0a7b9eedda
Typo
2017-04-29 20:39:17 +02:00
673dbdc4b9
Code review feedback from h00die
2017-04-29 20:37:39 +02:00
cae564ea3b
Highlighting filenames
2017-04-29 23:20:13 +05:30
9e7719c428
Adding white space
2017-04-29 20:30:28 +05:30
640368a391
Changing a line
2017-04-29 20:28:23 +05:30
a1765c9e8c
Add KB for ftp_login
2017-04-29 20:27:11 +05:30
0eb79e8c8c
Added docs for mediawiki_syntaxhighlight.rb
2017-04-29 16:14:25 +02:00
56990517b0
Update finger_users doc with nmap --script finger
2017-04-28 17:45:50 -05:00
24004f16b3
Land #8298 , docs for aux scanner finger
2017-04-28 10:36:50 -05:00
1843f03665
add nmap equivalent
2017-04-26 19:39:46 -04:00
7a6a124272
Land #8279 , POSIX Meterpreter replaced by Mettle
2017-04-26 18:32:17 -05:00
855aa3f850
Land #8295 , fix doc paths
2017-04-26 18:25:14 -05:00
12ed3dad20
update documentation to point to meterpreter again
2017-04-26 17:49:08 -05:00
cd038aed82
Dup Scout Enterprise documentation
2017-04-26 15:19:59 +01:00
bbee7f86b5
Land #8263 , Mercurial SSH exec module
2017-04-26 01:38:01 -05:00
ad084ae0cc
Land #8286 , x11_keyboard_exec docs
2017-04-26 01:12:41 -05:00
6739725489
Land #8285 , open_x11 docs
2017-04-26 01:12:27 -05:00
43847f9606
finger docs
2017-04-25 22:29:39 -04:00
c4bb918cca
addition of energizer duo docs
2017-04-25 22:05:55 -04:00
285358e2a4
fix paths
2017-04-25 21:12:55 -04:00
0ae6142b76
land #8283 , docs for ftp/anonymous
2017-04-25 20:55:17 -04:00
d1911a78c5
minor syntax change
2017-04-25 20:51:40 -04:00
323650dfe4
land #8284 docs for ftp_version
2017-04-25 19:37:04 -04:00
4c71a9908d
minor adjustment
2017-04-25 19:35:03 -04:00
320898697a
Land #8266 , Add Buffer Overflow Exploit on Disk Sorter Enterprise
2017-04-24 17:17:30 -05:00
e775f9ccbd
Land #8259 , Add post module to upload and execute a file
2017-04-24 17:00:55 -05:00
8c463ab570
Add doc for upload_exec
2017-04-24 17:00:09 -05:00
35bc1fbf28
Land #8282 , Add module doc for auxiliary/scanner/chargen/chargen_probe
2017-04-24 16:14:19 -05:00
5bbb4d755a
Land #8254 , Add CVE-2017-0199 - Office Word HTA Module
2017-04-24 16:05:00 -05:00
6029a9ee2b
Use a built-in HTA server and update doc
2017-04-24 16:04:27 -05:00
a404a1ed04
Rename disksorter_bof.rb.md to disksorter_bof.md
2017-04-24 21:58:37 +01:00
47e5f90ded
Add docs for wp_admin_shell_upload
2017-04-24 15:50:59 -05:00
7192836515
few edits added
2017-04-24 23:15:14 +05:30
47b8738bdc
few edits added
2017-04-24 23:08:20 +05:30
c5b594d928
Disk Sorter Enterprise Documentation
2017-04-24 14:59:47 +01:00
b2f9bbc43c
add xdotool
2017-04-23 16:04:11 -04:00
d1ed6afad1
x11 exploit docs
2017-04-23 15:48:48 -04:00
f84061e195
docs
2017-04-23 15:10:23 -04:00
03099cd57b
adding confirmation
2017-04-24 00:15:53 +05:30
2990c3b2fb
minor fix
2017-04-24 00:10:30 +05:30
98d1997cfa
KB for ftp_version
2017-04-24 00:09:20 +05:30
1650492e7b
update
