Commit Graph

2427 Commits (53143d57afc27aec973fb930bea68a3e5542fbaa)

Author SHA1 Message Date
Garvit Dewan b7dce68fc4
Add documentation for psreadline_history module 2018-12-23 05:18:24 +05:30
@shellfail e6b2b6cee5
Update documentation/modules/exploit/linux/http/mailcleaner_exec.md
Co-Authored-By: mmetince <mmetince@users.noreply.github.com>
2018-12-22 23:16:51 +03:00
@shellfail 9a43507416
Update documentation/modules/exploit/linux/http/mailcleaner_exec.md
Co-Authored-By: mmetince <mmetince@users.noreply.github.com>
2018-12-22 23:16:43 +03:00
Matthew Kienow bad8176548
Change event info example specification
Allows API documentation to display the event model example correctly.
2018-12-21 22:24:59 -05:00
Matthew Kienow e9d40248f4
Add OpenAPI documentation for events GET operation 2018-12-21 22:24:20 -05:00
Brent Cook b9742802aa
Land #11137, Clean up linux/local/vmware_alsa_config exploit module 2018-12-21 17:04:11 -06:00
Quentin Kaiser 594103e7c3 Update documentation to set up testing environment with Docker. 2018-12-20 13:52:06 +01:00
Mehmet İnce 9481ad04f2 Adding support for ARCH_CMD and updating docs 2018-12-20 12:12:01 +03:00
asoto-r7 d601837e03
Land #10401, java_jmx_server scanner for Java JMX MBean servers 2018-12-19 13:12:03 -06:00
asoto-r7 b52a4f91ac
java_jmx_scanner: Final draft of documentation 2018-12-19 13:10:21 -06:00
Mehmet İnce e5c8c18ded Adding Mailcleaner exec 2018-12-19 17:35:40 +03:00
Jacob Robles 6921b79890
Land #11089, Erlang cookie rce exploit module 2018-12-19 08:02:40 -06:00
Jacob Robles 5bfdc7009c
Minor Doc Changes 2018-12-19 07:58:32 -06:00
Milton-Valencia bb758f9a61 I didn't forget msftidy I swear 2018-12-18 14:55:12 -06:00
Milton-Valencia 8a2a605a99 added targets 2018-12-18 14:50:57 -06:00
jdiog0 b2b410cbbe DoS Exploitation of Allen-Bradley legacy protocol (PCCC) 2018-12-18 16:49:53 +00:00
Quentin Kaiser 0acdcd98f2 Merge branch 'master' into consul_service_exec 2018-12-18 16:27:08 +01:00
Quentin Kaiser 08541cd7b9 Merge branch 'master' into consul_exec 2018-12-18 16:07:08 +01:00
Shelby Pace 2fc501d260
Land #11112, Fix bpf_priv_esc exploit module 2018-12-17 10:00:50 -06:00
Jacob Robles 7839add2fd
Land #11123, Add module windows persistent service 2018-12-17 09:07:21 -06:00
Jacob Robles 80e70b29ef
Doc Formatting 2018-12-17 07:34:52 -06:00
Brendan Coles d973a58052 Clean up linux/local/vmware_alsa_config 2018-12-17 08:01:34 +00:00
Brendan Coles cba195b7d8 Update tested versions 2018-12-15 05:44:32 +00:00
Brendan Coles a7b5737980 Update documentation 2018-12-15 05:41:40 +00:00
Brent Cook 673cfe6889
Land #11119, Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit 2018-12-13 16:15:53 -06:00
Wei Chen cc7cb7302e
Land #10944, Add macOS Safari exploit from pwn2own2018 2018-12-13 13:50:19 -06:00
William Vu cb5648a1c7 Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit 2018-12-13 12:22:36 -06:00
Milton-Valencia 2e26ceac8f added comments 2018-12-13 10:55:09 -06:00
Wei Chen 8ffd9e47b0 Up to date PR10429 2018-12-12 13:30:58 -06:00
Wei Chen 96c281daef Add send_not_found and module documentation for webdav_delivery 2018-12-12 13:26:46 -06:00
Jacob Robles ea724dec46
Merge in upstream/master 2018-12-12 11:00:31 -06:00
Jacob Robles 3fbfaf2ff5
Documentation Update 2018-12-12 07:00:37 -06:00
Shelby Pace ae089ce573
Land #10960, add wp duplicator code inject module 2018-12-11 12:02:07 -06:00
Shelby Pace b82e3469a2
renamed module and doc 2018-12-11 11:59:19 -06:00
Jacob Robles 1ab69c221c
Land #11040, Add CyberLink LabelPrint Local BOF 2018-12-11 08:19:51 -06:00
Jacob Robles 106d6cefe4
Add documentation 2018-12-11 07:55:52 -06:00
William Vu 3f18ffa224
Land #10318, Oracle function-based index privesc 2018-12-10 11:32:39 -06:00
William Vu d0f1f72426 Clean up module 2018-12-10 11:21:16 -06:00
Auxilus bca4ae03ff
Replace WsfDelay with WfsDelay 2018-12-10 16:02:19 +05:30
Milton-Valencia f6bfbddb8d twks 2018-12-09 15:59:58 -06:00
Milton-Valencia 15aaaa4f21 removed 0 just saw... 2018-12-09 15:39:27 -06:00
Milton-Valencia 2beddf1012 req changes 2018-12-09 15:01:09 -06:00
Alex c5015c62b8 Simplify Chrome Gather Cookies
Module now uses Chrome itself as a websocket client, reading websockets
via js. It no longer downloads and executes `websocat`.
