Commit Graph

840 Commits (60c3882b847cdaf1a72c73a5dd4e28ce2d97ad27)

Author SHA1 Message Date
wchen-r7 ca1f8da7e5 Get around encoding issues in mediawiki_syntaxhighlight.md 2017-05-17 22:50:56 -05:00
James Lee b78749bc1b
Land #8221, move autoroute 2017-05-17 15:17:45 -05:00
Daniel Teixeira 57eac49222 Add files via upload 2017-05-17 10:52:36 +01:00
William Webb 7e2dab4ddc
Land #8303, Buffer Overflow on Dupscout Enterprise v9.5.14 2017-05-17 01:04:59 -05:00
William Vu 21e741b530
Comment out x86 targets in ms17_010_eternalblue.md
Still under development.
2017-05-16 19:52:44 -05:00
wchen-r7 11da7c7c81 Land #8394, Add Moxa Credential Recovery Module 2017-05-16 16:45:22 -05:00
wchen-r7 77a9676efb Land #8347, Add Serviio Media Server checkStreamUrl Command Execution 2017-05-16 16:20:39 -05:00
James Lee e3f4cc0dfd
Land #8345, WordPress PHPMailer Exim injection
CVE-2016-10033
2017-05-16 15:07:21 -05:00
wchen-r7 e62fc3e93c Land #8376, Add BuilderEngine 3.5 Arbitrary file upload & exec exploit 2017-05-16 14:53:32 -05:00
William Vu 3893bc4d83 Update doc with new prestager command 2017-05-16 14:48:12 -05:00
wchen-r7 2ed8ae11b4 Add doc and make minor changes 2017-05-16 14:47:19 -05:00
William Vu eff4914240
Land #8381, ETERNALBLUE exploit (to be continued) 2017-05-16 12:19:45 -05:00
Patrick DeSantis 77dd3d19b9 add moxa credentials recovery module documentation 2017-05-16 10:22:50 -04:00
William Vu 8021b209ba Update doc with new usage
Also kick version down to 4.6, since I wasn't using the tag originally.
2017-05-15 21:28:41 -05:00
William Vu 2055bf8f65 Add note about PHPMailer being bundled 2017-05-15 14:29:11 -05:00
William Webb 85d99d8cf1
Land #8373, Add documentation for VMWare aux modules 2017-05-14 22:17:01 -05:00
zerosum0x0 e3dcf0ab2d added docs 2017-05-14 19:22:26 -06:00
Brent Cook 8be51bb56b
Land #8372, rservice documentation 2017-05-14 19:31:55 -05:00
h00die fb236df18f added AIX reference 2017-05-12 19:15:00 -04:00
h00die 5d2b4e0fdb links, and spelling 2017-05-12 19:10:37 -04:00
h00die af4505a9de
land #8009 post module for jboss creds gather 2017-05-11 22:39:54 -04:00
h00die 6fa51aee8f moving docs to correct folder 2017-05-11 22:33:00 -04:00
h00die ea232cb39f esx_fingerprint 2017-05-11 21:19:13 -04:00
h00die f0e3a1f9da vmauthd_version 2017-05-11 21:04:10 -04:00
h00die 4c40c6289e add rlogin and rsh 2017-05-11 20:22:44 -04:00
h00die 7f34e985f7 rexec docs 2017-05-11 17:08:21 -04:00
William Vu 0627b10996 Add Ubuntu version to module doc 2017-05-11 14:13:45 -05:00
Josh Hale bb815c0f8c Add delete all to module doc 2017-05-10 23:01:03 -05:00
Brent Cook 099fc0176a move autoroute to a more sensible location 2017-05-10 23:01:02 -05:00
Brent Cook 28c20cf35d
Land #7873, haraka mail server command injection 2017-05-10 22:52:40 -05:00
Brent Cook 0f089020cb update example output from module 2017-05-10 22:52:13 -05:00
Brent Cook 6e8f226f36 update docs, move module out of the way 2017-05-10 22:09:26 -05:00
William Vu a1d92573fc Add module doc to appease the @h00die god 2017-05-10 15:17:20 -05:00
Michael Scherer a3dc82d51c Fix mispelling in meterpreter readme 2017-05-10 22:08:22 +02:00
Brent Cook faf01ed5ef
Land #8353, add aux scanner for Intel AMT digest bypass 2017-05-09 18:45:21 -05:00
