infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
45,260 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

1548 Commits (55a045eb76d780659836d8d7f294c659d747c61a)

Author SHA1 Message Date
Yorick Koster 565a3355be CVE-2017-8464 LNK Remote Code Execution Vulnerability 
This module exploits a vulnerability in the handling of Windows
Shortcut files (.LNK) that contain a dynamic icon, loaded from a
malicious DLL.

This vulnerability is a variant of MS15-020 (CVE-2015-0096). The
created LNK file is similar except in an additional
SpecialFolderDataBlock is included. The folder ID set in this
SpecialFolderDataBlock is set to the Control Panel. This is enought to
bypass the CPL whitelist. This bypass can be used to trick Windows into
loading an arbitrary DLL file.
 2017-08-02 15:46:30 -05:00
Martin Pizala d7d64286e2
Add documentation for exploit module Rancher Server - Docker Exploit 2017-07-28 08:04:59 +02:00
Brendan Coles 798dfe0b88 Add documentation 2017-07-26 10:18:23 +00:00
Martin Pizala dd0c78484a
Fix mistake 2017-07-26 02:17:51 +02:00
Martin Pizala cd418559bc
Docker Daemon - Unprotected TCP Socket Exploit 2017-07-26 00:21:35 +02:00
Brent Cook 6300758c46 use https for metaploit.com links 2017-07-24 06:26:21 -07:00
Ricardo Almeida fe5c6dc28f
Orientdb 2.2.x RCE - Update documentation 2017-07-24 10:09:06 +01:00
Brent Cook 7c55cdc1c8 fix some module documentation 
3 modules got documentation landed in the wrong spot. This also fixes a few
typos and improves formatting.
 2017-07-23 07:46:52 -07:00
Pearce Barry 6bb745744b
Land #8471, Add VICIdial user_authorization Unauthenticated Command Execution module 2017-07-21 15:57:08 -05:00
Ricardo Almeida 00a817d228
Orientdb 2.2.x RCE - Add documentation 2017-07-20 09:03:26 +01:00
bwatters-r7 ffad0d1bbf
Land #8559, Ipfire oinkcode exec 2017-07-19 14:31:18 -05:00
thesubtlety 47f55b1c81 add documentation 2017-07-18 21:30:53 -04:00
Jon Hart e93e524c3b
Merge branch 'upstream-master' into feature/rdp-scanner 2017-07-17 13:46:59 -07:00
Jon Hart e5ef737c21
Add documentation 2017-07-17 13:45:12 -07:00
David Maloney 8f6cac9c37
Land #8652, rpc console write exploit 
lands pr for the metasploit rpc console write exploit
 2017-07-14 14:47:35 -05:00
bwatters-r7 de230478eb
Land #8566, Add ye olde NNTP Login Utility scanner module 2017-07-13 13:19:34 -05:00
Pearce Barry 59de7d3635
Land #8671, Add a module for CVE-2017-7615 2017-07-12 14:58:02 -05:00
Corey Harding 6cb956ea81 Update rfpwnon.md 2017-07-09 05:07:36 -04:00
jvoisin f10cf75ae0 Fix some stuff 2017-07-09 10:45:15 +02:00
jvoisin e1b9330136 Add some documentation 2017-07-09 02:25:11 +02:00
Pearce Barry e3f95954ba Minor doc update. 2017-07-07 16:54:56 -05:00
Brendan Coles 95ba5d61ce Move documentation to correct folder 2017-07-07 16:54:56 -05:00
Brendan Coles 8e2ff7a4c5 Add command stager and code cleanup 2017-07-07 16:54:56 -05:00
dmohanty-r7 8f464e17a1
Land #8658, Add Gather PDF Authors auxiliary module 2017-07-07 16:20:29 -05:00
Brendan Coles afc704aea5 Ad documentation 2017-07-07 18:54:48 +00:00
Brent Cook f4820d24fb add a few more AKA references 2017-07-06 22:43:46 -05:00
Brent Cook b0c5d734ee
s/swith/switch/ - ok @bcoles 2017-07-06 07:03:06 -05:00
Brendan Coles baff473cae Add Metasploit RPC Console Command Execution module 2017-07-05 08:48:35 +00:00
dmohanty-r7 aa387e96a7
Land #8577, Add SurgeNews User Credentials scanner 2017-07-03 10:14:03 -05:00
Pearce Barry a2602bf514
Land #8600, Add GoAutoDial 3.3 RCE Command Injection / SQL injection module 2017-06-30 17:32:51 -05:00
Pearce Barry 3d4d03c9b4
Land #8575, Cerberus Helpdesk hash disclosure 2017-06-30 16:02:53 -05:00
Pearce Barry 71b2ddaa2c
Minor doc tweaking. 2017-06-30 15:53:27 -05:00
Brent Cook 796fe99744
update docs to note that cluster mode is not necessary to exploit 2017-06-30 11:26:35 -04:00
Brent Cook 40f0d36f6b
Land #8615, add @artkond's DoS module for Cisco CVE-2017-3881 2017-06-30 11:17:09 -04:00
William Webb 6349026134
Land #8442, Exploit module for Backup Exec Windows Agent UaF 2017-06-28 10:39:28 -05:00
Brent Cook 0d9f57ad7c add @artkond's DoS module for Cisco CVE-2017-3881 
This makes a few improvements, adds module docs.
 2017-06-27 01:53:23 -05:00
Brent Cook 05c72214ae
Land #8205, Add Satel SenNet Command Exec Module 2017-06-25 18:01:44 -05:00
Rob Fuller 2918b3af13
Land #8599, Dynamic DNS updater module 2017-06-25 15:08:22 -05:00
Rob Fuller 24fe6ac0fe Update dns_dyn_update.md 2017-06-24 17:07:56 -05:00
h00die cc9326d946 bcoles updates and table printing 2017-06-24 13:01:39 -04:00
Brendan Coles f259682f12 Add documentation 2017-06-23 12:40:53 +00:00
dmohanty-r7 18410d8230
Land #8540, Add Symantec Messaging Gateway RCE 2017-06-22 19:00:32 -05:00
Brent Cook 5e48a11e60 handle specific exceptions, update docs 2017-06-22 18:01:52 -05:00
Brent Cook 6a261b172f move from scanner to admin 2017-06-22 17:47:04 -05:00
Brent Cook cdf0091962 fixup docs 2017-06-22 16:07:34 -05:00
KINGSABRI 2410a3232f Adding DNS Server Dynamic Update Record Injection module 2017-06-22 15:41:25 -05:00
Brent Cook 4fdd77f19a
Land #8051, Add Netgear DGN2200v1/v2/v3/v4 Command Injection Module 2017-06-22 11:46:40 -05:00
Pearce Barry 24d9bec0ae
Land #8260, OpManager Version Check 2017-06-20 17:58:10 -05:00
Pearce Barry 700d392106
Add markdown docs. 2017-06-20 17:45:44 -05:00
Pearce Barry 3cd28b28e2
Land #8569, Add ability to specify API token instead of password 2017-06-19 17:42:35 -05:00
Pearce Barry 58cd432120
Added docs, minor code tweak to remove duplication. 2017-06-19 17:35:41 -05:00
h00die 071dc09b1f fix spelling 2017-06-19 10:31:24 -05:00
mccurls 19ceb53304 Modified payload handling and uploaded documentation 2017-06-18 02:04:22 +10:00
Brendan Coles b82051757d Add SurgeNews User Credentials scanner module 2017-06-17 01:49:47 +00:00
h00die 41e96f9ff1 updated docs 2017-06-16 20:54:25 -04:00
h00die f008f2aa8f working code 2017-06-16 08:24:54 -04:00
