William Vu
|
9ed28408e1
|
Favor check_host for a scanner
|
2014-09-25 07:06:12 -05:00 |
|
William Vu
|
62b74aeaed
|
Reimplement old check code I was testing before
I would like to credit @wchen-r7 for providing advice and feedback.
@jvazquez-r7, too! :)
|
2014-09-25 06:38:25 -05:00 |
Joe Vennix
|
979d046bbf
|
Land #3885, @mubix's improvements to vmware root.
This prevents the need to kill any processes before getting root
privs, which is a good timesaver.
|
2014-09-25 01:38:57 -05:00 |
|
William Vu
|
d9120cd586
|
Fix typo in description
Running on fumes here...
|
2014-09-25 01:22:08 -05:00 |
|
William Vu
|
790df96396
|
Fix missed var
|
2014-09-25 01:19:14 -05:00 |
Rob Fuller
|
f13289ab65
|
remove debugging
|
2014-09-25 02:16:19 -04:00 |
|
William Vu
|
e051cf020d
|
Add missed mixin
|
2014-09-25 01:14:58 -05:00 |
|
William Vu
|
27b8580f8d
|
Add protip to description
This gets you lots of shells.
|
2014-09-25 01:10:22 -05:00 |
|
Rob Fuller
|
8cb4ed4cb7
|
re-add quotes -oops
|
2014-09-25 02:09:12 -04:00 |
|
William Vu
|
b1e9b3664e
|
Improve false positive check
|
2014-09-25 01:01:11 -05:00 |
|
Rob Fuller
|
6fb587ef96
|
update to use vmware-vmx-stats
|
2014-09-25 01:55:04 -04:00 |
|
William Vu
|
8daf8d4339
|
Report vuln for apache_mod_cgi_bash_env
Now with fewer false positives! It's kinda like a check method.
|
2014-09-25 00:42:14 -05:00 |
jvazquez-r7
|
37753e656e
|
Land #3882, @jvennix-r7's vmware/bash privilege escalation module
|
2014-09-25 00:42:12 -05:00 |
jvennix-r7
|
a9049f445b
|
Merge pull request #15 from jvazquez-r7/test_3882
Fix processes check
|
2014-09-25 00:39:13 -05:00 |
|
jvazquez-r7
|
456d731aa3
|
Fix processes check
|
2014-09-25 00:24:39 -05:00 |
|
William Vu
|
fd34bdb22f
|
Add missed fix (formatting)
|
2014-09-24 23:12:29 -05:00 |
|
William Vu
|
5a59b7cd89
|
Fix formatting
|
2014-09-24 23:12:11 -05:00 |
|
William Vu
|
d70c5b889a
|
Add missed fix (add peer)
|
2014-09-24 22:53:33 -05:00 |
|
William Vu
|
e6f0736797
|
Add peer
|
2014-09-24 22:48:51 -05:00 |
Tod Beardsley
|
47ff2fdf89
|
Land #3883, more generic HTTP method/CMD
|
2014-09-24 22:44:18 -05:00 |
|
William Vu
|
8b6519b5b4
|
Revert shortened reference
But it's so long. :(
|
2014-09-24 22:43:33 -05:00 |
|
William Vu
|
ecb10ebe28
|
Add variable HTTP method and other stuff
|
2014-09-24 22:41:01 -05:00 |
|
Joe Vennix
|
f6708b4d83
|
Check for running vmware processes first.
|
2014-09-24 19:11:38 -05:00 |
|
Tod Beardsley
|
ff5398bf3f
|
Land #3880, bash scanner module
|
2014-09-24 19:03:37 -05:00 |
|
William Vu
|
a600a0655d
|
Scannerify the module
|
2014-09-24 18:58:39 -05:00 |
|
William Vu
|
abadf65d8d
|
Clean up title and formatting
|
2014-09-24 18:42:43 -05:00 |
|
William Vu
|
2562964581
|
Revert to my original code of using CMD
|
2014-09-24 18:00:13 -05:00 |
|
Joe Vennix
|
99da950734
|
Adds osx vmware/bash priv escalation.
|
2014-09-24 17:44:14 -05:00 |
|
William Vu
|
6ae578f80f
|
Add Stephane Chazelas as an author
|
2014-09-24 17:14:18 -05:00 |
|
William Vu
|
b2555408a4
|
Rename module
I don't think we're gonna make a supermodule like we had hoped.
|
2014-09-24 16:55:10 -05:00 |
|
William Vu
|
31e9e97146
|
Replace unnecessary reference with a better one
|
2014-09-24 16:52:43 -05:00 |
|
William Vu
|
fc04bf9d48
|
Update description
This is what I had when @todb-r7 beat me to the punch. >:P
|
2014-09-24 16:22:58 -05:00 |
|
wvu-r7
|
2b127ea2ee
|
Merge pull request #6 from todb-r7/fixup-pr3880
Fix description
|
2014-09-24 16:19:00 -05:00 |
|
Tod Beardsley
|
2f788c2e0c
|
Fix description
|
2014-09-24 16:13:05 -05:00 |
|
Joe Vennix
|
b96a7ed1d0
|
Install a global object in firefox payloads, bump jsobfu.
|
2014-09-24 16:05:00 -05:00 |
|
William Vu
|
ca63fe931d
|
Add CVE-2014-6271 PoC
|
2014-09-24 16:02:59 -05:00 |
|
jvazquez-r7
|
e4f71d79ac
|
Fix grammar
|
2014-09-24 15:17:09 -05:00 |
|
Joe Vennix
|
5d234c0e01
|
Pass #send in this so jsobfu is not confused.
|
2014-09-24 15:07:14 -05:00 |
|
jvazquez-r7
|
0247e4a521
|
Change RequiredCmd for reverse_bash_telnet_ssl cmd payload
|
2014-09-24 00:40:14 -05:00 |
|
jvazquez-r7
|
f2cfbebbfb
|
Add module for ZDI-14-305
|
2014-09-24 00:22:16 -05:00 |
Brendan Coles
|
5f6e84580c
|
Clean up and use Metasploit::Credential
|
2014-09-24 01:00:23 +00:00 |
sinn3r
|
11b9a8a6ae
|
Land #3814 - Advantech WebAccess dvs.ocx GetColor BoF
|
2014-09-23 15:06:21 -05:00 |
|
jvazquez-r7
|
b021ff4399
|
Add noche tags
|
2014-09-23 13:11:06 -05:00 |
|
jvazquez-r7
|
5c6236e874
|
Fix rop chain to allow VirtualAlloc when end of stack is too close
|
2014-09-23 13:08:26 -05:00 |
|
sinn3r
|
35f788a1a4
|
Land #3848 - Add specs for Rex::Arch
|
2014-09-23 13:03:40 -05:00 |
|
sinn3r
|
fe1842520c
|
Land #3849 - Rex::ExtTime rspec
|
2014-09-23 13:00:17 -05:00 |
|
sinn3r
|
31ecbfdc4e
|
Land #3756 - EMC AlphaStor Device Manager Opcode 0x75 Command Injection
|
2014-09-23 12:57:46 -05:00 |
|
jvazquez-r7
|
0dfc2d3f87
|
Add specs for Rex::ExtTime
|
2014-09-22 14:55:14 -05:00 |
Jon Hart
|
259a368577
|
Land #3841, @jabra-'s modifications to ssdp_amp to support spoofing
|
2014-09-22 12:28:46 -07:00 |
|
Jon Hart
|
fc4c1907d3
|
Land #3839, @jabra-'s updates to dns_amp to support spoofing
|
2014-09-22 12:14:39 -07:00 |