Brent Cook ad37f88a34 add module docs 2017-05-09 18:44:43 -05:00
Brent Cook 96e3d61883
Land #8297, add docs for energizer duo scanner and exploit 2017-05-08 17:14:36 -05:00
Pearce Barry af3f1fbc37
Land #8332, Canprobe Module 2017-05-07 12:20:27 -05:00
Pearce Barry 1c099a3d14
Minor doc tweaks. 2017-05-07 12:13:57 -05:00
Brendan Coles 283a40a279 Add documentation 2017-05-06 12:58:53 +00:00
h00die 01c726089a
Land #8334, docs for http/crawler and http/robots 2017-05-05 17:31:45 -04:00
h00die 4309cc42a2 minor doc edits 2017-05-05 17:30:03 -04:00
Jon P cf0b3c9476
Add h00die's swaggy recommendations 2017-05-04 10:50:34 +02:00
Jon P df201e65b4
Documentation for the HTTP crawler 2017-05-03 18:20:35 +02:00
Jon P 733c8c291c
Documentation for the robots_txt scanner module 2017-05-03 17:41:46 +02:00
Craig Smith 9877aa9ef9 Added documentation and cleand up how STOPID worked 2017-05-02 18:57:32 -07:00
Yorick Koster 006ed42248 Added fix information
https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/0002
09.html
2017-05-01 09:01:14 +02:00
h00die a83a7a12e9
land #8320, docs for ftp_login 2017-04-30 08:15:56 -04:00
h00die a936713252 fixing formatting 2017-04-30 08:14:36 -04:00
Yorick Koster a7436b6afa Typo 2017-04-29 20:42:15 +02:00
Yorick Koster 0a7b9eedda Typo 2017-04-29 20:39:17 +02:00
Yorick Koster 673dbdc4b9 Code review feedback from h00die 2017-04-29 20:37:39 +02:00
itsmeroy2012 cae564ea3b Highlighting filenames 2017-04-29 23:20:13 +05:30
itsmeroy2012 9e7719c428 Adding white space 2017-04-29 20:30:28 +05:30
itsmeroy2012 640368a391 Changing a line 2017-04-29 20:28:23 +05:30
itsmeroy2012 a1765c9e8c Add KB for ftp_login 2017-04-29 20:27:11 +05:30
Yorick Koster 0eb79e8c8c Added docs for mediawiki_syntaxhighlight.rb 2017-04-29 16:14:25 +02:00
William Vu 56990517b0
Update finger_users doc with nmap --script finger 2017-04-28 17:45:50 -05:00
dmohanty-r7 24004f16b3
Land #8298, docs for aux scanner finger 2017-04-28 10:36:50 -05:00
h00die 1843f03665 add nmap equivalent 2017-04-26 19:39:46 -04:00
William Vu 7a6a124272
Land #8279, POSIX Meterpreter replaced by Mettle 2017-04-26 18:32:17 -05:00
Brent Cook 855aa3f850
Land #8295, fix doc paths 2017-04-26 18:25:14 -05:00
Brent Cook 12ed3dad20 update documentation to point to meterpreter again 2017-04-26 17:49:08 -05:00
Daniel Teixeira cd038aed82 Dup Scout Enterprise documentation 2017-04-26 15:19:59 +01:00
William Vu bbee7f86b5
Land #8263, Mercurial SSH exec module 2017-04-26 01:38:01 -05:00
William Vu ad084ae0cc
Land #8286, x11_keyboard_exec docs 2017-04-26 01:12:41 -05:00
William Vu 6739725489
Land #8285, open_x11 docs 2017-04-26 01:12:27 -05:00
h00die 43847f9606 finger docs 2017-04-25 22:29:39 -04:00
h00die c4bb918cca addition of energizer duo docs 2017-04-25 22:05:55 -04:00
h00die 285358e2a4 fix paths 2017-04-25 21:12:55 -04:00
h00die 0ae6142b76
land #8283, docs for ftp/anonymous 2017-04-25 20:55:17 -04:00
h00die d1911a78c5 minor syntax change 2017-04-25 20:51:40 -04:00
h00die 323650dfe4
land #8284 docs for ftp_version 2017-04-25 19:37:04 -04:00
h00die 4c71a9908d minor adjustment 2017-04-25 19:35:03 -04:00
wchen-r7 320898697a
Land #8266, Add Buffer Overflow Exploit on Disk Sorter Enterprise 2017-04-24 17:17:30 -05:00
wchen-r7 e775f9ccbd