Brendan Coles 414f440d62 Add documentation 2017-06-15 21:12:09 +00:00
h00die 46ffd250a0 module working and docs 2017-06-14 21:15:56 -04:00
Brendan Coles 0766f92013 Add option for workspace 2017-06-13 12:46:36 +00:00
William Vu bb9d1a6768
Land #8507, Riverbed SteelHead VCX file read 2017-06-12 10:39:48 -05:00
Mehmet Ince 6ae540d889
Adding Symantec messaging gateway rce 2017-06-10 12:23:12 +03:00
bwatters-r7 99fa52e660
Land #8434, Add Windows 10 Bypassuac fodhelper module 2017-06-07 11:15:01 -05:00
Brent Cook bac17a8e80
Land #8053, Add DC/OS Marathon UI Exploit 2017-06-06 09:29:26 -05:00
Brent Cook 385daddb9d
Land #8499, doc header consistency fixes 2017-06-05 17:40:15 -05:00
Pearce Barry bc3b883758
Add docs, fix typo, add missing report mixin to avoid error. 2017-06-05 13:49:59 -05:00
h00die ea5db9a039 working module 2017-06-02 23:09:19 -04:00
Brendan Coles 24505f91de Add documentation 2017-06-01 06:03:10 +00:00
h00die 4eb86cae99 add L3 header for version under scenarios 2017-05-31 21:22:44 -04:00
h00die 1c23be91a7 sample output to scenarios conversion in docs 2017-05-31 21:21:38 -04:00
h00die 44c9292f92
Land #8485 docs for snare_registry 2017-05-31 20:51:01 -04:00
h00die 609b131e46
Land #8482 docs for processmaker_exec 2017-05-31 20:39:43 -04:00
Brendan Coles 31975b49ec Update docs 2017-05-31 02:04:40 +00:00
Brendan Coles 30f652eb5c Update docs 2017-05-31 01:46:18 +00:00
wolfthefallen bac23757a4 Updated based on busterb comments 2017-05-30 09:33:03 -04:00
Brendan Coles 5042b04ff8 Add documentation 2017-05-30 09:29:01 +00:00
Brendan Coles 475510787d Add documentation 2017-05-30 08:40:57 +00:00
Brent Cook a01a2ead1a
Land #8467, Samba CVE-2017-7494 Improvements 2017-05-30 00:15:03 -05:00
Brent Cook 28fb5cc7da spelling 2017-05-30 00:14:33 -05:00
h00die 5698896672
Land #8323 wordpress pre4.6 dos 2017-05-29 07:59:43 -04:00
h00die eb87185e25 fixed up docs format 2017-05-29 07:59:06 -04:00
root 72a5142e37 Update directory traversal DoS module and docs 2017-05-29 00:30:23 +02:00
Brendan Coles 2c3d5bd786 Add documentation 2017-05-28 04:51:39 +00:00
Brendan Coles dfb5806dcb Add documentation 2017-05-28 03:08:45 +00:00
William Webb d4ba28a20b
Land #8457, Update multi/fileformat/office_word_macro to allow custom templates 2017-05-26 15:09:23 -05:00
h00die b3a5a8840b added ubuntu information 2017-05-26 14:10:26 -04:00
root 33ddef9303 Add documentation, add configurable depth path 2017-05-26 16:14:03 +02:00
wchen-r7 ee13195760 Update office_word_macro exploit to support template injection 2017-05-25 15:53:45 -05:00
h00die e8a34c5797 updates to docs 2017-05-25 16:53:39 -04:00
h00die 98ad754475 updated OJ info and wvu ubuntu box 2017-05-25 08:09:37 -04:00
h00die b1514fcbc0 docs 2017-05-24 22:18:46 -04:00
juushya af4eafdf70 Updated module and doc 2017-05-24 06:33:08 +05:30
Matthew Daley d530c49645 Add documentation for CVE-2017-8895 exploit module 2017-05-24 00:28:37 +12:00
Jeffrey Martin b7b1995238
Land #8274, Wordpress admin upload `check` 2017-05-22 22:08:32 -05:00
Brent Cook 47d2917a5f
Land #8418, Add docs for 3 smb related aux modules 2017-05-22 22:04:22 -04:00
amaloteaux 2fbbc98b5d document little trick for those who read :) 2017-05-22 19:50:40 +01:00
amaloteaux 93bb47d546 msftidy fix 2017-05-22 19:27:15 +01:00
amaloteaux 6f1f630b0e add documentation 2017-05-22 19:17:26 +01:00
William Webb 467f1ce0ca
Land #8411, Buffer overflow in VXSearch Enterprise v9.5.12 2017-05-22 07:37:31 -05:00
h00die ae0fd66d91 smb docs looking good 2017-05-19 16:10:22 -04:00
h00die 48b85e9ad3 added info on pr flag for nmap 2017-05-19 13:10:01 -04:00
h00die 34f724cbc1 first add 2017-05-19 12:55:04 -04:00
Renato Piccoli 3203937811 Added a confirmation tip, using nmap. 2017-05-19 00:52:23 +02:00
Renato Piccoli 99eaffd232 Formatting fix (my bad). 
[*] Start msfconsole
[*] use the module
[*] info -d
[ ] Verify spelling and grammar
 2017-05-19 00:18:08 +02:00
Renato Piccoli dc436805bf doc for arp_sweep aux scanner discovery mod #8296 2017-05-18 22:54:29 +02:00
Daniel Teixeira ca6b00161d VX Search Enterprise GET Buffer Overflow Doc 2017-05-18 17:12:10 +01:00
wchen-r7 c0bf2cc6e7 Land #8401, Buffer Overflow on Sync Breeze Enterprise 9.4.28 2017-05-17 23:39:50 -05:00
wchen-r7 3360171977 Land #8319, Add exploit module for Mediawiki SyntaxHighlight extension 2017-05-17 23:23:50 -05:00
wchen-r7 1cc00b2944 Add vulnerable setup info in mediawiki_syntaxhighlight.md 2017-05-17 23:23:00 -05:00
wchen-r7 ca1f8da7e5 Get around encoding issues in mediawiki_syntaxhighlight.md 2017-05-17 22:50:56 -05:00
James Lee b78749bc1b
Land #8221, move autoroute 2017-05-17 15:17:45 -05:00
Daniel Teixeira 57eac49222 Add files via upload 2017-05-17 10:52:36 +01:00
William Webb 7e2dab4ddc
Land #8303, Buffer Overflow on Dupscout Enterprise v9.5.14 2017-05-17 01:04:59 -05:00
William Vu 21e741b530
Comment out x86 targets in ms17_010_eternalblue.md 
Still under development.
 2017-05-16 19:52:44 -05:00
wchen-r7 11da7c7c81 Land #8394, Add Moxa Credential Recovery Module 2017-05-16 16:45:22 -05:00
wchen-r7 77a9676efb Land #8347, Add Serviio Media Server checkStreamUrl Command Execution 2017-05-16 16:20:39 -05:00
James Lee e3f4cc0dfd
Land #8345, WordPress PHPMailer Exim injection 
CVE-2016-10033
 2017-05-16 15:07:21 -05:00
wchen-r7 e62fc3e93c Land #8376, Add BuilderEngine 3.5 Arbitrary file upload & exec exploit 2017-05-16 14:53:32 -05:00
William Vu 3893bc4d83 Update doc with new prestager command 2017-05-16 14:48:12 -05:00
wchen-r7 2ed8ae11b4 Add doc and make minor changes 2017-05-16 14:47:19 -05:00
William Vu eff4914240
Land #8381, ETERNALBLUE exploit (to be continued) 2017-05-16 12:19:45 -05:00
Patrick DeSantis 77dd3d19b9 add moxa credentials recovery module documentation 2017-05-16 10:22:50 -04:00
Gabriel Follon 4e3d5fa8a3 Added docs 2017-05-16 13:06:09 +02:00
William Vu 8021b209ba Update doc with new usage 
Also kick version down to 4.6, since I wasn't using the tag originally.