2017-04-23 23:50:02 +05:30
ef29cf441a
adding sample output
2017-04-23 23:48:38 +05:30
56aed7a998
whitespace fix
2017-04-23 23:45:29 +05:30
e10a346d01
minor fixes
2017-04-23 23:41:58 +05:30
2abaa9cc0a
fixing numbers
2017-04-23 23:38:23 +05:30
5d71ce9508
adding confirmation
2017-04-23 23:37:04 +05:30
57f0a4f00c
KB for ftp/anonymous
2017-04-23 23:35:55 +05:30
562389df57
add comma
2017-04-23 11:49:52 -04:00
c6109f7138
add newline
2017-04-23 11:41:08 -04:00
e8e2a3dd61
chargen_probe docs
2017-04-23 11:38:29 -04:00
8e4c093a22
added version numbers
2017-04-22 09:45:55 -04:00
ca03140531
Add documentation for WiPG-1000 module
2017-04-21 15:37:47 +02:00
999a5dfb9c
Make tested against a bulleted list
2017-04-18 22:29:04 -04:00
9f892c56fb
land #8244 docs for manageengine_connectionid_write
2017-04-18 21:43:58 -04:00
a80355a4a7
Make code snippets easier to see
2017-04-18 19:50:57 -04:00
17aac0046b
Add documentation for mercurial_ssh_exec
2017-04-18 19:49:35 -04:00
0428e12b10
Land #8216 , Add CVE-2016-7552/CVE-2016-7547 exploit
2017-04-18 14:26:55 -05:00
0a085c4e83
add doc for exploit/windows/fileformat/office_word_hta
2017-04-18 03:26:10 -05:00
5f921859f0
adding hotlinks
2017-04-17 23:37:44 +05:30
84220d6617
Minor edits
2017-04-17 23:30:07 +05:30
7b936b0012
Land #8184 , convert IPMI protocol and modules to bindata
2017-04-17 07:40:15 -05:00
6f70efcfa1
add module documentation
2017-04-17 07:39:43 -05:00
7daec53106
huawei_hg532n_cmdinject: Improve overall documentation
...
- Add section on compiling custom binaries for the device
- Add documentation for Huawei's wget flavor (thanks @h00die)
- Abridge the module's info hash contents (thanks @wwebb-r7)
- Abridge the module's comments; reference documentation (@h00die)
2017-04-17 08:00:51 +02:00
f8c72df289
added some documentation
2017-04-16 08:41:52 -05:00
7b8e5e5016
Add Huawei HG532n command injection exploit
2017-04-15 21:01:47 +02:00
477b78a75e
adding :
2017-04-15 17:37:21 +05:30
aae009a542
missed heading
2017-04-15 17:35:52 +05:30
8ad80ea3d6
fixing whitespaces
2017-04-15 17:34:14 +05:30
39b228bb39
fixing headings
2017-04-15 17:32:35 +05:30
f573d004d2
KB for manageengine_connectionid_write
2017-04-15 17:30:44 +05:30
a9857eb1c2
Land #8099 , Aux module to launch instances in AWS
2017-04-14 14:12:10 -05:00
eb61241673
Land #8228 , New mainframe privesc payload for z/OS
2017-04-14 13:19:41 -05:00
d75f852d01
Land #8167 , Add MS17-010 auxiliary detection module
2017-04-14 13:00:16 -05:00
fa8011fd07
New mainframe privesc payload for z/OS
...
This module performs a privilege escaltion on mainframe systems
runing z/OS and using RACF for their security manager. A user
with any non-privileged credentials and the ability to write to
an apf authorized library can use this payload to add "root level"
privileges (e.g. SPECIAL / BPX.SUPERUSER) to their profile.
