Jacob Robles
8d12118d1f
Add get_user_spns external module and documentation
2018-03-21 06:26:15 -05:00
Touhid M Shaikh
a506efe0b6
playsms_uploadcsv_exec.rb
...
PlaySMS 1.4 Remote Code Execution using Phonebook import Function in import.php
2018-03-21 14:13:52 +05:30
Jacob Robles
ca7caae622
Change External Module Type Names
...
Change the a couple of external module type names
to be consistent with the template files.
2018-03-20 10:19:57 -05:00
Summus6
b865d4fee2
Fix CachedSize for windows/x64/reverse_(win)http(s) payloads
2018-03-20 11:27:43 +01:00
Brendan Coles
ac9f506b45
Update tested versions
2018-03-20 02:49:56 +00:00
Mehmet İnce
53eabfc1df
Update documentation and add check before exploit
2018-03-19 23:27:18 +03:00
Touhid M Shaikh
f012916742
Delete playsms_uploadcsv_exec.rb
2018-03-18 13:57:53 +05:30
Touhid M Shaikh
0e0fcdf727
PlaySMS 1.4 RCE
...
PlaySMS 1.4 Remote Code Execution using Phonebook import Function in import.php
2018-03-18 13:46:30 +05:30
Jeffrey Martin
4801021aba
Land #9613 , add bind_named_pipe x86
2018-03-17 15:53:06 -05:00
Brent Cook
44d5022380
Land #9529 , Add module for HP iLO CVE-2017-12542 authentication bypass
2018-03-16 16:50:54 -05:00
Brent Cook
d1722d507b
handle reset from the target on exploit
2018-03-16 16:46:50 -05:00
Brent Cook
65ae1e33e1
Land #9694 , move ssh platforms to lib
2018-03-16 12:49:57 -05:00
Jacob Robles
1b2f1ced02
Land #8422 , Typo3 News Module Sql Injection exploit
2018-03-15 10:55:04 -05:00
Jacob Robles
ba0d990273
Documentation added and Error Checks
2018-03-15 10:46:08 -05:00
Jacob Robles
9e23997c3d
Added Error Handling
2018-03-14 08:16:17 -05:00
Jacob Robles
1d51cf6d24
Implement Suggested Changes
2018-03-14 06:15:49 -05:00
Mehmet İnce
b55a750fa9
Fix typo and couple tiny nitpicks
2018-03-14 11:51:21 +03:00
Jacob Robles
64a51c1bd7
Save Credentials and IP
2018-03-13 08:47:08 -05:00
Mehmet İnce
889c914b3d
Updating documentation and minor code changes
2018-03-13 12:05:27 +03:00
Touhid M Shaikh
ea3378753b
syntax error fixed on 70 line
...
improve check payload was uploaded or not condition using AND condition on line 121
2018-03-13 14:15:03 +05:30
Tim W
39e2cddf70
update python payload cached size
2018-03-13 15:30:54 +08:00
Mehmet İnce
ec10a82c56
Make the rubocop happy
2018-03-13 09:44:13 +03:00
h00die
97dbc1273a
copy pasta
2018-03-12 20:14:08 -04:00
Mehmet İnce
2fd9b0b77b
Fixing rubocop errors
2018-03-13 01:40:01 +03:00
Brent Cook
1587b5b682
Land #9686 , add ipv6 to slowloris, rhost to non-scanner modules
2018-03-12 16:13:21 -05:00
Auxilus
ef515d256d
msftidy fixes
2018-03-13 00:34:25 +05:30
Auxilus
2c52498d4a
Update smb_ms17_010.rb
2018-03-13 00:28:37 +05:30
Auxilus
6e9a4916f5
scanner update
2018-03-13 00:23:18 +05:30
Touhid M Shaikh
5e30982184
check fucktion and some words fixed
...