 2017-05-15 21:28:41 -05:00
William Vu 2055bf8f65 Add note about PHPMailer being bundled 2017-05-15 14:29:11 -05:00
William Webb 85d99d8cf1
Land #8373, Add documentation for VMWare aux modules 2017-05-14 22:17:01 -05:00
zerosum0x0 e3dcf0ab2d added docs 2017-05-14 19:22:26 -06:00
Brent Cook 8be51bb56b
Land #8372, rservice documentation 2017-05-14 19:31:55 -05:00
h00die fb236df18f added AIX reference 2017-05-12 19:15:00 -04:00
h00die 5d2b4e0fdb links, and spelling 2017-05-12 19:10:37 -04:00
h00die af4505a9de
land #8009 post module for jboss creds gather 2017-05-11 22:39:54 -04:00
h00die 6fa51aee8f moving docs to correct folder 2017-05-11 22:33:00 -04:00
h00die ea232cb39f esx_fingerprint 2017-05-11 21:19:13 -04:00
h00die f0e3a1f9da vmauthd_version 2017-05-11 21:04:10 -04:00
h00die 4c40c6289e add rlogin and rsh 2017-05-11 20:22:44 -04:00
h00die 7f34e985f7 rexec docs 2017-05-11 17:08:21 -04:00
William Vu 0627b10996 Add Ubuntu version to module doc 2017-05-11 14:13:45 -05:00
Josh Hale bb815c0f8c Add delete all to module doc 2017-05-10 23:01:03 -05:00
Brent Cook 099fc0176a move autoroute to a more sensible location 2017-05-10 23:01:02 -05:00
Brent Cook 28c20cf35d
Land #7873, haraka mail server command injection 2017-05-10 22:52:40 -05:00
Brent Cook 0f089020cb update example output from module 2017-05-10 22:52:13 -05:00
Brent Cook 6e8f226f36 update docs, move module out of the way 2017-05-10 22:09:26 -05:00
William Vu a1d92573fc Add module doc to appease the @h00die god 2017-05-10 15:17:20 -05:00
Michael Scherer a3dc82d51c Fix mispelling in meterpreter readme 2017-05-10 22:08:22 +02:00
Brent Cook faf01ed5ef
Land #8353, add aux scanner for Intel AMT digest bypass 2017-05-09 18:45:21 -05:00
Brent Cook ad37f88a34 add module docs 2017-05-09 18:44:43 -05:00
Brent Cook 96e3d61883
Land #8297, add docs for energizer duo scanner and exploit 2017-05-08 17:14:36 -05:00
Pearce Barry af3f1fbc37
Land #8332, Canprobe Module 2017-05-07 12:20:27 -05:00
Pearce Barry 1c099a3d14
Minor doc tweaks. 2017-05-07 12:13:57 -05:00
Brendan Coles 283a40a279 Add documentation 2017-05-06 12:58:53 +00:00
h00die 01c726089a
Land #8334, docs for http/crawler and http/robots 2017-05-05 17:31:45 -04:00
h00die 4309cc42a2 minor doc edits 2017-05-05 17:30:03 -04:00
Jon P cf0b3c9476
Add h00die's swaggy recommendations 2017-05-04 10:50:34 +02:00
Jon P df201e65b4
Documentation for the HTTP crawler 2017-05-03 18:20:35 +02:00
Jon P 733c8c291c
Documentation for the robots_txt scanner module 2017-05-03 17:41:46 +02:00
Craig Smith 9877aa9ef9 Added documentation and cleand up how STOPID worked 2017-05-02 18:57:32 -07:00
Yorick Koster 006ed42248 Added fix information 
https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/0002
09.html
 2017-05-01 09:01:14 +02:00
h00die a83a7a12e9
land #8320, docs for ftp_login 2017-04-30 08:15:56 -04:00
h00die a936713252 fixing formatting 2017-04-30 08:14:36 -04:00
Yorick Koster a7436b6afa Typo 2017-04-29 20:42:15 +02:00
Yorick Koster 0a7b9eedda Typo 2017-04-29 20:39:17 +02:00
Yorick Koster 673dbdc4b9 Code review feedback from h00die 2017-04-29 20:37:39 +02:00
itsmeroy2012 cae564ea3b Highlighting filenames 2017-04-29 23:20:13 +05:30
itsmeroy2012 9e7719c428 Adding white space 2017-04-29 20:30:28 +05:30
itsmeroy2012 640368a391 Changing a line 2017-04-29 20:28:23 +05:30
itsmeroy2012 a1765c9e8c Add KB for ftp_login 2017-04-29 20:27:11 +05:30
Yorick Koster 0eb79e8c8c Added docs for mediawiki_syntaxhighlight.rb 2017-04-29 16:14:25 +02:00
William Vu 56990517b0
Update finger_users doc with nmap --script finger 2017-04-28 17:45:50 -05:00
dmohanty-r7 24004f16b3
Land #8298, docs for aux scanner finger 2017-04-28 10:36:50 -05:00
h00die 1843f03665 add nmap equivalent 2017-04-26 19:39:46 -04:00
William Vu 7a6a124272
Land #8279, POSIX Meterpreter replaced by Mettle 2017-04-26 18:32:17 -05:00
Brent Cook 855aa3f850
Land #8295, fix doc paths 2017-04-26 18:25:14 -05:00
Brent Cook 12ed3dad20 update documentation to point to meterpreter again 2017-04-26 17:49:08 -05:00
Daniel Teixeira cd038aed82 Dup Scout Enterprise documentation 2017-04-26 15:19:59 +01:00
William Vu bbee7f86b5
Land #8263, Mercurial SSH exec module 2017-04-26 01:38:01 -05:00
William Vu ad084ae0cc
Land #8286, x11_keyboard_exec docs 2017-04-26 01:12:41 -05:00
William Vu 6739725489
Land #8285, open_x11 docs 2017-04-26 01:12:27 -05:00
h00die 43847f9606 finger docs 2017-04-25 22:29:39 -04:00
h00die c4bb918cca addition of energizer duo docs 2017-04-25 22:05:55 -04:00
h00die 285358e2a4 fix paths 2017-04-25 21:12:55 -04:00
h00die 0ae6142b76
land #8283, docs for ftp/anonymous 2017-04-25 20:55:17 -04:00
h00die d1911a78c5 minor syntax change 2017-04-25 20:51:40 -04:00
h00die 323650dfe4
land #8284 docs for ftp_version 2017-04-25 19:37:04 -04:00
