Brent Cook
|
88cef32ea4
|
Land #7339, SSH module fixes from net:ssh updates
|
2016-09-22 00:27:32 -05:00 |
Brendan
|
04f8f7a0ea
|
Land #7266, Add Kaltura Remote PHP Code Execution
|
2016-09-21 17:14:49 -05:00 |
Mehmet Ince
|
2d3c167b78
|
Grammar changes again.
|
2016-09-20 23:51:12 +03:00 |
|
Mehmet Ince
|
0f16393220
|
Yet another grammar changes
|
2016-09-20 19:48:40 +03:00 |
|
Mehmet Ince
|
fb00d1c556
|
Another minor grammer changes
|
2016-09-20 19:23:28 +03:00 |
|
Brendan
|
251421e4a7
|
Minor grammar changes
|
2016-09-20 10:37:39 -05:00 |
|
Mehmet Ince
|
385428684f
|
Move module and docs under the exploit/linux/http folder
|
2016-09-20 12:45:23 +03:00 |
David Maloney
|
e315ec4e73
|
Merge branch 'master' into bug/7321/fix-ssh-modules
|
2016-09-19 15:27:37 -05:00 |
Thao Doan
|
d2100bfc4e
|
Land #7301, Support URIHOST for exim4_dovecot_exec for NAT
|
2016-09-16 12:49:57 -07:00 |
|
Thao Doan
|
7c396dbf59
|
Use URIHOST
|
2016-09-16 12:48:54 -07:00 |
William Vu
|
4d0643f4d1
|
Add missing DefaultTarget to Docker exploit
|
2016-09-16 13:09:00 -05:00 |
|
William Vu
|
da516cb939
|
Land #7027, Docker privesc exploit
|
2016-09-16 12:44:21 -05:00 |
|
William Vu
|
e3060194c6
|
Fix formatting in ubiquiti_airos_file_upload
Also add :config and :use_agent options.
|
2016-09-16 12:27:09 -05:00 |
|
David Maloney
|
dfcd5742c1
|
some more minor fixes
some more minor fixes around broken
ssh modules
7321
|
2016-09-15 14:25:17 -05:00 |
|
David Maloney
|
e10c133eef
|
fix the exagrid exploit module
split the exagrid exploit module up and
refactor to be able to easily tell if the
key or the password was used
7321
|
2016-09-15 11:44:19 -05:00 |
|
William Vu
|
c6214d9c5e
|
Fix and clean module
|
2016-09-14 14:36:29 -05:00 |
|
Brent Cook
|
7352029497
|
first round of SSL damage fixes
|
2016-09-13 17:42:31 -05:00 |
aushack
|
11342356f8
|
Support LHOST for metasploit behind NAT
|
2016-09-13 11:23:49 +10:00 |
|
William Vu
|
fed2ed444f
|
Remove deprecated modules
psexec_psh is undeprecated because users have been reporting
idiosyncrasies between it and psexec in the field.