all changes done which is bcoles suggested
2018-03-12 21:03:34 +05:30
Brent Cook
d86dcbc237
Land #9632 , owa_login and auth_brute enhancements
2018-03-12 10:31:20 -05:00
Mzack9999
5ee50c5fab
Username and password reported as credentials
2018-03-12 07:01:03 -05:00
Mzack9999
3d6af4c7ee
Removed mail from author section
2018-03-12 07:01:03 -05:00
Mzack9999
b0ed8c4702
code cleanup
2018-03-12 07:01:03 -05:00
Mzack9999
7b781d53c9
Small code refactoring, added verbose output
2018-03-12 07:01:03 -05:00
Mzack9999
fe89e2d391
Corrected check method, warning in case of absence of news and TARGETURI parameter
2018-03-12 07:01:03 -05:00
Mzack9999
f09d9a8994
Solved msftidy.rb issues
2018-03-12 07:01:02 -05:00
Mzack9999
dbba27cc97
Fixed minor issues and added automatic detection of Patten1/Pattern2
2018-03-12 07:01:02 -05:00
Mzack9999
63444a2c43
Corrected wrong label in password hash message
2018-03-12 07:01:02 -05:00
Mzack9999
4a40f40c14
Typo3 News Module Sql Injection exploit
2018-03-12 07:00:45 -05:00
Touhid M Shaikh
9b0ba4a6fa
clipbucket_fileupload_exec
2018-03-12 14:17:13 +05:30
Luis Hernandez
dddad415a5
add Msf::Exploit::Remote::HTTP::Joomla
2018-03-11 07:59:26 -05:00
Jacob Robles
615f6b02af
varnish no auth file read
2018-03-09 11:25:13 -06:00
Jacob Robles
1fd0087a97
Land #7654 , varnish file read
2018-03-09 10:59:04 -06:00
Jacob Robles
a458cb9ebc
varnish file read msftidy fixes
2018-03-09 10:56:52 -06:00
Jacob Robles
037559023a
Update connect/disconnect varnish
...
[ticket: #7654 ]
2018-03-09 10:37:14 -06:00
Luis Hernandez
37bf4d118a
Changes suggested by h00die 0803
2018-03-09 09:55:50 -05:00
Jacob Robles
ea78e21961
Documentation accuracy
2018-03-09 07:43:12 -06:00
Jacob Robles
2735ae57cb
Documentation accuracy
2018-03-09 07:31:55 -06:00
Auxilus
9df99e8ce3
Update smb_ms17_010.rb
2018-03-09 16:10:20 +05:30
Auxilus
56fe70d84b
Update smb_ms17_010.rb
2018-03-09 16:07:09 +05:30
Mehmet İnce
4b483e079b
Adding assigned CVE number
2018-03-09 12:25:19 +03:00
h00die
ec7a62bc4c
move ssh platforms to lib
2018-03-08 21:23:11 -05:00
Luis Hernandez
048d0d1fe4
Changes suggested by h00die
2018-03-08 20:13:01 -05:00
Auxilus
478f01d0d9
fix format
2018-03-09 02:25:58 +05:30
Jacob Robles
24079c345d
Style guide and grammar fixes
2018-03-08 07:30:02 -06:00
Jeffrey Martin
b9ad1f2872
Land #9687 , bump payloads, fix PHP meterpreter message parsing
2018-03-07 18:48:56 -06:00
Jeffrey Martin
26481d503e
one more payload size adjustment
2018-03-07 18:48:10 -06:00
Brent Cook
b977b1c951
bump payload sizes
2018-03-07 17:41:58 -06:00
Adam Cammack
9a8f1ace2d
Add slowloris support for IPv6 and hostnames
...
Replace manual socket creation with `socket.create_connection` to get
auto-detection goodness.
2018-03-07 17:06:04 -06:00
Mehmet İnce
611b208267
Adding ManageEngine Application Manager RCE
2018-03-07 23:54:01 +03:00
Jacob Robles
5a2f197c47
Remove redundant RPORT
2018-03-07 14:41:51 -06:00
Jacob Robles
9ce6c2ae32
Remove redundant RPORT
2018-03-07 14:31:58 -06:00
Jacob Robles
15269ec3ce
Land #9678 , Add memcached UDP version scanner
2018-03-07 10:14:29 -06:00
Jacob Robles
86dd382e6a
Land #9554 , Eclipse Equinoxe OSGi console RCE
2018-03-07 08:41:31 -06:00
Fab
e8a227b1a6
Changes as requested by jhart-r7:
...