h00die 4c71a9908d minor adjustment 2017-04-25 19:35:03 -04:00
wchen-r7 320898697a
Land #8266, Add Buffer Overflow Exploit on Disk Sorter Enterprise 2017-04-24 17:17:30 -05:00
wchen-r7 e775f9ccbd
Land #8259, Add post module to upload and execute a file 2017-04-24 17:00:55 -05:00
wchen-r7 8c463ab570 Add doc for upload_exec 2017-04-24 17:00:09 -05:00
wchen-r7 35bc1fbf28
Land #8282, Add module doc for auxiliary/scanner/chargen/chargen_probe 2017-04-24 16:14:19 -05:00
wchen-r7 5bbb4d755a
Land #8254, Add CVE-2017-0199 - Office Word HTA Module 2017-04-24 16:05:00 -05:00
wchen-r7 6029a9ee2b Use a built-in HTA server and update doc 2017-04-24 16:04:27 -05:00
Daniel Teixeira a404a1ed04 Rename disksorter_bof.rb.md to disksorter_bof.md 2017-04-24 21:58:37 +01:00
James Lee 47e5f90ded
Add docs for wp_admin_shell_upload 2017-04-24 15:50:59 -05:00
itsmeroy2012 7192836515 few edits added 2017-04-24 23:15:14 +05:30
itsmeroy2012 47b8738bdc few edits added 2017-04-24 23:08:20 +05:30
Daniel Teixeira c5b594d928 Disk Sorter Enterprise Documentation 2017-04-24 14:59:47 +01:00
h00die b2f9bbc43c add xdotool 2017-04-23 16:04:11 -04:00
h00die d1ed6afad1 x11 exploit docs 2017-04-23 15:48:48 -04:00
h00die f84061e195 docs 2017-04-23 15:10:23 -04:00
itsmeroy2012 03099cd57b adding confirmation 2017-04-24 00:15:53 +05:30
itsmeroy2012 2990c3b2fb minor fix 2017-04-24 00:10:30 +05:30
itsmeroy2012 98d1997cfa KB for ftp_version 2017-04-24 00:09:20 +05:30
itsmeroy2012 1650492e7b update 2017-04-23 23:50:02 +05:30
itsmeroy2012 ef29cf441a adding sample output 2017-04-23 23:48:38 +05:30
itsmeroy2012 56aed7a998 whitespace fix 2017-04-23 23:45:29 +05:30
itsmeroy2012 e10a346d01 minor fixes 2017-04-23 23:41:58 +05:30
itsmeroy2012 2abaa9cc0a fixing numbers 2017-04-23 23:38:23 +05:30
itsmeroy2012 5d71ce9508 adding confirmation 2017-04-23 23:37:04 +05:30
itsmeroy2012 57f0a4f00c KB for ftp/anonymous 2017-04-23 23:35:55 +05:30
h00die 562389df57 add comma 2017-04-23 11:49:52 -04:00
h00die c6109f7138 add newline 2017-04-23 11:41:08 -04:00
h00die e8e2a3dd61 chargen_probe docs 2017-04-23 11:38:29 -04:00
h00die 8e4c093a22 added version numbers 2017-04-22 09:45:55 -04:00
Matthias Brun ca03140531 Add documentation for WiPG-1000 module 2017-04-21 15:37:47 +02:00
Jonathan Claudius 999a5dfb9c
Make tested against a bulleted list 2017-04-18 22:29:04 -04:00
h00die 9f892c56fb
land #8244 docs for manageengine_connectionid_write 2017-04-18 21:43:58 -04:00
Jonathan Claudius a80355a4a7
Make code snippets easier to see 2017-04-18 19:50:57 -04:00
Jonathan Claudius 17aac0046b
Add documentation for mercurial_ssh_exec 2017-04-18 19:49:35 -04:00
wchen-r7 0428e12b10
Land #8216, Add CVE-2016-7552/CVE-2016-7547 exploit 2017-04-18 14:26:55 -05:00
nixawk 0a085c4e83 add doc for exploit/windows/fileformat/office_word_hta 2017-04-18 03:26:10 -05:00
itsmeroy2012 5f921859f0 adding hotlinks 2017-04-17 23:37:44 +05:30
itsmeroy2012 84220d6617 Minor edits 2017-04-17 23:30:07 +05:30
Brent Cook 7b936b0012
Land #8184, convert IPMI protocol and modules to bindata 2017-04-17 07:40:15 -05:00
Brent Cook 6f70efcfa1 add module documentation 2017-04-17 07:39:43 -05:00
Ahmed S. Darwish 7daec53106 huawei_hg532n_cmdinject: Improve overall documentation 
- Add section on compiling custom binaries for the device
- Add documentation for Huawei's wget flavor (thanks @h00die)
- Abridge the module's info hash contents (thanks @wwebb-r7)
- Abridge the module's comments; reference documentation (@h00die)
 2017-04-17 08:00:51 +02:00
mr_me f8c72df289 added some documentation 2017-04-16 08:41:52 -05:00
Ahmed S. Darwish 7b8e5e5016 Add Huawei HG532n command injection exploit 2017-04-15 21:01:47 +02:00
itsmeroy2012 477b78a75e adding : 2017-04-15 17:37:21 +05:30
itsmeroy2012 aae009a542 missed heading 2017-04-15 17:35:52 +05:30
itsmeroy2012 8ad80ea3d6 fixing whitespaces 2017-04-15 17:34:14 +05:30
itsmeroy2012 39b228bb39 fixing headings 2017-04-15 17:32:35 +05:30
itsmeroy2012 f573d004d2 KB for manageengine_connectionid_write 2017-04-15 17:30:44 +05:30
Brent Cook a9857eb1c2
Land #8099, Aux module to launch instances in AWS 2017-04-14 14:12:10 -05:00
Brent Cook eb61241673
Land #8228, New mainframe privesc payload for z/OS 2017-04-14 13:19:41 -05:00
dmohanty-r7 d75f852d01
Land #8167, Add MS17-010 auxiliary detection module 2017-04-14 13:00:16 -05:00
bigendiansmalls fa8011fd07 New mainframe privesc payload for z/OS 
This module performs a privilege escaltion on mainframe systems
runing z/OS and using RACF for their security manager.  A user
with any non-privileged credentials and the ability to write to
an apf authorized library can use this payload to add "root level"
privileges (e.g. SPECIAL / BPX.SUPERUSER) to their profile.