|
2016-09-03 12:43:01 -05:00 |
Pearce Barry
|
226ded8d7e
|
Land #6921, Support basic and form auth at the same time
|
2016-08-25 16:31:26 -05:00 |
|
William Vu
|
2b6576b038
|
Land #7012, Linux service persistence module
|
2016-08-17 22:45:35 -05:00 |
|
William Vu
|
c64d91457f
|
Land #7003, cron/crontab persistence module
|
2016-08-17 22:45:16 -05:00 |
wchen-r7
|
c64e1b8fe6
|
Land #7181, NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance
|
2016-08-08 16:04:33 -05:00 |
|
wchen-r7
|
cb04ff48bc
|
Land #7180, Add exploit for CVE 2016-5674 / Nuuo / Netgear unauth RCE
|
2016-08-08 15:55:39 -05:00 |
|
wchen-r7
|
8654baf3dd
|
Land #6880, add a module for netcore/netdis udp 53413 backdoor
|
2016-08-08 15:43:34 -05:00 |
|
wchen-r7
|
f98efb1345
|
Fix typos
|
2016-08-08 15:41:03 -05:00 |
Pedro Ribeiro
|
3b64b891a6
|
Update nuuo_nvrmini_unauth_rce.rb
|
2016-08-05 21:53:25 +01:00 |
|
Pedro Ribeiro
|
746ba4d76c
|
Add bugtraq reference
|
2016-08-05 21:53:08 +01:00 |
|
Pedro Ribeiro
|
2aca610095
|
Add github link
|
2016-08-04 17:38:31 +01:00 |
|
Pedro Ribeiro
|
7d8dc9bc82
|
Update nuuo_nvrmini_unauth_rce.rb
|
2016-08-04 17:38:14 +01:00 |
|
Pedro Ribeiro
|
b48518099c
|
add exploit for CVE 2016-5674
|
2016-08-04 16:55:21 +01:00 |
|
Pedro Ribeiro
|
0deac80d61
|
add exploit for CVE 2016-5675
|
2016-08-04 16:54:38 +01:00 |
|
wchen-r7
|
1e1866f583
|
Fix #7158, tiki_calendar_exec incorrectly reports successful login
Fix #7158
|
2016-07-28 17:03:31 -05:00 |
Vex Woo
|
864989cf6c
|
For echo command
|
2016-07-26 20:27:23 -05:00 |
|
Brendan
|
4720d77c3a
|
Land #6965, centreon useralias exec
|
2016-07-26 15:02:36 -07:00 |
James Lee
|
b057a9486c
|
Don't use ssh agent
|
2016-07-19 17:07:22 -05:00 |
|
James Lee
|
ff63e6e05a
|
Land #7018, unvendor net-ssh
|
2016-07-19 17:06:35 -05:00 |
forzoni
|
6f35a04e21
|
Incorporate review fixes, ensure PrependFork is true, fix echo compat.
|
2016-07-19 01:45:56 -05:00 |
|
Brent Cook
|
b08d1ad8d8
|
Revert "Land #6812, remove broken OSVDB references"
This reverts commit 2b016e0216, reversing
changes made to 7b1d9596c7.
|
2016-07-15 12:00:31 -05:00 |
h00die
|
03dca5fee2
|
updates round 2
|
2016-07-15 09:02:23 -04:00 |
|
h00die
|
33ce3ec3ed
|
fixes round 2
|
2016-07-15 08:44:39 -04:00 |
|
David Maloney
|
b6b52952f4
|
set ssh to non-interactive
have to set the non-interactive flag so that it does not
prompt the user on an incorrect password
MS-1688
|
2016-07-14 11:12:03 -05:00 |
|
David Maloney
|
01d0d1702b
|
Merge branch 'master' into feature/MS-1688/net-ssh-cleanup
|
2016-07-14 09:48:28 -05:00 |
|
Brent Cook
|
2b016e0216
|
Land #6812, remove broken OSVDB references
|
2016-07-11 22:59:11 -05:00 |
William Webb
|
52c6daa0f2
|
Land #7048, Riverbed SteelCentral NetProfiler and NetExpress Remote
Command Injection
|
2016-07-10 18:54:12 -05:00 |
Francesco
|
b75084249a
|
Removed duplicate 'Privileged' key
|
2016-07-10 01:37:03 -04:00 |
sho-luv
|
25f49c0091
|
Fixed Description
Just cleaned up Description.
|
2016-07-08 16:17:39 -07:00 |
|
David Maloney
|
5f9f3259f8
|
Merge branch 'master' into feature/MS-1688/net-ssh-cleanup
|
2016-07-05 10:48:38 -05:00 |
|
Francesco
|
4ed12d7077
|
Added: support for credentials saving using report_cred method as suggested
Added: support for detection of valid user credentials to skip login SQLi if not necessary.
|
2016-07-02 01:41:13 -04:00 |
|
William Vu
|
9663f88fdc
|
Download profile.zip instead of including it
profile.zip is GPL-licensed...
|
2016-07-01 01:17:23 -05:00 |