- Default Username / Password are now random
- Doc fixed
- REST typo fixed
2018-03-07 10:48:05 +01:00
Jon Hart
a69c2e29d2
Correct comment
2018-03-06 18:16:22 -08:00
Jon Hart
1e04fa009f
Fix style
2018-03-06 18:13:50 -08:00
Jon Hart
74ec9f00e7
Add WIP memcached UDP version scanner
2018-03-06 17:54:00 -08:00
Jon Hart
e72372d6d8
Add disclosure date and correct CVE for memcached amp
2018-03-06 16:04:00 -08:00
Brent Cook
d6871f5733
Land #9614 , Juniper post enum module
2018-03-06 10:29:56 -06:00
Jacob Robles
f6ebce2440
Update User List
2018-03-06 06:38:06 -06:00
Jacob Robles
5fde6bf5d3
Update Code
2018-03-05 22:39:16 -06:00
Jacob Robles
4ace73a3f9
Added references, fixed code
2018-03-05 22:00:28 -06:00
bwatters-r7
e878e19bbd
Land #9665 , Add missing reverse_tcp_rc4 payload tests.
...
Merge branch 'land-9665' into upstream-master
2018-03-05 17:18:04 -06:00
William Vu
176fb13c84
Fix #9650 , missed code from TelnetEnable refactor
...
1. Functionality was added incrementally, and I missed an opportunity to
consolidate a few methods under @do_exploit.
2. The Capture mixin can raise RuntimeError for a number of different
reasons, not just a lack of root privileges.
tl;dr Fix my incompetence and laziness. :-)
I don't think EDB and friends usually get these updates. :(
2018-03-05 14:46:27 -06:00
Jacob Robles
57118e1265
msftidy fix
2018-03-05 13:37:32 -06:00
Jacob Robles
a4f48eb80f
Add GitStack v2.3.10 RCE
2018-03-05 13:25:41 -06:00
Jon Hart
3028dccd7a
Land #9644 , @xistence's memcached stats amplification scanner
2018-03-05 09:02:28 -08:00
Luis Hernandez
d945734f43
Add 2017-8917 RCE for Joomla 3.0.7
2018-03-04 22:17:49 -05:00
Jeffrey Martin
eac7cc63fc
add missing payload tests
2018-03-04 17:54:52 -06:00
Jon Hart
f2de2a7f21
Appease most of rubocop's concerns
2018-03-04 07:17:25 -08:00
Jon Hart
2edb2dd8d0
Add CVE; clarify vuln name
2018-03-04 07:13:28 -08:00
h00die
ea62497385
Land #9658 spelling and grammar fixes
2018-03-04 06:24:59 -05:00
Biswajit Roy
3925686173
Fixed error in my correction
...
Changed from `an username` to `a username`
2018-03-03 10:16:44 +05:30
William Vu
6dbf9445c9
Add MAC address discovery
2018-03-02 19:18:30 -06:00
William Vu
107512498c
Add check method
2018-03-02 19:16:37 -06:00
William Vu
25f36fb926
Refactor code into new methods
2018-03-02 19:16:37 -06:00
William Vu
109bc87ffb
Check for nil, EOFError, and zero-length response
2018-03-02 19:15:20 -06:00
William Vu
bcdfebf93c
Add a vprint for creds we chose
2018-03-02 19:15:19 -06:00
William Vu
4418a0de02
Enhance detection of telnetenabled vs. telnetd
2018-03-02 19:15:19 -06:00
William Vu
fba30d47a2
Use default creds specific to protocol
2018-03-02 19:15:18 -06:00
William Vu
1f40afea9c
Add automatic target for detection of TCP or UDP
2018-03-02 19:15:18 -06:00
William Vu
a5e5b618fd
Add print statements I forgot
2018-03-02 19:15:17 -06:00
William Vu
e87681f2c4
Add NETGEAR TelnetEnable
2018-03-02 19:15:17 -06:00
bwatters-r7
0d07d44b14
ReLand #9565 , Reverse TCP x64 RC4 via max3raza's rc4_x64 asm
...
