7 Commits (5709d49aae05760905e1bd9e80f5a8506f87a662)

Author	SHA1	Message	Date
URI Assassin	35d3bbf74d	Fix up comment splats with the correct URI ... See the complaint on #4039. This doesn't fix that particular issue (it's somewhat unrelated), but does solve around a file parsing problem reported by @void-in	2014-10-17 11:47:33 -05:00
Tod Beardsley	cad281494f	Minor caps, grammar, desc fixes	2014-08-18 13:35:34 -05:00
jvazquez-r7	4e0f6dfcc7	Do minor cleanup	2014-08-15 09:10:08 -05:00
kaospunk	5ed3e6005a	Implement suggestions ... This commit addresses feedback such as adding a check function and changing the login fail case by being more specific on what is checked for. The failing ARCH_CMD payloads were addressed by adding BadChars. Last, an ARCH_PYTHON target was added based on @zerosteiner's feedback.	2014-08-13 20:26:48 -04:00
kaospunk	4e6a04d3ad	Modifications for login and key addition ... This commit adds additional support for logging in on multiple versions of Gitlab as well as adding a key to exploit the vulnerability.	2014-08-11 19:54:10 -04:00
kaospunk	a995bcf2ef	Fix URI building and failure cases ... This update uses the normalize_uri method for building URIs. Additionally, failure cases have been modified for a less generic version.	2014-08-10 19:53:33 -04:00
kaospunk	48359faaaf	Add gitlab-shell command injection module ... This request adds a module for gitlab-shell command injection for versions prior to 1.7.4. This has been tested by installing version 7.1.1 on Ubuntu and then using information at http://intelligentexploit.com/view-details.html?id=17746 to modify the version of gitlab-shell to a vulnerable one. This was done as I could not find a better method for downloading and deploying an older, vulnerable version of Gitlab.	2014-08-05 23:21:57 -04:00