 2017-04-11 15:04:44 -05:00
William Webb c867b7e228
Land #8204, Add Cambian ePMP SNMP Configuration download 2017-04-11 10:59:13 -05:00
William Vu 288e384164
Land #8189, irssi password post gather module 2017-04-10 23:34:54 -05:00
h00die 376e791131 Merge branch 'master' into KB-for-rails_webconsole_v2 2017-04-10 20:03:03 -04:00
h00die 136030313d fix single tick to ` 2017-04-10 19:50:59 -04:00
Indranil Roy 7724797c73 fixing $ symbol 2017-04-10 19:45:48 -04:00
itsmeroy2012 c00fb64e9d Fixing code blocks 2017-04-10 19:45:48 -04:00
itsmeroy2012 b7562e5c36 Adding new lines 2017-04-10 19:45:48 -04:00
itsmeroy2012 88f6c90d4d Fixing white spaces 2017-04-10 19:45:48 -04:00
itsmeroy2012 53afe736af Fixing some headings 2017-04-10 19:45:48 -04:00
itsmeroy2012 16332cdf9b Adding KB for rails_webconsole_v2 2017-04-10 19:45:48 -04:00
Jonathan Claudius 4286559273
Update docs for irssi post gather 2017-04-10 15:35:05 -04:00
Jonathan Claudius 2dd60d8498
Add subsection to scenarios 2017-04-10 14:40:24 -04:00
Jonathan Claudius 70a41cfbce
Remove options section 2017-04-10 14:38:45 -04:00
Jonathan Claudius 17eb27002f
Remove unnecessary docs 2017-04-10 14:37:23 -04:00
Jonathan Claudius 211ee3f622
Add IRSSI docs 2017-04-10 14:35:47 -04:00
Indranil Roy 64aecb59a1 fixing $ symbol 2017-04-08 23:01:28 +05:30
itsmeroy2012 309876f2f6 Fixing code blocks 2017-04-08 22:43:58 +05:30
itsmeroy2012 8f6f3bdb20 Adding new lines 2017-04-08 20:17:23 +05:30
itsmeroy2012 a68b6f0ab9 Fixing white spaces 2017-04-07 04:29:31 +05:30
itsmeroy2012 604ba7f43b Fixing some headings 2017-04-07 04:27:50 +05:30
itsmeroy2012 0a98d0fa8d Adding KB for rails_webconsole_v2 2017-04-07 04:25:17 +05:30
juushya e65eacce49 Add Satel SenNet Command Exec Module 2017-04-07 02:22:11 +05:30
juushya 074c4f6313 Minor update to description 2017-04-07 01:38:23 +05:30
juushya 3c189f0cb0 Adding Cambium SNMP Loot module 2017-04-07 01:32:45 +05:30
Christian Mehlmauer 74dc7e478f
update piwik module 2017-04-05 20:19:07 +02:00
Jonathan Claudius b6bf907cbd
Add docs for irssi_creds post gather 2017-04-05 09:54:22 -04:00
h00die 6c44edc58c
Land #8180 docs for iis_webdav_upload_asp 2017-04-04 16:37:08 -04:00
h00die a0ec93ded8 add newline 2017-04-04 16:35:46 -04:00
bwatters-r7 64c06a512e
Land #8020, ntfs-3g local privilege escalation 2017-04-04 09:48:15 -05:00
Indranil Roy 77d80b1a02 fixing newline 2017-04-03 17:04:45 +05:30
itsmeroy2012 fef10b7be8 fixing minor issues 2017-04-03 16:54:45 +05:30
Brent Cook 98ffa4d380
Land #7652, add varnish cache CLI authentication scanner module 2017-04-02 21:52:45 -05:00
Brent Cook 0c3ef4bf47 add note about later versions of Varnish 2017-04-02 21:52:20 -05:00
Brent Cook deb7701d3e tweak misshapen output in MD->HTML 2017-04-02 21:44:50 -05:00
h00die a34c01ebd2
Land #8137 shodan honeyscore module 2017-04-02 21:37:36 -04:00
Carter 3d860c2942 Change RHOST to TARGET 2017-04-02 21:10:42 -04:00
itsmeroy2012 3ada361357 removing twice exploit 2017-04-02 14:33:23 +05:30
itsmeroy2012 2c75526a12 Fixing white spaces 2017-04-02 14:31:11 +05:30
itsmeroy2012 da14a80e8d Fixing hashes 2017-04-02 14:28:04 +05:30
itsmeroy2012 85a95233c7 Documentation on iis_webdav_upload_asp 2017-04-02 14:26:29 +05:30
zerosum0x0 ff27edab14 added docs 2017-04-01 21:58:07 -06:00
William Webb 035f37cf42
Land #8144, Add Moxa Device Discovery Scanner Module 2017-03-31 19:11:27 -05:00
William Webb f870f94fa9
Land #8163, Add Cambium ePMP Arbitrary Command Execution 2017-03-31 19:06:19 -05:00
h00die 2b87923a19 fixes for markdown 2017-03-31 16:54:59 -04:00
h00die 823c1a6286 added more verifieds 2017-03-31 16:52:20 -04:00
dmohanty-r7 1ce7bf3938
Land #8126, Add SolarWind LEM Default SSH Pass/RCE 2017-03-31 11:21:32 -05:00
h00die eeea584bf8
Land #8152 docs for adobe_flash_hacking_team_uaf 2017-03-30 09:14:47 -04:00
h00die 9a0c455f9f add newline 2017-03-30 09:14:03 -04:00
bwatters-r7 691811af5a
Land #7994, Add Windows Gather DynaZIP Saved Password Extraction post module 2017-03-29 16:04:09 -05:00
wchen-r7 5bcddbd4a6
Land #8158, Add documentation for glassfish_deployer 2017-03-28 10:52:20 -05:00
wchen-r7 9f93bb052e Add installation instructions for GlassFish doc 2017-03-28 10:51:39 -05:00
itsmeroy2012 25f7835832 adding browser details 2017-03-28 08:09:28 +05:30
itsmeroy2012 4075580249 Correction a/an 2017-03-28 08:06:01 +05:30
h00die 09214bbb7d
land #8154 docs for axis2_deployer 2017-03-27 20:47:22 -04:00
juushya 30896d1fab Add Cambium ePMP Arbitrary Command Execution Module 2017-03-28 00:17:36 +05:30
William Webb 66a585ab41
Land #8050, Add Cambium ePMP System Hash Dumper 2017-03-27 12:08:53 -05:00
William Webb 935c59306b
Land #7897, Add Cambium ePMP 1000 Device Configuration file dumper 2017-03-27 12:05:11 -05:00
William Webb d705949b37
Land #7784, Cambium ePMP 1000 Login Scanner 2017-03-27 12:01:56 -05:00
Patrick DeSantis 925088bf2a Create moxa_discover.md 2017-03-27 11:44:03 -04:00
itsmeroy2012 a1a3a2af7c Documentation on glassfish_deployer updated 1.3 2017-03-27 19:26:51 +05:30
itsmeroy2012 ea9de67ebb Documentation on glassfish_deployer updated 1.2 2017-03-27 19:25:32 +05:30
itsmeroy2012 ccccb38a1a Documentation on glassfish_deployer updated 1.1 2017-03-27 19:24:46 +05:30
itsmeroy2012 8ad61a11c8 Documentation on glassfish_deployer 2017-03-27 19:23:39 +05:30
Carter b36836bb0a Fix grammar mistake 2017-03-27 00:05:18 -05:00
itsmeroy2012 4cba08a74d Documentation on adobe_flash_hacking_team_uaf updated 1.6 2017-03-26 22:55:13 +05:30
itsmeroy2012 48a56d8830 Documentation on axis2_deployer updated 1.4 2017-03-26 22:38:45 +05:30
itsmeroy2012 8d618ce6a3 Documentation on axis2_deployer updated 1.3 2017-03-26 22:36:41 +05:30
itsmeroy2012 2c47d798b6 Documentation on adobe_flash_hacking_team_uaf updated 1.5 2017-03-25 12:53:23 +05:30
itsmeroy2012 6b6dd73b09 Documentation on adobe_flash_hacking_team_uaf updated 1.4 2017-03-25 12:52:12 +05:30
Javier Godinez 6ba6cd01eb Updated documentation to detail aggregator 2017-03-24 22:57:48 -07:00
Carter 2a96190dac Create shodan_honeyscore.md 2017-03-24 22:25:33 -04:00
h00die 11b251b928
Land #8151 docs update for netgear_r7000_cgibin_exec 2017-03-24 19:49:53 -04:00
h00die 5f4e82bf69
Land #8131 docs for ms15-034 2017-03-24 19:45:36 -04:00
itsmeroy2012 b2e6c22fdf Documentation on adobe_flash_hacking_team_uaf updated 1.3 2017-03-25 04:02:43 +05:30
itsmeroy2012 cb65a4d909 Documentation on adobe_flash_hacking_team_uaf updated 1.2 2017-03-25 03:58:06 +05:30
itsmeroy2012 52ff073d51 Documentation on adobe_flash_hacking_team_uaf updated 1.1 2017-03-25 03:56:19 +05:30
itsmeroy2012 4b36a42eff Documentation on adobe_flash_hacking_team_uaf 2017-03-25 03:54:17 +05:30
Carter dd974612e8 Update netgear_r7000_cgibin_exec.md 2017-03-24 15:43:06 -04:00
Pearce Barry 9db2e9fbcd
Land #8146, Add Default Secret & Deserialization Exploit for Github Enterprise 2017-03-24 14:38:47 -05:00
wchen-r7 dfaec8bf3a
Land #8148, Add module documentation for axis2_deployer 2017-03-24 11:55:51 -05:00
dmohanty-r7 92c0748447
Land #8102, Add a plugin to notify new sessions via SMS 2017-03-24 11:17:59 -05:00
itsmeroy2012 03d6e4563c Documentation on axis2_deployer updated 1.2 2017-03-24 21:14:56 +05:30
itsmeroy2012 2f1eefebc7 Documentation on axis2_deployer updated 1.1 2017-03-24 21:12:33 +05:30
itsmeroy2012 ffacac10c7 Documentation on axis2_deployer 2017-03-24 21:06:19 +05:30
wchen-r7 3b062eb8d4 Update version info 2017-03-23 13:46:09 -05:00
wchen-r7 2488100996 Add bounty info 2017-03-23 11:13:47 -05:00
wchen-r7 196a0b6ac4 Add Default Secret & Deserialization Exploit for Github Enterprise 2017-03-23 10:40:31 -05:00
Mehmet Ince c87ea2107b
Add documentation 2017-03-23 12:49:50 +03:00
bwatters-r7 a93aef8b7a
Land #8086, Add Module Logsign Remote Code Execution 2017-03-22 11:33:49 -05:00
itsmeroy2012 b06d17baa1 Documentation on ms15_034_http_sys_memory_dump updated 1.5 2017-03-22 17:37:59 +05:30
William Vu 1a8e8402ae
Land #8113, SysGauge SMTP server validation sploit 2017-03-21 16:45:42 -05:00
bwatters-r7 69769b1ca4
Land #8036, Fix run_as_psh with domain accounts 
Missed a commit in this PR last time due to typo updating
the PR before merge.