This reverts commit 7964868fcd
.
2018-03-02 16:09:52 -06:00
bwatters-r7
7964868fcd
Revert "Land #9565 , Reverse TCP x64 RC4 via max3raza's rc4_x64 asm"
...
This reverts commit fcc579377f
, reversing
changes made to 95cd149378
.
2018-03-02 08:29:48 -06:00
bwatters-r7
fcc579377f
Land #9565 , Reverse TCP x64 RC4 via max3raza's rc4_x64 asm
2018-03-02 07:34:45 -06:00
Biswajit Roy
38c42f3b10
Fixed Typos
...
Fixed minor typing errors.
2018-03-02 17:38:19 +05:30
Green-m
18a1593de7
Clean up registry and fix bug when cleaning the windows local file
2018-03-02 02:31:09 -05:00
Green-m
d1e91dfdfd
Fix bug
2018-03-01 22:19:03 -05:00
Green-m
2bb8fc7325
Fix bug
2018-03-01 22:16:59 -05:00
Jon Hart
e7a7b557bc
Randomize and doc memcached stats probe; catch multi-packet responses
2018-03-01 16:56:34 -08:00
Jon Hart
155f45fc28
Simplify memcached amplification scanner to use UDPScanner for most of the work
2018-03-01 15:37:23 -08:00
Sonny Gonzalez
883654f0ea
Land #9653 , fix Y2k38 issue (until Jan 1, 2038)
2018-03-01 09:13:41 -06:00
Brent Cook
27bd2a4a9f
workaround Y2k38 issues in java certificate generation
2018-03-01 08:41:28 -06:00
Daniel Teixeira
c84ece15a3
Update exodus.rb
2018-02-28 11:04:16 +00:00
Daniel Teixeira
c366f94017
Update exodus.rb
2018-02-28 10:35:05 +00:00
Jon Hart
9e1a7c869c
Use drdos mixin for memcached amp module
2018-02-27 22:51:27 -08:00
xistence
05c99ffb5c
Add Memcached amplification scanner
2018-02-28 11:24:17 +07:00
UserExistsError
35b66d0e60
added payload tests
2018-02-27 19:24:51 -07:00
Green-m
174c47195a
Add options LocalExePath, StartupName, ServiceDescription
2018-02-27 05:32:07 -05:00
Brent Cook
325ad7256e
if multi/handler is disabled, exit
2018-02-27 04:30:09 -06:00
Green-m
fcd6e8acab
Add options LocalExePath, StartupName, ServiceDescription
2018-02-27 05:27:32 -05:00
attackdebris
2939695991
Add ARCH_CMD and general fixup
2018-02-26 16:59:36 -05:00
Daniel Teixeira
15bd45cee3
Exodus Module
2018-02-26 21:31:13 +00:00
Jacob Robles
a344ffadd8
Modified Code, Added additional check
2018-02-26 07:29:08 -06:00
Jacob Robles
4e4aeb7b4d
Add GitStack v2.3.10 Unauth REST API Aux Module
2018-02-26 06:04:38 -06:00
Green-m
553a82a408
Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC
2018-02-26 02:39:11 -05:00
Green-m
f786a1cfb9
Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC
2018-02-26 01:59:49 -05:00
Rob Fuller
0c82b0a922
Support Windows 2008/7 and above
...
Probably about time that we supported versions less than 10 years old :)
2018-02-24 16:06:55 -05:00
Auxilus
a1587bcd68
Update smb_ms17_010.rb
2018-02-24 09:05:35 +05:30
Auxilus
46af6239df
Update smb_ms17_010.rb
2018-02-24 08:50:39 +05:30
Auxilus
9bae6246b2
Check for accessible named pipe on vuln targets
...