Land #8259, Add post module to upload and execute a file 2017-04-24 17:00:55 -05:00
wchen-r7 8c463ab570 Add doc for upload_exec 2017-04-24 17:00:09 -05:00
wchen-r7 35bc1fbf28
Land #8282, Add module doc for auxiliary/scanner/chargen/chargen_probe 2017-04-24 16:14:19 -05:00
wchen-r7 5bbb4d755a
Land #8254, Add CVE-2017-0199 - Office Word HTA Module 2017-04-24 16:05:00 -05:00
wchen-r7 6029a9ee2b Use a built-in HTA server and update doc 2017-04-24 16:04:27 -05:00
Daniel Teixeira a404a1ed04 Rename disksorter_bof.rb.md to disksorter_bof.md 2017-04-24 21:58:37 +01:00
James Lee 47e5f90ded
Add docs for wp_admin_shell_upload 2017-04-24 15:50:59 -05:00
itsmeroy2012 7192836515 few edits added 2017-04-24 23:15:14 +05:30
itsmeroy2012 47b8738bdc few edits added 2017-04-24 23:08:20 +05:30
Daniel Teixeira c5b594d928 Disk Sorter Enterprise Documentation 2017-04-24 14:59:47 +01:00
h00die b2f9bbc43c add xdotool 2017-04-23 16:04:11 -04:00
h00die d1ed6afad1 x11 exploit docs 2017-04-23 15:48:48 -04:00
h00die f84061e195 docs 2017-04-23 15:10:23 -04:00
itsmeroy2012 03099cd57b adding confirmation 2017-04-24 00:15:53 +05:30
itsmeroy2012 2990c3b2fb minor fix 2017-04-24 00:10:30 +05:30
itsmeroy2012 98d1997cfa KB for ftp_version 2017-04-24 00:09:20 +05:30
itsmeroy2012 1650492e7b update 2017-04-23 23:50:02 +05:30
itsmeroy2012 ef29cf441a adding sample output 2017-04-23 23:48:38 +05:30
itsmeroy2012 56aed7a998 whitespace fix 2017-04-23 23:45:29 +05:30
itsmeroy2012 e10a346d01 minor fixes 2017-04-23 23:41:58 +05:30
itsmeroy2012 2abaa9cc0a fixing numbers 2017-04-23 23:38:23 +05:30
itsmeroy2012 5d71ce9508 adding confirmation 2017-04-23 23:37:04 +05:30
itsmeroy2012 57f0a4f00c KB for ftp/anonymous 2017-04-23 23:35:55 +05:30
h00die 562389df57 add comma 2017-04-23 11:49:52 -04:00
h00die c6109f7138 add newline 2017-04-23 11:41:08 -04:00
h00die e8e2a3dd61 chargen_probe docs 2017-04-23 11:38:29 -04:00
h00die 8e4c093a22 added version numbers 2017-04-22 09:45:55 -04:00
Matthias Brun ca03140531 Add documentation for WiPG-1000 module 2017-04-21 15:37:47 +02:00
Jonathan Claudius 999a5dfb9c
Make tested against a bulleted list 2017-04-18 22:29:04 -04:00
h00die 9f892c56fb
land #8244 docs for manageengine_connectionid_write 2017-04-18 21:43:58 -04:00
Jonathan Claudius a80355a4a7
Make code snippets easier to see 2017-04-18 19:50:57 -04:00
Jonathan Claudius 17aac0046b
Add documentation for mercurial_ssh_exec 2017-04-18 19:49:35 -04:00
wchen-r7 0428e12b10
Land #8216, Add CVE-2016-7552/CVE-2016-7547 exploit 2017-04-18 14:26:55 -05:00
nixawk 0a085c4e83 add doc for exploit/windows/fileformat/office_word_hta 2017-04-18 03:26:10 -05:00
itsmeroy2012 5f921859f0 adding hotlinks 2017-04-17 23:37:44 +05:30
itsmeroy2012 84220d6617 Minor edits 2017-04-17 23:30:07 +05:30
Brent Cook 7b936b0012
Land #8184, convert IPMI protocol and modules to bindata 2017-04-17 07:40:15 -05:00
Brent Cook 6f70efcfa1 add module documentation 2017-04-17 07:39:43 -05:00
Ahmed S. Darwish 7daec53106 huawei_hg532n_cmdinject: Improve overall documentation
- Add section on compiling custom binaries for the device
- Add documentation for Huawei's wget flavor (thanks @h00die)
- Abridge the module's info hash contents (thanks @wwebb-r7)
- Abridge the module's comments; reference documentation (@h00die)
