Commit Graph

44894 Commits (42dbab763b1fbef87111eed3028df2b6306c86a7)

Author SHA1 Message Date
zerosum0x0 42dbab763b increased leak attempts 2018-01-28 23:27:19 -07:00
zerosum0x0 7b19951317 fix the danger zone 2018-01-28 22:32:00 -07:00
zerosum0x0 9df4075d96 win10 needs full path to IPC$, should fix in Rex too 2018-01-28 21:15:13 -07:00
zerosum0x0 7cc00c0e10 fixed padding/offsets for win 10 2018-01-28 21:10:51 -07:00
zerosum0x0 237c3f7b2c crash 10.14393... should fail to leak transaction 2018-01-28 18:52:43 -07:00
zerosum0x0 2723b328aa misc tidying, added more randomness 2018-01-28 18:20:18 -07:00
zerosum0x0 6c2d5b1fc2 semi-completed exploit files 2018-01-28 18:13:25 -07:00
zerosum0x0 c8ff2adf06 added support for smb client 2018-01-27 20:49:17 -07:00
Aaron Soto c390696ddf
Land #9379, Oracle Weblogic RCE exploit and documentation 2018-01-25 21:47:18 -06:00
William Vu 309deb9ee7
Land #9446, Post API fix for setuid_nmap 2018-01-25 16:00:40 -06:00
Jeffrey Martin dee1ef0185
Land #9462, add missing payload tests 2018-01-25 12:34:36 -06:00
Jeffrey Martin 159de817f7
add missing payload tests 2018-01-25 11:09:41 -06:00
Kevin Kirsche 7b01785347
Add documentation to pull request
Added credit to @asoto-r7 for the documentation
2018-01-24 14:36:16 -05:00
bwatters-r7 fd4d5756bf
Land #9335, Added socket bind port option for reverse tcp payload.
Merge branch 'land-9335' into upstream-master
2018-01-24 11:50:10 -06:00
Matthew Kienow 6caba521d3
Land #9424, Add SharknAT&To external scanner 2018-01-24 12:40:29 -05:00
Brent Cook a947f89960
add missing gemfile.lock update 2018-01-24 07:18:47 -06:00
Pearce Barry eb572a3ef5
Land #8632, colorado ftp fixes 2018-01-23 17:45:07 -06:00
bwatters-r7 a27cfeaea9
Land #9416, Sync Breeze Enterprise 9.5.16 Import Command buffer overflow
Merge branch 'land-9416' into upstream-master
2018-01-23 16:35:51 -06:00
bwatters-r7 3922844650
ninja style changes 2018-01-23 16:34:49 -06:00
Adam Cammack d81d50b491
Land #9430, Improve Hyper-V checkvm checks 2018-01-23 15:22:12 -06:00
bwatters-r7 fdefa4b244
Land #9449, bump metasploit-payloads from 1.3.25 to 1.3.27
rapid7/metasploit-payloads#264
rapid7/metasploit-payloads#263

Merge branch 'land-9449' into upstream-master
2018-01-23 13:41:28 -06:00
bwatters-r7 8eb6df41e3
Land #9205, Documentation for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9205' into upstream-master
2018-01-23 12:45:59 -06:00
bwatters-r7 04806bc84a
Updates to documentation per h00die 2018-01-23 12:44:39 -06:00
bwatters-r7 685a950077
Land #9114, Add module for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9114' into upstream-master
2018-01-23 12:35:59 -06:00
Adam Cammack d08510596f
Keep reading external messages on stderr eof 2018-01-23 10:46:06 -06:00
William Vu 5684b9ed7c Readd dropped return during refactoring 2018-01-23 10:12:15 -06:00
Brent Cook 17bf0dcdfb
Land #9452, expose linux/osx meterpreter process hiding 2018-01-23 10:07:58 -06:00
Brent Cook df633247bb expose linux/osx process rename functionality 2018-01-23 09:56:12 -06:00
Adam Cammack be08af5404
More Python style fixes 2018-01-23 09:17:22 -06:00
bwatters-r7 d62d61667d
bump metasploit-payloads 2018-01-23 07:26:08 -06:00
William Vu d3b3946669 Use Msf::Post::File#setuid? in setuid_nmap 2018-01-23 02:05:26 -06:00
William Vu 18b8fc2e0e Add Msf::Post::File#setuid? 2018-01-23 02:05:26 -06:00
Brent Cook 03d1523d43
Land #6611, add native DNS to Rex, MSF mixin, sample modules 2018-01-22 23:54:32 -06:00
Brent Cook afaf832034 remove verbose error from library, bubble consistent exceptions to the module instead 2018-01-22 23:52:20 -06:00
Brent Cook a6e5944ec5 fix msftidy, add nicer errors on bind failure 2018-01-22 23:37:39 -06:00
Brent Cook 84b463f785 dnsruby is already a dependency 2018-01-22 23:37:15 -06:00
Brent Cook aae77fc1a4
Land #9349, GoAhead LD_PRELOAD CGI Module 2018-01-22 23:10:36 -06:00
Adam Cammack 670055da4b
Prevent leaked sockets in edge cases 2018-01-22 22:14:16 -06:00
Adam Cammack c76fa2c58f
Vendor async_timeout 2018-01-22 22:12:28 -06:00
Adam Cammack 964810146a
Python library style fixes 2018-01-22 22:10:32 -06:00
Brent Cook 9a35c324c0
Land #9352, Pull out HTTP-specific code from PacketDispatcher 2018-01-22 16:52:24 -06:00
Brent Cook d1569f8280
Land #9413, Expand the number of class names searched when checking for an exploitable JMX server 2018-01-22 16:49:01 -06:00
Brent Cook 10fde42adc
Land #9431, Fix owa_login to handle inserting credentials for a hostname 2018-01-22 16:46:39 -06:00
Brent Cook b12953fa85
Land #9404, update module author 2018-01-22 16:41:50 -06:00
Brent Cook c35eb0de31
Land #9398, allow UTF-8 module names and authors 2018-01-22 16:41:30 -06:00
Brent Cook 6aebc1fdbd remove more checks 2018-01-22 16:40:30 -06:00
Wei Chen 65781efa9e
Land #9442, Remove NoMethod Rescue for cerberus_sftp_enumusers
Land #9442
2018-01-22 13:39:16 -06:00
William Vu 27a007fb57
Land #9432, cmd_edit improvements (again!)
We seem to enjoy refactoring this method.
2018-01-22 12:38:08 -06:00
William Vu a255586750 Refactor to use guard clauses 2018-01-22 12:38:02 -06:00
Wei Chen 394c31c1e3 Remove NoMethod Rescue for cerberus_sftp_enumusers
Please see reasons in #9436
2018-01-22 11:10:23 -06:00