 2017-03-21 09:17:59 -05:00
itsmeroy2012 00359b85c5 Documentation on ms15_034_http_sys_memory_dump updated 1.4 fixing white spaces 2017-03-21 19:43:35 +05:30
itsmeroy2012 d54e35f40e Documentation on ms15_034_http_sys_memory_dump updated 1.3 fixing white spaces 2017-03-21 17:40:07 +05:30
itsmeroy2012 07d88a71cf Documentation on ms15_034_http_sys_memory_dump updated 1.2 removing show opitions 2017-03-21 17:33:27 +05:30
Louis 662673ace8 Update run_as_psh.md 2017-03-21 10:51:04 +11:00
Pearce Barry c4279a837a Minor formatting/spelling/verbiage changes. 2017-03-20 17:37:12 -05:00
Craig Smith 2fde287424 Initial patch for rftransceiver (RfCat / YardstickOne) 2017-03-20 17:36:16 -05:00
itsmeroy2012 7ffa952dbb Documentation on ms15_034_http_sys_memory_dump updated 1.1 2017-03-20 21:33:33 +05:30
Pearce Barry 06ebb22a8f
Land #8065, Zigbee Hardware Bridge Extension 2017-03-20 10:44:15 -05:00
itsmeroy2012 46d46eef77 Documentation on ms15_034_http_sys_memory_dump 2017-03-20 19:18:58 +05:30
Louis e6afd68624 Update run_as_psh.md 2017-03-20 16:17:07 +11:00
h00die 35a952490d
Land #8130 docs for winrm_script_exec 2017-03-19 14:47:41 -04:00
itsmeroy2012 18fec876ce Documentation on winrm_script_exec updated 1.4 2017-03-19 23:43:08 +05:30
itsmeroy2012 90744b0162 Documentation on winrm_script_exec updated 1.3 2017-03-19 23:31:30 +05:30
itsmeroy2012 d22e43dedd Documentation on winrm_script_exec updated 1.2 2017-03-19 23:11:23 +05:30
itsmeroy2012 02a3b172b4 Documentation on winrm_script_exec updated 1.1 2017-03-19 21:52:46 +05:30
itsmeroy2012 5ab0129f0f Documentation on winrm_script_exec 2017-03-19 18:27:00 +05:30
Javier Godinez 26d344a0ef Initial checkin of launch instances module 2017-03-18 21:52:49 -07:00
h00die 06e6a973ce
land #7944 a scanner for Carlo Gavazzi energy meters 2017-03-18 10:35:43 -04:00
William Webb 1180bd6ed7
Land #8037, priv_migrate improvements 2017-03-17 13:19:51 -05:00
Pearce Barry 095a110e65
Code and doc tweaks (minor). 
Only one behavior change in the scan loop of zstumbler.rb to, when doing a scan across all the channels, keep it from retrying channel 11 again one last time just before it exits.
 2017-03-16 21:43:36 -05:00
Chris Higgins 7a12e446a0 Updated documentation and fixed module header. Whoops, copy/paste fail. 2017-03-16 21:28:24 -05:00
bwatters-r7 ab75794cd4
Land #8071, Add API to send an MMS message to mobile devices 2017-03-16 11:57:34 -05:00
James Lee 1daee6891e
Cosmetic 2017-03-16 11:37:14 -05:00
wchen-r7 d4ee254057
Land #8076, Add Easy File Sharing FTP Server Version 3.6 traversal 2017-03-15 16:17:13 -05:00
wchen-r7 8afe6a9061 Update easy_file_sharing_ftp and add documentation 2017-03-15 16:14:41 -05:00
Brent Cook b65919e7b1
Land #7956, Add QNAP NAS/NVR administrator hash disclosure 2017-03-15 11:12:59 -05:00
William Vu 94d445ff48 Remove an old habit with curl 2017-03-15 05:18:50 -05:00
William Vu f58c6b96d8 Add addendum to module doc 2017-03-15 05:03:35 -05:00
William Vu 559e426f37 Add module doc to appease the @h00die god 2017-03-15 04:48:49 -05:00
Chris Higgins b3fbbbee34 Spelling is hard 2017-03-14 23:34:00 -05:00
Chris Higgins cc4f18e6c5 Add sysgauge_client_bof module and documentation 2017-03-14 23:29:19 -05:00
wchen-r7 1736332638
Land #8103, Add CVE-2017-5638, Struts2 Content-Type OGNL injection 2017-03-14 16:10:49 -05:00
wchen-r7 295ac63a1c Add doc for struts2_content_type_ognl 2017-03-14 16:09:44 -05:00
wchen-r7 bb4d6e17c8 Resolve #8026, Add a plugin to notify new sessions via SMS 
This plugin will notify you of a new session via SMS.

It also changes the SMS text format to MIME.