2018-12-09 09:52:45 +11:00
Julien Legras 2735c71bda Fixed typos, removed not working cleaning 2018-12-04 18:42:54 +01:00
Brent Cook 55a9a12670
Land #10964, add initial golang modules for enumerating owa/o365 2018-12-04 10:33:37 -06:00
Christopher Lee 3d8ec178da Remove unecessary run comment 2018-12-04 09:50:01 -06:00
Christopher Lee 60aba5ac44 Remove defunct comment 2018-12-04 09:41:39 -06:00
asoto-r7 c27c149a4d
Land #10947, HPE Intelligent Management Center Java Deserialization RCE 2018-12-03 17:07:31 -06:00
Erin Bleiweiss 50c5eeee1d
Land #11056, Add definitions for Realm objects to the Credential API Doc 2018-12-03 13:22:33 -06:00
James Barnett 23bbe728c8
Add realm info to creds doc 2018-12-03 12:55:39 -06:00
Brent Cook ffb57387b4
Land #11049, Add Emacs movemail local exploit 2018-12-03 12:43:56 -06:00
bwatters-r7 df9c3da47e
Land #10842, Add Windows Post Module to roll back Windows Defender signatures
Merge branch 'land-10842' into upstream-master
2018-12-03 10:57:38 -06:00
Christopher Lee b11bcd92a4 Broken into 3 modules, addressed review comments 2018-12-03 10:25:21 -06:00
Jeffrey Martin ab1bea1b22
Land #10798, Cisco device manager update 2018-12-03 01:39:19 -06:00
Alex f8389d9eb2 Update documentation for post/chrome/gather/cookies 2018-12-03 16:13:47 +11:00
Alex d0aca05c69 Add post/chrome/gather/cookies module 2018-12-03 16:07:50 +11:00
William Vu ab8df35645 Add module doc 2018-12-01 12:05:08 -06:00
bwatters-r7 70031b6721
Shut up msftidy and document updates 2018-11-30 16:41:40 -06:00
bwatters-r7 3c992b7af1
Updated documentation and added options in the module to update or roll back
definitions
2018-11-30 16:25:33 -06:00
bwatters-r7 a41b9a77d8 Change the module name, fix cleanup, add documentation 2018-11-30 15:20:34 -06:00
Christopher Lee 5b926bcbcf Addressed feedback 2018-11-30 13:18:02 -06:00
Christopher Lee 6225c04b99 Address review feedback, fix bugs 2018-11-30 11:36:39 -06:00
Jacob Robles dec08a0b43
Land #10954, apache spark unauth rce module 2018-11-29 13:56:21 -06:00
Jacob Robles 88ca775fd3
Land #10952, WP GDPR Compliance plugin exploit 2018-11-29 13:31:31 -06:00
Jacob Robles 5180ec4cf8
Update documentation
Fix headers and remove options output
2018-11-29 08:28:39 -06:00
Julien Legras 2b61c4e118 Fixes for PR 2018-11-29 15:02:03 +01:00
Jacob Robles e142f5716e
Update documentation 2018-11-28 19:08:01 -06:00
asoto-r7 504237c77a
Land #10877, ibm-mq-login username/password checker 2018-11-28 11:36:53 -06:00
h00die e3e7285288
Land #9946 a UEB local priv escalation 2018-11-27 21:19:34 -05:00
h00die 38a99ac90a ueb privesc updates 2018-11-27 21:18:05 -05:00
h00die 4af5ab3089 ueb privesc updates 2018-11-27 21:14:05 -05:00
Wei Chen d6db5ebdfe
Land #10716, Create PureVPN Credential Collector Post Explotation Module 2018-11-27 17:42:23 -06:00
Wei Chen aee12fc182 Add documentation for purevpn_cred_collector 2018-11-27 17:40:58 -06:00
Brendan Coles 180876d8fc Add check for SMAP 2018-11-27 23:24:02 +00:00
Brent Cook b05bb616bf
Land #10987, add exploit for PHP imap_open function against various web apps 2018-11-27 16:44:51 -06:00
Brent Cook 66cae6240f
Land #10994, Added exploit for CVE-2018-18955 2018-11-27 16:12:05 -06:00
Shelby Pace 6712363bb5
Land #10737, add TeamCity XML-RPC exploit module 2018-11-27 14:59:37 -06:00
Shelby Pace 064c79a4ae
note about cmd_stager flavor 2018-11-27 14:46:19 -06:00
Wei Chen d523124faf
Land #10965, Add the macOS LPE from pwn2own2018 (CVE-2018-4237) 2018-11-27 14:00:35 -06:00
Brendan Coles c1722a922f Fix markdown 2018-11-27 19:43:08 +00:00