2017-04-17 08:00:51 +02:00
mr_me f8c72df289 added some documentation 2017-04-16 08:41:52 -05:00
Ahmed S. Darwish 7b8e5e5016 Add Huawei HG532n command injection exploit 2017-04-15 21:01:47 +02:00
itsmeroy2012 477b78a75e adding : 2017-04-15 17:37:21 +05:30
itsmeroy2012 aae009a542 missed heading 2017-04-15 17:35:52 +05:30
itsmeroy2012 8ad80ea3d6 fixing whitespaces 2017-04-15 17:34:14 +05:30
itsmeroy2012 39b228bb39 fixing headings 2017-04-15 17:32:35 +05:30
itsmeroy2012 f573d004d2 KB for manageengine_connectionid_write 2017-04-15 17:30:44 +05:30
Brent Cook a9857eb1c2
Land #8099, Aux module to launch instances in AWS 2017-04-14 14:12:10 -05:00
Brent Cook eb61241673
Land #8228, New mainframe privesc payload for z/OS 2017-04-14 13:19:41 -05:00
dmohanty-r7 d75f852d01
Land #8167, Add MS17-010 auxiliary detection module 2017-04-14 13:00:16 -05:00
bigendiansmalls fa8011fd07 New mainframe privesc payload for z/OS
This module performs a privilege escaltion on mainframe systems
runing z/OS and using RACF for their security manager.  A user
with any non-privileged credentials and the ability to write to
an apf authorized library can use this payload to add "root level"
privileges (e.g. SPECIAL / BPX.SUPERUSER) to their profile.
2017-04-11 15:04:44 -05:00
William Webb c867b7e228
Land #8204, Add Cambian ePMP SNMP Configuration download 2017-04-11 10:59:13 -05:00
William Vu 288e384164
Land #8189, irssi password post gather module 2017-04-10 23:34:54 -05:00
h00die 376e791131 Merge branch 'master' into KB-for-rails_webconsole_v2 2017-04-10 20:03:03 -04:00
h00die 136030313d fix single tick to ` 2017-04-10 19:50:59 -04:00
Indranil Roy 7724797c73 fixing $ symbol 2017-04-10 19:45:48 -04:00
itsmeroy2012 c00fb64e9d Fixing code blocks 2017-04-10 19:45:48 -04:00
itsmeroy2012 b7562e5c36 Adding new lines 2017-04-10 19:45:48 -04:00
itsmeroy2012 88f6c90d4d Fixing white spaces 2017-04-10 19:45:48 -04:00
itsmeroy2012 53afe736af Fixing some headings 2017-04-10 19:45:48 -04:00
itsmeroy2012 16332cdf9b Adding KB for rails_webconsole_v2 2017-04-10 19:45:48 -04:00
Jonathan Claudius 4286559273
Update docs for irssi post gather 2017-04-10 15:35:05 -04:00
Jonathan Claudius 2dd60d8498
Add subsection to scenarios 2017-04-10 14:40:24 -04:00
Jonathan Claudius 70a41cfbce
Remove options section 2017-04-10 14:38:45 -04:00
Jonathan Claudius 17eb27002f
Remove unnecessary docs 2017-04-10 14:37:23 -04:00
Jonathan Claudius 211ee3f622
Add IRSSI docs 2017-04-10 14:35:47 -04:00
Indranil Roy 64aecb59a1 fixing $ symbol 2017-04-08 23:01:28 +05:30
itsmeroy2012 309876f2f6 Fixing code blocks 2017-04-08 22:43:58 +05:30
itsmeroy2012 8f6f3bdb20 Adding new lines 2017-04-08 20:17:23 +05:30
itsmeroy2012 a68b6f0ab9 Fixing white spaces 2017-04-07 04:29:31 +05:30
itsmeroy2012 604ba7f43b Fixing some headings 2017-04-07 04:27:50 +05:30
itsmeroy2012 0a98d0fa8d Adding KB for rails_webconsole_v2 2017-04-07 04:25:17 +05:30
juushya e65eacce49 Add Satel SenNet Command Exec Module 2017-04-07 02:22:11 +05:30
juushya 074c4f6313 Minor update to description 2017-04-07 01:38:23 +05:30
juushya 3c189f0cb0 Adding Cambium SNMP Loot module 2017-04-07 01:32:45 +05:30
Christian Mehlmauer 74dc7e478f
update piwik module 2017-04-05 20:19:07 +02:00