Resolve #8026
 2017-03-13 16:13:59 -05:00
William Vu fe4f20c0cc
Land #7968, NETGEAR R7000 exploit 2017-03-10 16:02:30 -06:00
dmohanty-r7 25bfa88c46
Land #7877, Add mDNS query spoofing service 2017-03-10 15:44:57 -06:00
dmohanty-r7 45e0a3d0f8
Add module docs for mdns_response 2017-03-10 15:42:07 -06:00
Mehmet Ince 3ed42e5937
Adding iso download link to doc 2017-03-10 17:50:21 +03:00
Mehmet Ince f6bac3ae31
Add iso link to md file and change CheckCode code 2017-03-10 13:00:49 +03:00
wchen-r7 d6bc56d665 Update doc 2017-03-08 11:49:19 -06:00
wchen-r7 ed22902fd4 Support the subject field 2017-03-08 11:40:08 -06:00
William Vu 1c9a8907b6
Land #7949, nfsmount and snmp_login docs 2017-03-08 06:37:55 -06:00
Brent Cook 419a7d991f
Land #8057, web_deliver documentation improvements 2017-03-08 05:34:30 -05:00
Brent Cook 3820de67c3 style consistency, simplifications, and clarifications 2017-03-08 05:33:44 -05:00
Brent Cook 974e351300
Land #7953, rpc_portmapper docs 
Merge remote-tracking branch 'upstream/pr/7953' into upstream-master
 2017-03-08 05:11:33 -05:00
wchen-r7 036a443a41 Add Google Fi gateway 2017-03-07 17:02:32 -06:00
wchen-r7 dc13b84189 Bring mms branch up to date w/ master 2017-03-07 16:13:39 -06:00
Jin Qian 7e19486a97
Merge branch 'wchen-r7-sms' into upstream-master 
Merged #8047
 2017-03-07 15:56:00 -06:00
wchen-r7 d32f08f969 Add doc and fix mms message class 2017-03-07 14:40:37 -06:00
wchen-r7 6c53dd5231 Fix a typo 2017-03-07 12:50:59 -06:00
Craig Smith 97ad8be7ff Added some Zigbee Documentation 2017-03-06 22:42:15 -08:00
wchen-r7 34bca9055e Update doc 2017-03-06 11:08:51 -06:00
wchen-r7 7e16fc97f5 Update doc 2017-03-06 10:47:46 -06:00
h00die dfd492611c add shell to meterpreter upgrade example 2017-03-05 20:10:26 -05:00
h00die 4317aa10e1 @hurdlecrew recommendation 2017-03-05 13:45:23 -05:00
h00die 4f61fe992b spelling, formatting 2017-03-04 15:51:11 -05:00
h00die e2468d8f1e spelling, formatting 2017-03-04 15:48:26 -05:00
h00die feaa4b08e9 include example vuln pages 2017-03-04 15:40:52 -05:00
wolfthefallen 6c69e13e00 Updated based on comments 2017-03-04 11:28:30 -05:00
wolfthefallen 3e9480ebfa Added documentation 2017-03-04 09:50:30 -05:00
h00die f02c323c7e
land #8040, docs for ms14-064 2017-03-03 21:26:35 -05:00
h00die 8486624ed1 box to boxes 2017-03-03 21:19:01 -05:00
William Webb d76e80bc44
Land #7424, Ektron Webservices XSLT Remote Code Execution 2017-03-03 12:12:21 -06:00
wchen-r7 4d44911d5c Do doc for google fi 2017-03-03 11:38:47 -06:00
wchen-r7 d9b21b16a9 Support Google Project Fi gateway 2017-03-03 11:36:13 -06:00
wchen-r7 fa43928a8e Rm Sprint from doc 2017-03-03 11:27:31 -06:00
Rok Ajdnik 354fabe123
Address pull request feedback 2017-03-03 15:37:01 +01:00
Carter 7556768dcf Update netgear_dnslookup_cmd_exec.md 2017-03-02 21:47:58 -05:00
Carter 4a974d50b5 Create netgear_dnslookup_cmd_exec.md 2017-03-02 19:43:15 -05:00
wchen-r7 6ad8afb8b3 Add API to send a text message (SMS) to mobile devices 2017-03-02 16:47:55 -06:00
juushya fafd35330d Add epmp1000 dump hashes module 2017-03-03 02:22:34 +05:30
juushya 6bd09c142f Minor edits 2017-03-03 00:53:17 +05:30
Rok Ajdnik 6dbb7a2975
Add documentation for ms14_064_ole_code_execution 2017-03-01 20:05:20 +01:00
h00die fb5e090f15 fixes from jvoisin 2017-02-28 20:09:26 -05:00
Mehmet Ince e5636d6ce1
Adding logsign rce module and doc 2017-02-28 21:04:37 +03:00
Josh Hale e05e08a54f Update module doc 2017-02-27 20:33:45 -06:00
h00die da1e58d907 updates to doc template 2017-02-27 21:08:18 -05:00
h00die a910f38a11
land #8029 syntax fixes for some docs 2017-02-27 21:01:46 -05:00
h00die 8197d14f30 fix some documentation 2017-02-27 20:58:03 -05:00
h00die a8609f5c66 ntfs-3g lpe 2017-02-25 23:09:22 -05:00
h00die 041238f77c
land #7896 Binom3 power meter scanner and brute 2017-02-23 19:49:50 -05:00
wchen-r7 6a6c8c9828
Land #7997, Add SSH login and pubkey docs 2017-02-23 13:38:10 -06:00
wchen-r7 af8e64958e Small changes 2017-02-23 13:36:39 -06:00
William Vu 236606838a
Land #7987, MVPower DVR exploit 2017-02-23 01:46:04 -06:00
Brendan Coles c9e09491dd Add documentation 2017-02-23 07:44:45 +00:00
Brendan Coles 0b34efab43 Add documentation 2017-02-23 06:59:05 +00:00
William Vu bf47ac2fa9
chmod -x a couple module docs 
Hat tip @bcoles.
 2017-02-22 23:43:54 -06:00
h00die 6a7dab0b1c add key explain line 2017-02-22 22:15:05 -05:00
h00die aee6707713 ssh_login docs 2017-02-22 22:13:07 -05:00
bwatters-r7 40e6413867
Land #7980, Add a sploit for CVE-2017-5982, kodi file traversal 2017-02-22 13:11:48 -06:00
wchen-r7 48f6740fee
Land #7969, Add Module Trend Micro IMSVA Remote Code Execution 2017-02-21 17:29:04 -06:00
bwatters-r7 a9b9a58d4d
Land #7893, Add Module AlienVault OSSIM/USM Remote Code Execution 2017-02-21 13:35:56 -06:00
William Webb 83cc28a091
Land #7972, Microsoft Office Word Macro Generator OS X Edition 2017-02-21 13:26:42 -06:00
jvoisin 73eed104a9 Take into account @h00die's comments. 2017-02-20 13:22:20 +01:00
jvoisin 7bd6aff1cf Add a sploit for CVE-2017-5982 2017-02-19 21:57:27 +01:00
Brent Cook 052bf7d99c
fix some module documentation formatting 2017-02-17 18:12:57 -06:00
Brent Cook 24151a9c27
Land #7753, Add auxiliary RomPager misfortune cookie authentication bypass 2017-02-17 18:07:15 -06:00
Brent Cook 2c570b6709
Land #7942, Microsoft SQL Server Clr Stored Procedure Payload Execution 2017-02-17 17:28:54 -06:00
Brent Cook 014fe2520c module docs 2017-02-17 17:28:30 -06:00
Carter 3fac632ce1 Update netgear_r7000_cgibin_exec.md 2017-02-17 16:36:45 -05:00
wchen-r7 056313e411 Update doc 2017-02-16 12:49:29 -06:00
wchen-r7 7ec5ec6442 Update doc 2017-02-16 12:39:24 -06:00
wchen-r7 34f074441d Move doc 2017-02-16 12:33:05 -06:00
Carter c9e8254611 Update netgear_r7000_cgibin_exec.md 2017-02-16 09:00:27 -05:00
Carter af62fe9f6d Update netgear_r7000_cgibin_exec.md 2017-02-16 08:58:45 -05:00
Carter d775c66adf Start docs 2017-02-16 08:44:36 -05:00
h00die 843f559069
land #7917 piwik exploit module 2017-02-14 00:52:27 -05:00
h00die 295526b876 eat your heart out @wvu-r7 2017-02-13 23:08:19 -05:00
Christian Mehlmauer d7f675534b
add documention 2017-02-13 23:11:46 +01:00
h00die 4f8e208e16 formatting 2017-02-12 23:22:13 -05:00
h00die 23ec1ab93a snmp_login docs 2017-02-12 23:10:50 -05:00
h00die d395fbaa94 nfsmount docs added blog post 2017-02-12 21:56:53 -05:00
h00die 3e75852662 nfsmount docs 2017-02-12 21:54:42 -05:00
h00die f121a64779 +1 professionalism :) 2017-02-12 17:25:56 -05:00
juushya e6bfbb7c78 Added random cookie gen, res checks, & minor updates 2017-02-12 16:55:11 +05:30
juushya 906ca6c24e Add Carlo Gavazzi module 2017-02-11 11:18:43 +05:30
bwatters-r7 272d1845fa
Land #7934, Add exploit module for OpenOffice with a malicious macro 2017-02-09 13:42:58 -06:00
wchen-r7 188f7370d4 Fix grammar issues 2017-02-09 11:53:11 -06:00
Christian Mehlmauer 8ade9b8aae
Land #7905, WordPress content injection module 2017-02-09 15:49:50 +01:00
wchen-r7 cf8aad9ee5 Add demo 2017-02-08 16:51:25 -06:00
wchen-r7 3e2e15c7b8 Add doc for openoffice_document_macro 2017-02-08 16:41:42 -06:00
William Vu e76b53c5d1 Update doc 2017-02-08 09:25:16 -06:00
William Vu 3fdd3d3651 Move .rb module doc to .md 
I'm tired.