```
msf5 auxiliary(scanner/smb/smb_ms17_010) > run
[+] 192.168.0.2:445 - Host is likely VULNERABLE to MS17-010! - Windows 7 Ultimate 7601 Service Pack 1 x64 (64-bit)
[*] 192.168.0.2:445 - Checking for accessible named pipes
[+] 192.168.0.2:445 - Found accessible named pipe: netlogon
[+] 192.168.0.2:445 - Found accessible named pipe: lsarpc
[+] 192.168.0.2:445 - Found accessible named pipe: samr
[+] 192.168.0.2:445 - Found accessible named pipe: browser
[+] 192.168.0.2:445 - Found accessible named pipe: atsvc
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
```
2018-02-24 03:20:34 +05:30
James Barnett
133b34827f
Fix false+ login in a few more places
2018-02-23 13:16:41 -06:00
Brent Cook
cd728defed
Merge branch 'master' into land-9607-
2018-02-23 11:09:20 -06:00
h00die
c7bbc6eca4
juniper post enum module
2018-02-22 21:08:21 -05:00
UserExistsError
e19a071910
add bind_named_pipe x86
2018-02-22 19:03:37 -07:00
William Vu
7663e5c1f6
Land #9601 , ms17_010_eternalblue reliability fixes
2018-02-22 15:30:45 -06:00
James Barnett
5815b626d9
Dont save email addresses as valid
...
Also add module doc for owa_login module
2018-02-22 14:58:11 -06:00
James Barnett
e531dbc976
Fix bug causing all logins to appear valid
...
The headers we were looking for were a little too loose
and were incorrectly identifying all responses as successful
login attempts
2018-02-22 11:25:35 -06:00
bwatters-r7
4b8a8fa2b1
Land #9441 , Create exploit for AsusWRT LAN RCE
...
Merge branch 'land-9441' into upstream-master
2018-02-22 10:40:45 -06:00
Jacob Robles
738d6ab33a
Land #9604 , Fix logged errors when running without Python 3.6 / gmpy2
2018-02-22 08:11:30 -06:00
Brent Cook
99e278fa29
Land #9584 , Fix reverse_php_ssl infinite loop
2018-02-22 07:03:52 -06:00
Trevor Sibanda
77b3673e38
Fix reverse_php_ssl infinite loop
2018-02-22 08:42:54 +00:00
Brendan Coles
f98b4b0540
require 'rubygems/package'
2018-02-22 04:28:56 +00:00
Brent Cook
7e665ab287
check for extra libraries explicitly, fail gracefully
2018-02-21 21:54:58 -06:00
William Vu
3880f6a65e
Finally fix "Unknown admin user ''" after 2yrs
...
The failed password auth was necessary after all. I misread the PoC. :'(
Apparently the password auth sets the username, while the backdoored
keyboard-interactive auth sets the password.
2018-02-21 20:44:35 -06:00
William Vu
cc2495dd9c
Explain fortinet-backdoor -> FortinetBackdoor
2018-02-21 17:05:30 -06:00
William Vu
a5d78b82d4
Add require for Net::SSH::CommandStream
2018-02-21 15:51:53 -06:00
William Vu
854ac67b8e
Use start_session in fortinet_backdoor
...
Still get "Unknown admin user ''" from a shell channel request,
@busterb's more complete implementation notwithstanding.
Hoping we fix this in a subsequent commit or related PR.
Please see #6612 and #9524 .
2018-02-21 15:33:34 -06:00
Aaron Soto
af45c1764b
Tweak exception handling and timing of `ms17_010_eternalblue`
2018-02-21 13:40:04 -06:00
Brent Cook
78822fd799
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-21 06:59:09 -06:00
William Vu
9cbc55ce40
Land #9593 , finger_users regex fix
2018-02-21 01:27:40 -06:00
Aaron Soto
bda7fefa7f
Land #9444 - `hsts_eraser` module and docs
2018-02-20 21:22:55 -06:00
Jacob Robles
b2cb4c425d
Land #9594 , CloudMe Sync v1.10.9 Buffer Overflow
2018-02-20 17:49:19 -06:00
Jacob Robles
6a62ca15e7
Remove NOPS
...
[ticket: #9594 ]
2018-02-20 17:40:33 -06:00
Daniel Teixeira
745ad4d727
CloudMe Sync Client BoF
2018-02-20 21:57:13 +00:00
James Lee
d6206dc046
Better regex in finger_users
2018-02-20 15:48:00 -06:00
Jacob Robles
107a41a4ce
Land #9561 , Disk Savvy Enterprise v10.4.18 built-in server buffer overflow
2018-02-20 15:42:12 -06:00
Jacob Robles
d02bf40d69
Modified Exploit
...