Brendan Coles aae86241ef Update version check 2018-11-27 18:13:29 +00:00
Wei Chen 1f2827c3d0
Land #10975, More Capture Docs 2018-11-26 13:51:57 -06:00
Wei Chen 347efb549c Fix typos for documentation (postgressql & telnet) 2018-11-26 13:51:13 -06:00
Brent Cook 0fddb8e31c
Land #10768, Exploit for Netgear CVE-2016-1555 2018-11-26 11:45:10 -06:00
Brent Cook 7b4b573942
Land #9915, Cleanup and improvements to influxdb_enum 2018-11-26 10:25:07 -06:00
h00die e2d58afe13 cleaned up code, added custom 2018-11-25 10:59:53 -05:00
Alex Maestretti a69870a85c
Update php reverse_tcp instructions
Added the full set of commands to set up a listener to the instructions to make it easier for first time users.
2018-11-24 20:43:11 -08:00
Brendan Coles be6cfde921
Land #11015, Fix payload and console check for Xorg_privesc Linux targets 2018-11-25 04:51:27 +00:00
Brendan Coles 01ed57cbb3 Remove check for nosuid 2018-11-25 01:53:07 +00:00
Brendan Coles f0999e3a7e Add documentation 2018-11-25 00:54:58 +00:00
Aaron Ringo 1783617770 consolelock check updated to use id, payload upload changed, documentation updated, misc formatting 2018-11-24 15:10:21 -06:00
h00die 945755b058 add custom php_imap target 2018-11-24 14:18:13 -05:00
h00die 45f2c5beb2 update php_imap_open docs 2018-11-24 07:26:42 -05:00
h00die e36cef3b96 e107 exploitable now 2018-11-23 20:16:53 -05:00
Brent Cook a59913434d
Land #10916, Xorg SUID privesc 2018-11-21 19:46:11 -06:00
Brent Cook 5d9195fe72
Land #10981, start printjob docs and bug fixes 2018-11-21 16:35:02 -06:00
asoto-r7 96ede80dc4
Land #10876, ibm_mq_enum: IBM WebSphere MQ Name and Version Enumeration 2018-11-21 16:10:59 -06:00
h00die 4c59a271e2 added suitecrm to imap_open exploit 2018-11-20 18:33:42 -05:00
asoto-r7 d2a5b966f3
Land #10875, IBM WebSphere MQ Channel Name Bruteforce auxiliary module 2018-11-20 16:23:23 -06:00
Brent Cook d5d8216377
Land #10977, Add documentation and some enhancement to freesshd_authbypass module 2018-11-20 11:44:49 -06:00
Shelby Pace 63a2396626 updated testing branch to branch off master 2018-11-20 08:14:19 -06:00
Brendan Coles fc190d4d36
Update documentation/modules/auxiliary/scanner/http/iis_shortname_scanner.md
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
2018-11-20 11:14:16 +00:00
Brendan Coles ea3c73a442
Update documentation/modules/auxiliary/scanner/http/iis_shortname_scanner.md
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
2018-11-20 11:13:59 +00:00
Brendan Coles 27db84413d
Update documentation/modules/auxiliary/scanner/http/iis_shortname_scanner.md
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
2018-11-20 11:13:48 +00:00
Brendan Coles 69b18d22df
Update documentation/modules/auxiliary/scanner/http/iis_shortname_scanner.md
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
2018-11-20 11:13:27 +00:00
Tim W 57bad6b213 move offsets to hash
fix
2018-11-20 17:58:34 +08:00
Tim W bee3c3d4d3 add documentation 2018-11-20 16:53:34 +08:00
Tim W 0649ad9876 add documentation 2018-11-20 16:09:18 +08:00
h00die aca3f44c9b fix markdown formatting 2018-11-18 21:38:25 -05:00
h00die 4b09584047 php_imap_open_rce 2018-11-18 21:28:19 -05:00
h00die 7ecdaa09c5 start printjob docs and bug fixes 2018-11-17 21:17:12 -05:00
Carsten Maartmann-Moe eab26a04c3 Added documentation 2018-11-17 09:55:41 +01:00
Imran E. Dawoodjee 0edd3a9138
Fixed numbering error in documentation. 2018-11-16 21:34:05 +08:00
Imran E. Dawoodjee 08b3efa046
Enhanced module and added documentation. 2018-11-16 21:18:45 +08:00
h00die 189f29e534