 2017-02-08 06:21:43 -06:00
William Vu 8493a734cb Add module doc to appease the @h00die god 
Straight rip of the PR description, yo.
 2017-02-08 05:35:52 -06:00
William Webb badca287dd
Land #7906, Add Microsoft Word malicious macro document generator 2017-02-06 14:44:09 -06:00
h00die f531366d89
Land #7790 an aux module to extract Meteocontrol Weblog admin password 2017-02-06 15:23:06 -05:00
Mehmet Ince fdbed0f6db
Updating documentation with a new download page url 2017-02-03 23:39:43 +03:00
wchen-r7 e891063b74 Update doc 2017-02-03 14:29:29 -06:00
wchen-r7 5db1d958b0 Update doc 2017-02-03 14:08:28 -06:00
wchen-r7 6e692b1a1c Update doc 2017-02-03 14:03:48 -06:00
wchen-r7 f3f774b9c7 Add demo 2017-02-03 12:01:51 -06:00
wchen-r7 92e065c21b Update doc 2017-02-03 11:48:18 -06:00
wchen-r7 2457968a24 Update doc 2017-02-03 11:45:34 -06:00
wchen-r7 e9ba6fe7fd Add doc 2017-02-02 20:42:46 -06:00
Pearce Barry 23c2787d57
Land #7795, Hardware Bridge API. 
Initial bridge API that supports the HW rest protocol.
 2017-02-02 08:47:59 -06:00
Pearce Barry 16de745437
Minor code cleanups/corrections. 2017-02-01 16:12:45 -06:00
Craig Smith f4a720acd5 Merge branch 'hwbridge' of https://github.com/OpenGarages/metasploit-framework into hwbridge 2017-02-01 09:55:57 -08:00
Craig Smith 25f6717417 Updated documentation to discuss supported hardware. 2017-02-01 09:55:25 -08:00
h00die f114d36218 add ebay device to docs 2017-02-01 05:20:47 -05:00
h00die c0f1c554cc add ebay device to docs 2017-02-01 05:19:39 -05:00
h00die f224038cd3 docs formatting 2017-01-31 22:01:14 -05:00
h00die 76ea5bc20a docs update 2017-01-31 21:56:05 -05:00
juushya 58a50d7dd1 Minor edits 2017-02-01 04:46:05 +05:30
juushya 6d6db2f40f Add epmp1000 dump config module 2017-02-01 04:42:47 +05:30
juushya 423648e347 Minor edits 2017-02-01 03:53:14 +05:30
juushya 59e31e26f2 Add Binom3 module 2017-02-01 03:35:35 +05:30
Mehmet Ince 40108c2374
first commit 2017-01-31 14:15:46 +03:00
Mark Bergman (aka xychix) eef61cb3a4 Update harakiri.md 
Based on review from @h00die
 2017-01-29 18:02:12 +01:00
William Webb dd60fc3598
move cisco_webex_ext to exploits/windows/browser/ 2017-01-27 16:59:20 -06:00
Brent Cook 4480ea7877
Land #7827, Cisco Firepower Management Console LoginScanner 2017-01-27 16:26:40 -06:00
Brent Cook a4dd1fc846
Land #7805, Add CVE-2016-6435 - Cisco Firepower Management Console Dir Traversal 2017-01-27 16:09:14 -06:00
wchen-r7 38ea62f311
Land #7871, Add Cisco WebEx Extension 1.0.1 Remote Code Execution 2017-01-27 15:37:27 -06:00
wchen-r7 6a58a3d8e5 Update cisco_webex_ext doc 2017-01-27 15:36:57 -06:00
Mark Bergman (aka xychix) a2eb380fd9 Update harakiri.md 2017-01-27 10:32:43 +01:00
Mark Bergman (aka xychix) 651f1a0870 Create harakiri.md 2017-01-27 10:31:12 +01:00
h00die f846535d78
Land #7876 which adds an Advantech Webaccess credential gatherer 2017-01-26 19:37:36 -05:00
wchen-r7 7151930dec Update md doc 2017-01-26 16:34:09 -06:00
wchen-r7 b989675762 Update advantech_webaccess_login.md 2017-01-26 16:06:30 -06:00
wchen-r7 94bc44b485 Add Advantech WebAccess Post Auth Credential Collector 2017-01-26 14:53:59 -06:00
wchen-r7 781bc8420a Add Advantech WebAccess LoginScanner module 2017-01-26 13:54:50 -06:00
William Webb cc9ecf34c9
remove mention of hp dataprotector from module doc 2017-01-26 13:42:34 -06:00
William Webb 94f9971300
add module doc and remove the word EXPLOIT from document title 2017-01-26 13:36:18 -06:00
Craig Smith 754ea84d65 Fixed spelling of the word session 2017-01-25 17:43:49 -08:00
wchen-r7 f4db90edeb
Land #7852, Firefox nsSMILTimeContainer::NotifyTimeChange() rce 2017-01-23 11:56:01 -06:00
Brent Cook ff2b8dcf99
Revert "Land #7605, Mysql privilege escalation, CVE-2016-6664" - premature merge 
This reverts commit 92a1c1ece4, reversing
changes made to 9b16cdf602.
 2017-01-22 19:16:33 -06:00
Brent Cook 92a1c1ece4
Land #7605, Mysql privilege escalation, CVE-2016-6664 2017-01-22 17:17:28 -06:00
Brent Cook 19f485b0ef
Land #7830, Added docs for tomcat_mgr_deploy and tomcat_mgr_upload 2017-01-22 11:04:13 -06:00
Brent Cook b493ee98b6
Land #7857, added apache_commons_fileupload_dos docs 2017-01-22 10:54:32 -06:00
Mehmet Ince 58c1f6f67d Merge branch 'master' of https://github.com/rapid7/metasploit-framework into trend_micro_imsva_exec 2017-01-22 11:18:34 +03:00
h00die 103bc8e8f0 doc fixes 2017-01-20 19:04:57 -05:00
h00die 15591aff83 apache_commons_fileupload_dos docs 2017-01-20 19:01:27 -05:00
William Webb b6d93c05c8
actually save the correct module doc 2017-01-20 12:15:59 -06:00
William Webb 2513b5bbe5
add inital module documentation 2017-01-20 11:52:09 -06:00
Gabor Seljan 905213cc41 Add module for DiskSavvy Enterprise (EDB-40854) 2017-01-19 20:34:00 +01:00