2017-04-11 15:04:44 -05:00
c867b7e228
Land #8204 , Add Cambian ePMP SNMP Configuration download
2017-04-11 10:59:13 -05:00
288e384164
Land #8189 , irssi password post gather module
2017-04-10 23:34:54 -05:00
376e791131
Merge branch 'master' into KB-for-rails_webconsole_v2
2017-04-10 20:03:03 -04:00
136030313d
fix single tick to `
2017-04-10 19:50:59 -04:00
7724797c73
fixing $ symbol
2017-04-10 19:45:48 -04:00
c00fb64e9d
Fixing code blocks
2017-04-10 19:45:48 -04:00
b7562e5c36
Adding new lines
2017-04-10 19:45:48 -04:00
88f6c90d4d
Fixing white spaces
2017-04-10 19:45:48 -04:00
53afe736af
Fixing some headings
2017-04-10 19:45:48 -04:00
16332cdf9b
Adding KB for rails_webconsole_v2
2017-04-10 19:45:48 -04:00
4286559273
Update docs for irssi post gather
2017-04-10 15:35:05 -04:00
2dd60d8498
Add subsection to scenarios
2017-04-10 14:40:24 -04:00
70a41cfbce
Remove options section
2017-04-10 14:38:45 -04:00
17eb27002f
Remove unnecessary docs
2017-04-10 14:37:23 -04:00
211ee3f622
Add IRSSI docs
2017-04-10 14:35:47 -04:00
64aecb59a1
fixing $ symbol
2017-04-08 23:01:28 +05:30
309876f2f6
Fixing code blocks
2017-04-08 22:43:58 +05:30
8f6f3bdb20
Adding new lines
2017-04-08 20:17:23 +05:30
a68b6f0ab9
Fixing white spaces
2017-04-07 04:29:31 +05:30
604ba7f43b
Fixing some headings
2017-04-07 04:27:50 +05:30
0a98d0fa8d
Adding KB for rails_webconsole_v2
2017-04-07 04:25:17 +05:30
e65eacce49
Add Satel SenNet Command Exec Module
2017-04-07 02:22:11 +05:30
074c4f6313
Minor update to description
2017-04-07 01:38:23 +05:30
3c189f0cb0
Adding Cambium SNMP Loot module
2017-04-07 01:32:45 +05:30
74dc7e478f
update piwik module
2017-04-05 20:19:07 +02:00
b6bf907cbd
Add docs for irssi_creds post gather
2017-04-05 09:54:22 -04:00
6c44edc58c
Land #8180 docs for iis_webdav_upload_asp
2017-04-04 16:37:08 -04:00
a0ec93ded8
add newline
2017-04-04 16:35:46 -04:00
64c06a512e
Land #8020 , ntfs-3g local privilege escalation
2017-04-04 09:48:15 -05:00
77d80b1a02
fixing newline
2017-04-03 17:04:45 +05:30
fef10b7be8
fixing minor issues
2017-04-03 16:54:45 +05:30
98ffa4d380
Land #7652 , add varnish cache CLI authentication scanner module
2017-04-02 21:52:45 -05:00
0c3ef4bf47
add note about later versions of Varnish
2017-04-02 21:52:20 -05:00
deb7701d3e
tweak misshapen output in MD->HTML
2017-04-02 21:44:50 -05:00
a34c01ebd2
Land #8137 shodan honeyscore module
2017-04-02 21:37:36 -04:00
3d860c2942
Change RHOST to TARGET
2017-04-02 21:10:42 -04:00
3ada361357
removing twice exploit
2017-04-02 14:33:23 +05:30
2c75526a12
Fixing white spaces
2017-04-02 14:31:11 +05:30
da14a80e8d
Fixing hashes
2017-04-02 14:28:04 +05:30
85a95233c7
Documentation on iis_webdav_upload_asp
2017-04-02 14:26:29 +05:30
ff27edab14
added docs
2017-04-01 21:58:07 -06:00
035f37cf42
Land #8144 , Add Moxa Device Discovery Scanner Module
2017-03-31 19:11:27 -05:00
f870f94fa9
Land #8163 , Add Cambium ePMP Arbitrary Command Execution
2017-03-31 19:06:19 -05:00
2b87923a19
fixes for markdown
2017-03-31 16:54:59 -04:00
823c1a6286
added more verifieds
2017-03-31 16:52:20 -04:00
1ce7bf3938
Land #8126 , Add SolarWind LEM Default SSH Pass/RCE
2017-03-31 11:21:32 -05:00
eeea584bf8
Land #8152 docs for adobe_flash_hacking_team_uaf
2017-03-30 09:14:47 -04:00
9a0c455f9f
add newline
2017-03-30 09:14:03 -04:00
691811af5a
Land #7994 , Add Windows Gather DynaZIP Saved Password Extraction post module
2017-03-29 16:04:09 -05:00
5bcddbd4a6
Land #8158 , Add documentation for glassfish_deployer
2017-03-28 10:52:20 -05:00
9f93bb052e