Remove NOPS that weren't needed and freed up space for a larger payload.
[ticket: #9561 ]
2018-02-20 15:35:43 -06:00
r4wd3r
4ce7468fbe
Added rid_hijack post module. Found at post/windows/manage
2018-02-20 22:29:23 +01:00
Tim W
f10d58bc2d
upgrade osx shells to osx meterpreter
2018-02-21 02:54:38 +08:00
Brent Cook
05e002e3c5
Land #9366 , Add x64 staged Meterpreter for macOS
2018-02-19 23:15:03 -06:00
Brent Cook
69c7e83a55
Land #9164 , add OWA 2016 support
2018-02-19 23:12:27 -06:00
Chris Higgins
74c6e21f49
Lands #9504 , MagniComp SysInfo privilege escalation
2018-02-19 22:47:33 -06:00
Brent Cook
56c00a8cb6
initial OWA 2016 support
2018-02-19 21:43:49 -06:00
Quentin Kaiser
9e3f12665e
Plaintext for console type to see what's going on.
2018-02-17 20:11:05 +01:00
Quentin Kaiser
e877151895
Attempt at clarifying network exchange using Telnet class IAC related constants.
2018-02-17 14:00:57 +01:00
Brent Cook
ac7fe99a2b
specify a python encoding for the module
2018-02-16 16:17:52 -06:00
Brent Cook
242f2d3117
Land #9512 , Add Claymore Dual GPU Miner<= 10.5 DoS module
2018-02-16 10:46:48 -06:00
RageLtMan
354eb4092a
Reverse TCP x64 RC4 via max3raza's rc4_x64 asm
...
To round out the work done by mihi for x86 stages back in the day,
this PR provides x64 Windows stage encryption in RC4 via assembly
written/modified by max3raza during adjacent work on DNS tunneled
transport.
Stage encryption differs from encoding in that there is no decoder
stub or key materiel carried with the stage which can be used by
defensive systems to decode and identify the contents. Persistence
payloads, oob-delivered stage0, and other contexts benefit heavily
from this as their subsequent stage is difficult to detect/identify,
and the chance of accidental execution of the wrong payload/stage
is drastically reduced if separate keys are in play for individual
targets - acquiring the wrong stage will result in decryption
failure and prevent further execution.
For historical context, all of the RC4 stagers implement in-place
decryption via stage0 for the contents of stage1 using the provided
passphrase converted to a key and embedded in stage0 as part of the
payload.
Testing:
In-house testing with Max - we got sessions, loaded extensions.
Notes:
All credit for the work goes to Max3raza - big ups for getting
this knocked out.
2018-02-16 05:15:05 -05:00
Brent Cook
25d2b551d8
Land #9539 , add bind_named_pipe transport to Windows meterpreter
2018-02-15 17:39:32 -06:00
Brent Cook
d28f6888b2
bump payloads, include bind_named_pipe support
2018-02-15 17:37:33 -06:00
Wei Chen
b533ec6019
Land #9509 , Ulterius Server < v1.9.5.0 Directory Traversal
...
Land #9509
2018-02-15 16:34:31 -06:00
Wei Chen
949b474a0a
Avoid target_uri.path
...
It doesn't look like target_uri.path is suitable for this scenario,
because it causes our input to be modified and hard to use.
2018-02-15 16:31:09 -06:00
Brent Cook
38b03fdfff
Merge branch 'upstream-master' into land-9539-
2018-02-15 16:22:13 -06:00
Wei Chen
5467f4c97e
Add header
2018-02-15 16:19:54 -06:00
Quentin Kaiser
e86169c217
Clean up Telnet IAC negotation and xplain obscure hex bytes.