Land #10572 eaton ssh private key scanner 2018-11-15 17:16:36 -05:00
h00die 17b37b2ad9 md syntax 2018-11-15 17:12:47 -05:00
h00die 8b4cf2c3e2 Merge branch 'master' of https://github.com/rapid7/metasploit-framework into capture_docs2 2018-11-15 17:02:50 -05:00
h00die a82d71356b more capture docs 2018-11-15 17:02:44 -05:00
Jacob Robles 795aa3c99c
Land #10828, git submodule url exec CVE-2018-17456 2018-11-14 12:39:13 -06:00
Julien Legras 5f9570cbcf Added WordPress Duplicator <= 1.2.40 and documentation 2018-11-14 16:39:42 +01:00
Aaron Ringo 4fc047db87 Added advanced option to check console lock on linux systems, default true & updated docs 2018-11-13 22:33:12 -06:00
BrianWGray f95573cf37 modify scenario content to correct example ip addresses 2018-11-13 16:24:27 -05:00
Shelby Pace ac8932c144 update 9631 to a current branch 2018-11-13 15:15:25 -06:00
Thomas Labadie bc32a16b8f
Added module documentation 2018-11-13 20:03:42 +01:00
Brent Cook f2712ecdf6
Land #10607, Add External Module: office365userenum.py 2018-11-13 10:57:05 -06:00
Green-m 7a4770790c
Land #10938, add docs for modules and fix bug.
Add docs for auxiliary module http_basic/imap/mysql, and fix a bug
in modules/auxiliary/server/capture/mysql.rb
2018-11-13 16:22:03 +08:00
Aaron Ringo 538055c406 Initial documentation for Xorg Privesc Module
killed white spaces
2018-11-12 15:44:13 -06:00
Green-m 3be917d0e4
Add doc for exploit module spark_unauth_rce. 2018-11-12 17:08:36 +08:00
BrianWGray 129feb94ff Alterations made based on requested changes 2018-11-10 15:12:47 -05:00
Brendan Coles 1f14a9846d
Land #10767, Add Cisco Prime Infrastructure remote root exploit 2018-11-10 17:08:16 +00:00
BrianWGray c7849eb37b Eaton XPert Backdoor documents 2018-11-10 10:09:43 -05:00
h00die b78e103bc0 rb to md 2018-11-09 05:18:27 -05:00
h00die 792b451f40 capture server docs and updates 2018-11-08 21:23:27 -05:00
h00die ce1f14ab91 http_basic capture docs 2018-11-07 08:32:03 -05:00
Wei Chen a32d8083f0
Land #10847 - Add blueimp's jQuery (Arbitrary) File Upload
CVE-2018-9206
2018-11-05 11:37:20 -06:00
Brent Cook cb229411bc
Land #10888, Fix Net::SSH::CommandStream session open failure 2018-11-05 11:15:09 -06:00
Green-m 708d067e65
Land #10919, Add doc for ftp capture module.
And add a custom option banner for it.
2018-11-05 14:15:52 +08:00
h00die f3fb1a776f fix md format 2018-11-04 21:51:04 -05:00
h00die 04218cff39 ftp capture 2018-11-04 21:46:01 -05:00
Jacob Robles 2d3403cdd2
Land #10901, Add modules for iOS images and texts 2018-11-02 13:46:58 -05:00
Brent Cook 86469cc5a0
Land #10836, Add Morris worm sendmail debug mode exploit 2018-11-02 11:17:33 -05:00
Brent Cook 1d81f3764f
Land #10700, Add Morris worm fingerd exploit and VAX reverse shell 2018-11-02 11:16:46 -05:00
William Vu e9b3502f98 Fix Net::SSH::CommandStream session open failure
I suspected this might be a problem for libssh servers.
2018-11-02 01:08:05 -05:00
Shelby Pace 036ac39270
added docs for the two modules 2018-11-01 15:49:44 -05:00
pkb1s 22f032da9e
Added documentation 2018-10-28 19:49:13 +00:00
pkb1s aba72ea276
Added example output to documentation 2018-10-28 18:35:20 +00:00
pkb1s 90bcfab263
Added example output to documentation 2018-10-28 18:02:07 +00:00
pkb1s 1ef9a2f901
Create ibm_mq_enum.md 2018-10-28 17:25:24 +00:00
pkb1s ba204b9854
Create ibm_mq_channel_brute.md 2018-10-28 17:13:25 +00:00
bwatters-r7 b4c005c4d4
Land #10561, Add Windows local privilege escalation - CVE-2018-0824
Merge branch 'land-10561' into upstream-master
2018-10-25 13:22:31 -05:00