep
f2a19d5e32
Final revisions
2019-03-27 21:53:52 -05:00
Brent Cook
dbbf1ea5cb
Land #11644 , Add check for active database to relevant Msf::Payload::UUID::Options methods
2019-03-27 15:52:20 -05:00
Metasploit
9d5163ca1a
automatic module_metadata_base.json update
2019-03-27 13:29:27 -07:00
Wei Chen
927d20cb95
Land #11592 , Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
2019-03-27 15:21:07 -05:00
Wei Chen
38bdccb91a
Use instance variables instead of datastore options
2019-03-27 15:17:32 -05:00
fabiocogno
fdb1f4adea
Update cmsms_showtime2_rce.rb
...
Fix to CSRF Token stealing function for older versions of CMSMS
2019-03-27 20:09:14 +01:00
Matthew Kienow
337e061a77
Skip operation if there is no active database
2019-03-27 13:03:37 -04:00
Metasploit
1981e9be0c
automatic module_metadata_base.json update
2019-03-26 16:52:37 -07:00
Jeffrey Martin
6a0a7c996a
Land #11637 , Fix a git snafu when landing
2019-03-26 18:42:42 -05:00
asoto-r7
399532154d
Fix a git snafu when landing #11131
...
While landing PR #11131 , I tripped over my own shoelaces and overwrote `weblogic_deserialize_rawobject.rb` with `weblogic_deserialize_unicastref.rb`, destroying my changes and introducing a great deal of confusion.
This PR gets us back to where we should have been, with #11131 landed and a few changes to add randomization and expanding on the T3 protocol.
2019-03-26 17:54:37 -05:00
Metasploit
e859608b3d
automatic module_metadata_base.json update
2019-03-26 15:18:44 -07:00
asoto-r7
385cfd679a
Land #11131 , Weblogic_serialize_rawobject CVE-2015-4852
2019-03-26 17:07:04 -05:00
asoto-r7
26b67bbf91
Fix two-byte error, add randomization, T3 notes from @acamro
2019-03-26 16:45:17 -05:00
asoto-r7
5f5d475c2e
Add expected traceback error to documentation
2019-03-26 16:44:45 -05:00
asoto-r7
f9361324bd
Merge branch 'weblogic_serialize_rawobject' of git://github.com/acamro/metasploit-framework into acamro-weblogic_serialize_rawobject
2019-03-26 16:38:27 -05:00
Metasploit
79d22ef0d7
automatic module_metadata_base.json update
2019-03-26 11:20:46 -07:00
Brent Cook
b2d047b0b1
Land #11622 , merge common hash identifier code between modules
2019-03-26 13:12:00 -05:00
Metasploit
506105bcf5
automatic module_metadata_base.json update
2019-03-26 11:07:28 -07:00
Brent Cook
b204c9999e
Land #11628 , Outlook credentials post module update
2019-03-26 12:57:52 -05:00
Brent Cook
8314e456b8
Land #11634 , Add defensive check to Msf::Payload::UUID::Options#record_payload_uuid_url
2019-03-26 12:32:44 -05:00
Brent Cook
d5e777aabf
Land #11572 , bump to Ruby 2.6.2
2019-03-26 12:12:57 -05:00
Matthew Kienow
cf42f47e5b
Check that payload was returned before processing
2019-03-26 11:41:27 -04:00
Jeffrey Martin
582f86b75c
Land #11603 , Fail nicely when load aggregator.
2019-03-25 23:20:49 -05:00
7043mcgeep
f62e9c2e49
Updated doc
2019-03-25 22:42:19 -05:00
Brent Cook
d168895311
Land #11631 , payloads db fixes
2019-03-25 19:16:11 -05:00
Matthew Kienow
dc3be3378d
Process workspace for use in the create operation
2019-03-25 19:41:51 -04:00
Matthew Kienow
1b86c41dcc
Add add_opts_workspace call to query and create
2019-03-25 19:39:25 -04:00
Matthew Kienow
6278563f25
Remove unused code
2019-03-25 19:38:28 -04:00
Matthew Kienow
6709780817
Add entry to autoload PayloadDataProxy
2019-03-25 13:43:16 -04:00
Matthew Kienow
98401072e5
Remove duplicate autoload for WebDataProxy
2019-03-25 13:38:32 -04:00
7043mcgeep
a8ccc7eb25
Remove tabbed indents
2019-03-25 11:13:28 -05:00
7043mcgeep
b91231021a
Hashdump adheres to better coding style. Add docs
2019-03-25 02:36:34 -05:00
rwincey
9d71020d9c
Removed credit
2019-03-24 19:11:22 -04:00
rwincey
8a36a0f410
Added support for later versions of Outlook, rubocop complaints
2019-03-24 18:39:55 -04:00
rwincey
7f2e6866d4
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2019-03-24 11:13:41 -04:00
h00die
656ea5240d
remove space at EOL
2019-03-24 08:11:24 -04:00
7043mcgeep
170d28d46b
12c hashdump supported
2019-03-23 13:37:19 -05:00