Add installation instructions for GlassFish doc
2017-03-28 10:51:39 -05:00
25f7835832
adding browser details
2017-03-28 08:09:28 +05:30
4075580249
Correction a/an
2017-03-28 08:06:01 +05:30
09214bbb7d
land #8154 docs for axis2_deployer
2017-03-27 20:47:22 -04:00
30896d1fab
Add Cambium ePMP Arbitrary Command Execution Module
2017-03-28 00:17:36 +05:30
66a585ab41
Land #8050 , Add Cambium ePMP System Hash Dumper
2017-03-27 12:08:53 -05:00
935c59306b
Land #7897 , Add Cambium ePMP 1000 Device Configuration file dumper
2017-03-27 12:05:11 -05:00
d705949b37
Land #7784 , Cambium ePMP 1000 Login Scanner
2017-03-27 12:01:56 -05:00
925088bf2a
Create moxa_discover.md
2017-03-27 11:44:03 -04:00
a1a3a2af7c
Documentation on glassfish_deployer updated 1.3
2017-03-27 19:26:51 +05:30
ea9de67ebb
Documentation on glassfish_deployer updated 1.2
2017-03-27 19:25:32 +05:30
ccccb38a1a
Documentation on glassfish_deployer updated 1.1
2017-03-27 19:24:46 +05:30
8ad61a11c8
Documentation on glassfish_deployer
2017-03-27 19:23:39 +05:30
b36836bb0a
Fix grammar mistake
2017-03-27 00:05:18 -05:00
4cba08a74d
Documentation on adobe_flash_hacking_team_uaf updated 1.6
2017-03-26 22:55:13 +05:30
48a56d8830
Documentation on axis2_deployer updated 1.4
2017-03-26 22:38:45 +05:30
8d618ce6a3
Documentation on axis2_deployer updated 1.3
2017-03-26 22:36:41 +05:30
2c47d798b6
Documentation on adobe_flash_hacking_team_uaf updated 1.5
2017-03-25 12:53:23 +05:30
6b6dd73b09
Documentation on adobe_flash_hacking_team_uaf updated 1.4
2017-03-25 12:52:12 +05:30
6ba6cd01eb
Updated documentation to detail aggregator
2017-03-24 22:57:48 -07:00
2a96190dac
Create shodan_honeyscore.md
2017-03-24 22:25:33 -04:00
11b251b928
Land #8151 docs update for netgear_r7000_cgibin_exec
2017-03-24 19:49:53 -04:00
5f4e82bf69
Land #8131 docs for ms15-034
2017-03-24 19:45:36 -04:00
b2e6c22fdf
Documentation on adobe_flash_hacking_team_uaf updated 1.3
2017-03-25 04:02:43 +05:30
cb65a4d909
Documentation on adobe_flash_hacking_team_uaf updated 1.2
2017-03-25 03:58:06 +05:30
52ff073d51
Documentation on adobe_flash_hacking_team_uaf updated 1.1
2017-03-25 03:56:19 +05:30
4b36a42eff
Documentation on adobe_flash_hacking_team_uaf
2017-03-25 03:54:17 +05:30
dd974612e8
Update netgear_r7000_cgibin_exec.md
2017-03-24 15:43:06 -04:00
9db2e9fbcd
Land #8146 , Add Default Secret & Deserialization Exploit for Github Enterprise
2017-03-24 14:38:47 -05:00
dfaec8bf3a
Land #8148 , Add module documentation for axis2_deployer
2017-03-24 11:55:51 -05:00
92c0748447
Land #8102 , Add a plugin to notify new sessions via SMS
2017-03-24 11:17:59 -05:00
03d6e4563c
Documentation on axis2_deployer updated 1.2
2017-03-24 21:14:56 +05:30
2f1eefebc7
Documentation on axis2_deployer updated 1.1
2017-03-24 21:12:33 +05:30
ffacac10c7
Documentation on axis2_deployer
2017-03-24 21:06:19 +05:30
3b062eb8d4
Update version info
2017-03-23 13:46:09 -05:00
2488100996
Add bounty info
2017-03-23 11:13:47 -05:00
196a0b6ac4
Add Default Secret & Deserialization Exploit for Github Enterprise
2017-03-23 10:40:31 -05:00
c87ea2107b
Add documentation
2017-03-23 12:49:50 +03:00
a93aef8b7a
Land #8086 , Add Module Logsign Remote Code Execution
2017-03-22 11:33:49 -05:00
b06d17baa1
Documentation on ms15_034_http_sys_memory_dump updated 1.5
2017-03-22 17:37:59 +05:30
1a8e8402ae
Land #8113 , SysGauge SMTP server validation sploit
2017-03-21 16:45:42 -05:00
69769b1ca4
Land #8036 , Fix run_as_psh with domain accounts
...
Missed a commit in this PR last time due to typo updating
the PR before merge.
