Commit Graph

8492 Commits (5b6938e9423e662446c52c8700ef54e9c52cbba5)

Author SHA1 Message Date
Shelby Pace 5b81ebd81b
Land #10589, multidrop support for word xml docs 2018-09-12 11:00:11 -05:00
Brent Cook a3d74d926c
Land #9897, Fix #8404 ListenerComm Support For Exploit::Remote::TcpServer 2018-09-10 16:25:55 -05:00
Brent Cook ea2fcb6fc4
Land #10593, Refactor SSH mixins and update modules 2018-09-10 15:38:53 -05:00
William Vu 3ec4d2f22b Normalize loot type OID
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported

Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die 39a2d9d2a8 save xml files as xml 2018-09-09 21:24:39 -04:00
William Vu 35fb0d19ab Refactor SSH mixins and update modules 2018-09-05 23:53:11 -05:00
asoto-r7 14aee3a822
Added auxiliary/fileformat/multidrop support for Word XML documents 2018-09-05 11:51:48 -05:00
Wei Chen 0dea5fcfd9
Land #10565, Add Dolibarr ERP/CRM Auxiliary Module 2018-08-31 13:47:46 -05:00
Shelby Pace aa9d0d7c6c
using uri_encode 2018-08-31 08:41:25 -05:00
Shelby Pace b1151b9d12
modified login_uri 2018-08-31 08:08:46 -05:00
Shelby Pace 42af28a86a
printing and storing credentials 2018-08-30 14:17:37 -05:00
Shelby Pace 85c4abac99
storing credentials 2018-08-30 13:59:00 -05:00
Shelby Pace 7915c4ac6c
getting user credentials in response 2018-08-29 13:59:06 -05:00
Shelby Pace bb4a4b8839
initial module setup 2018-08-29 10:28:10 -05:00
Christian Mehlmauer 14fa41a376
merge changes 2018-08-29 06:09:40 +02:00
Ben Schmeckpeper ed60b767a7
Correct claymore_dos.py's CVE reference
The CVE reference shouldn't include the `CVE-` prefix
2018-08-28 13:34:02 -05:00
Christian Mehlmauer 7431ae401b
fix more errors 2018-08-28 13:49:31 +02:00
Christian Mehlmauer a66556b436
fix msftidy errors 2018-08-28 13:12:43 +02:00
William Vu 6df235062b
Land #10505, post-auth and default creds info 2018-08-24 18:08:15 -05:00
Brent Cook 51c024982c
Land #8914, refactor auxiliary/admin/http credential storage 2018-08-24 13:18:32 -05:00
Brent Cook 0141fc109d don't backtrace if there is not a response 2018-08-24 13:17:06 -05:00
William Vu 578d2375d7 Add full disclosure for CVE-2018-15473 2018-08-22 14:49:13 -05:00
Wei Chen 2780ae6ba9 Update false negatives 2018-08-21 08:50:26 -05:00
William Vu 06582a00a0 Add module doc for ssh_enumusers
And update description in module.
2018-08-20 19:26:51 -05:00
William Vu 819b8504e2 Add a little better randomization 2018-08-20 17:10:14 -05:00
William Vu b38a442bb0 Refactor once more with feeling
Also flesh out malformed-packet auth method. Let's not be lazy here. :-)
2018-08-20 16:25:32 -05:00
William Vu 75403d7e05 Add testing note about logging 2018-08-17 20:20:12 -05:00
William Vu 7287779555 Make false positive check optional
I couldn't repro this with pubkey-only auth. It also goes to the log.
2018-08-17 20:05:04 -05:00
William Vu 8e3af2dcfc Add CVE-2018-15473 to ssh_enumusers 2018-08-17 18:48:44 -05:00
William Vu 5096eee2ec
Land #10120, npm "marked" ReDoS module 2018-08-16 15:01:12 -05:00
William Vu 3c1befdacb Clean up module 2018-08-16 15:00:56 -05:00
William Vu 60c0272270 Make style consistent 2018-08-15 21:27:40 -05:00
Kevin Kirsche 45e0b53fc8 Fix spacing issue with rocket 2018-08-15 14:59:52 -07:00
Kevin Kirsche 09434bd57c Fix tabbing caused by incorrect VM nvim configuration 2018-08-15 07:00:45 -07:00
Kevin Kirsche 905f26372d Remove host key checks on ssh scanner modules 2018-08-15 06:48:35 -07:00
Jacob Robles 85a137e0a0
Land #10420, cgit < 1.2.1 Directory Traversal 2018-08-13 16:25:23 -05:00
Jacob Robles 5a3d040d71
Fix module, Add documentation 2018-08-13 15:48:21 -05:00
Shelby Pace ce8cbd64d4
Land #10404, Add Path Traversal Oracle GlassFish 2018-08-13 11:15:26 -05:00
Wei Chen 6223685c37 Update auth requirement for json metadata 2018-08-07 16:42:00 -05:00
Dhiraj Mishra 14b12f38d0
Fixing 2018-08-05 23:26:18 +05:30
Dhiraj Mishra 9502c26dc1
Updated 2018-08-05 19:14:12 +05:30
Dhiraj Mishra 8a175f50cd
Indentation 2018-08-05 00:15:04 +05:30
Dhiraj Mishra ebcc9a3c20
Fixing Indentation 2018-08-04 19:16:12 +05:30
Dhiraj Mishra 502c103d37
cgit < 1.2.1 Directory Traversal 2018-08-04 18:52:24 +05:30
Brent Cook 78f66986e9
Land #10386, Add IEC104 client module 2018-08-04 07:43:15 -05:00
Brent Cook 919da41aab
Land #9692, Add DoS module for Siemens Siprotec 4 2018-08-04 07:20:57 -05:00
Dhiraj Mishra 458fca6ff0
Fixing
Thanks bcoles
2018-08-04 13:15:25 +05:30
Brendan Coles 1c82592882
Land #10358, Add Dicoogle PACS Directory Traversal scanner module 2018-08-04 05:31:16 +00:00
h00die e5dcfa62c9 remove encoding and escaping 2018-08-03 20:23:33 -04:00
Michael John dc2f893b31 Amended code formating
This commit incorporates suggested formatting changes based on feedback and rubocop tool run:
Corrected indentation issues
Using "<<" instead of "+=" for string append
Modified if/else branches as per tool suggestion
2018-08-03 20:13:48 +02:00