2018-02-15 23:08:17 +01:00
Brent Cook
c4c864f391
Land #9558 , Fix #9417 , map timeout exp to a var for telnet_encrypt_overflow
2018-02-15 15:54:23 -06:00
Brent Cook
67dc579fd3
update magic numbers
2018-02-15 15:10:26 -06:00
Daniel Teixeira
651ddbb7eb
Disk Savvy Server Buffer Overflow
2018-02-15 10:09:07 +00:00
Daniel Teixeira
929027ab96
Disk Savvy Server Buffer Overflow
2018-02-14 20:35:32 +00:00
Wei Chen
ef948ccc38
Fix #9417 , map timeout exp to a var for telnet_encrypt_overflow
...
Fix #9417
2018-02-14 09:19:28 -06:00
HD Moore
7cfc17860d
udp_probe is necessary for pivot scans
2018-02-14 08:45:46 -06:00
HD Moore
ef13f01820
Remove actually deprecated modules
2018-02-14 08:43:20 -06:00
HD Moore
234f5a316b
Revert "Remove old deprecated modules"
...
This reverts commit a2c5cc0ffb
.
2018-02-14 08:42:44 -06:00
Spencer McIntyre
5063415b79
Land #9552 , add private_type for stored tomcat pw
...
Fixes #9513
2018-02-13 19:25:27 -05:00
Quentin Kaiser
5fbeb74f0c
Remove osx platform and fix date.
2018-02-13 23:57:53 +01:00
Quentin Kaiser
0259e794ba
OSGi console remote command execution.
2018-02-13 23:38:18 +01:00
Jeffrey Martin
3811665b69
Land #7699 , Add UDP handlers and payloads (redux)
2018-02-13 14:50:09 -06:00
Jeffrey Martin
d56111a33c
update cache sizes from new tests
2018-02-13 14:34:21 -06:00
Wei Chen
fbeba8bfd2
Fix #9513 , Add private_type to be able to store password for Tomcat
...
If there is no :private_type, the create_credential method in
Metasploit::Credential::Creation will quietly skip the password,
which makes it look like a bug when the user is trying to view
the password from the creds command.
Fix #9513
2018-02-13 14:31:56 -06:00
Jeffrey Martin
2221779ddd
update package namespaces
2018-02-13 13:33:36 -06:00
Agahlot
de24451035
Correct Typo
2018-02-13 15:57:09 +05:30
Fab
fe46f635db
Changes as requested by bcoles
2018-02-13 10:54:42 +01:00
follower
ecb5fffb0b
Typo fix: "withint" --> "within"
2018-02-13 06:20:57 +13:00
UserExistsError
bad1429989
reverted CachedSize values
2018-02-11 19:07:41 -07:00
UserExistsError
8ae8a0d94b
added bind_named_pipe payload
2018-02-11 18:56:50 -07:00
h00die
285b329ee1
Land #9422 abrt race condition priv esc on linux
2018-02-11 11:58:39 -05:00
Pearce Barry
add7ae8fa1
Land #9536 , Add Ubuntu notes to documentation
2018-02-11 07:27:00 -06:00
Pearce Barry
321b78b0fe
Land #9408 , Add Juju-run Agent Privilege Escalation module (CVE-2017-9232)
2018-02-11 07:19:49 -06:00
Brendan Coles
4e5cbd68b9
Add Ubuntu notes to documentation
2018-02-11 06:52:36 +00:00
Brendan Coles
1177efef89
Update tested versions
2018-02-10 16:32:20 +00:00
Brendan Coles
0d573e1434
Support shell sessions
2018-02-09 16:15:04 -05:00
Brendan Coles
45249d582d
Add partition check
2018-02-09 16:15:04 -05:00
Brendan Coles
0ba37f8104
Add glibc $ORIGIN Expansion Privilege Escalation exploit
2018-02-09 16:15:04 -05:00
h00die
cb1b59545b
Land #9469 linux local exploit for glibc ld audit
2018-02-09 14:00:42 -05:00
Fab
f606773096
Add module for HP iLO CVE-2017-12542 authentication bypass
2018-02-09 11:14:20 +01:00
Brent Cook
44b08feeb0
Land #9525 , Update mysql_hashdump for MySQL 5.7 and above
2018-02-08 13:56:26 -06:00
Brent Cook
1bb5499fce
fix whitespace
2018-02-08 13:55:40 -06:00