2017-03-21 09:17:59 -05:00
00359b85c5
Documentation on ms15_034_http_sys_memory_dump updated 1.4 fixing white spaces
2017-03-21 19:43:35 +05:30
d54e35f40e
Documentation on ms15_034_http_sys_memory_dump updated 1.3 fixing white spaces
2017-03-21 17:40:07 +05:30
07d88a71cf
Documentation on ms15_034_http_sys_memory_dump updated 1.2 removing show opitions
2017-03-21 17:33:27 +05:30
662673ace8
Update run_as_psh.md
2017-03-21 10:51:04 +11:00
c4279a837a
Minor formatting/spelling/verbiage changes.
2017-03-20 17:37:12 -05:00
2fde287424
Initial patch for rftransceiver (RfCat / YardstickOne)
2017-03-20 17:36:16 -05:00
7ffa952dbb
Documentation on ms15_034_http_sys_memory_dump updated 1.1
2017-03-20 21:33:33 +05:30
06ebb22a8f
Land #8065 , Zigbee Hardware Bridge Extension
2017-03-20 10:44:15 -05:00
46d46eef77
Documentation on ms15_034_http_sys_memory_dump
2017-03-20 19:18:58 +05:30
e6afd68624
Update run_as_psh.md
2017-03-20 16:17:07 +11:00
35a952490d
Land #8130 docs for winrm_script_exec
2017-03-19 14:47:41 -04:00
18fec876ce
Documentation on winrm_script_exec updated 1.4
2017-03-19 23:43:08 +05:30
90744b0162
Documentation on winrm_script_exec updated 1.3
2017-03-19 23:31:30 +05:30
d22e43dedd
Documentation on winrm_script_exec updated 1.2
2017-03-19 23:11:23 +05:30
02a3b172b4
Documentation on winrm_script_exec updated 1.1
2017-03-19 21:52:46 +05:30
5ab0129f0f
Documentation on winrm_script_exec
2017-03-19 18:27:00 +05:30
26d344a0ef
Initial checkin of launch instances module
2017-03-18 21:52:49 -07:00
06e6a973ce
land #7944 a scanner for Carlo Gavazzi energy meters
2017-03-18 10:35:43 -04:00
1180bd6ed7
Land #8037 , priv_migrate improvements
2017-03-17 13:19:51 -05:00
095a110e65
Code and doc tweaks (minor).
...
Only one behavior change in the scan loop of zstumbler.rb to, when doing a scan across all the channels, keep it from retrying channel 11 again one last time just before it exits.
2017-03-16 21:43:36 -05:00
7a12e446a0
Updated documentation and fixed module header. Whoops, copy/paste fail.
2017-03-16 21:28:24 -05:00
ab75794cd4
Land #8071 , Add API to send an MMS message to mobile devices
2017-03-16 11:57:34 -05:00
1daee6891e
Cosmetic
2017-03-16 11:37:14 -05:00
d4ee254057
Land #8076 , Add Easy File Sharing FTP Server Version 3.6 traversal
2017-03-15 16:17:13 -05:00
8afe6a9061
Update easy_file_sharing_ftp and add documentation
2017-03-15 16:14:41 -05:00
b65919e7b1
Land #7956 , Add QNAP NAS/NVR administrator hash disclosure
2017-03-15 11:12:59 -05:00
94d445ff48
Remove an old habit with curl
2017-03-15 05:18:50 -05:00
f58c6b96d8
Add addendum to module doc
2017-03-15 05:03:35 -05:00
559e426f37
Add module doc to appease the @h00die god
2017-03-15 04:48:49 -05:00
b3fbbbee34
Spelling is hard
2017-03-14 23:34:00 -05:00
cc4f18e6c5
Add sysgauge_client_bof module and documentation
2017-03-14 23:29:19 -05:00
1736332638
Land #8103 , Add CVE-2017-5638, Struts2 Content-Type OGNL injection
2017-03-14 16:10:49 -05:00
295ac63a1c
Add doc for struts2_content_type_ognl
2017-03-14 16:09:44 -05:00
Yorick Koster
Yorick Koster
itsmeroy2012
William Vu
dmohanty-r7
h00die
Brent Cook
Daniel Teixeira
wchen-r7
James Lee
Matthias Brun
Jonathan Claudius
nixawk
Ahmed S. Darwish
mr_me
bigendiansmalls
William Webb
h00die
juushya
Christian Mehlmauer
bwatters-r7
Carter
zerosum0x0
Patrick DeSantis
Javier Godinez
Pearce Barry
Mehmet Ince
Louis
Craig Smith
Chris Higgins