jvazquez-r7
c1b82bac0e
Land #4082 , @OJ's cleanup and improvements for CVE-2014-4113
2014-10-28 09:49:18 -05:00
Tod Beardsley
dade6b97ba
Land #4088 , wget exploit
...
Fixes #4077 as well.
2014-10-28 09:03:07 -05:00
Brendan Coles
a060fec760
Detect version in check()
2014-10-28 12:28:18 +00:00
sinn3r
e31c9f579d
Land #3987 - Buffalo Linkstation NAS Login Scanner
2014-10-28 01:45:57 -05:00
HD Moore
64c206fa62
Add module for CVE-2014-4877 (Wget)
2014-10-27 23:37:41 -05:00
William Vu
4e12fdb057
Land #4087 , COPYING copyright year update
2014-10-27 23:34:15 -05:00
Tod Beardsley
d8b71b94a7
With 66 days left in 2014, may as well update
2014-10-27 23:07:57 -05:00
HD Moore
958fe2e5bc
Allow PASV port specification, lands #4086
2014-10-27 22:24:14 -05:00
Tod Beardsley
d8cf45ef67
Allow FTP server exploits pick a PASV port
...
This makes it somewhat easier to use FTP server exploit modules in
somewhat more restrictive networks, where you might only have a few
inbound ports to choose from.
2014-10-27 22:21:54 -05:00
James Lee
77d4623c44
Fix respond_to specs for protected methods
2014-10-27 19:39:32 -05:00
Peter Arzamendi
0b225d94b1
Xerox Admin password extractor.
2014-10-27 19:26:40 -05:00
Juan Escobar
2ba2388889
Fix issues reported by jvasquez
2014-10-27 19:15:39 -05:00
jvazquez-r7
b990b14a65
Land #3771 , @us3r777's deletion of jboss_bshdeployer STAGERNAME option
2014-10-27 18:09:35 -05:00
jvazquez-r7
cf9d53fb50
Undo mixin modification
2014-10-27 18:09:03 -05:00
OJ
908094c3d3
Remove debug, treat warnings as errors
2014-10-28 09:04:02 +10:00
OJ
0a03b2dd48
Final code tidy
2014-10-28 08:59:33 +10:00
OJ
6f3b373f01
More code tidy and unifying of stuff
2014-10-28 08:37:49 +10:00
parzamendi-r7
f7f6cff327
Update xerox_workcentre_5XXX_ldap.rb
2014-10-27 17:23:47 -05:00
jvazquez-r7
e6e4aaba3e
Land #3518 , @midnitesnake's fix for solaris sadmind_exec
2014-10-27 17:19:06 -05:00
jvazquez-r7
0b6406ae40
Land #4080 , @todb-r7's switch to TLS1 on TCP and TCPServer
2014-10-27 17:15:36 -05:00
OJ
0e761575c8
More code tidying, reduced x64/x86 duplication
2014-10-28 08:09:18 +10:00
OJ
062eff8ede
Fix project settings, make files, start tidying of code
2014-10-28 07:58:19 +10:00
midnitesnake
bc57e5d057
Merge pull request #2 from jvazquez-r7/review_3518
...
Force perl encoding
2014-10-27 21:32:17 +00:00
Luke Imhoff
dae114a7f3
Document how to derive reference_name from ancestors
...
MSP-11145
2014-10-27 15:59:12 -05:00
Tod Beardsley
7d34452448
TCP and TCPServer should use TLS1 by default
2014-10-27 15:55:50 -05:00
Peter Arzamendi
f119abbf8c
Xerox workcentre 5735 LDAP credential extractor
2014-10-27 15:52:12 -05:00
jvazquez-r7
373ce8d340
Use perl encoding
2014-10-27 15:30:02 -05:00
Luke Imhoff
485860ebfb
Uncomment specs used to cause failure
...
MSP-11145
Restore commented out specs so that that the untested payloads check
passes.
2014-10-27 15:27:16 -05:00
Luke Imhoff
216360d664
Add missing require
...
MSP-11145
2014-10-27 15:19:59 -05:00
William Vu
1508be6254
Fix whitespace in lib/msf/ui/banner.rb for #4073
2014-10-27 14:49:44 -05:00
William Vu
7f66d18cfd
Clean up whitespace a bit
2014-10-27 14:49:27 -05:00
Luke Imhoff
f37ca3e82b
SPEC -> SPEC_OPTS
...
MSP-11145
Fix typo in .travis.yml
2014-10-27 14:46:40 -05:00
jvazquez-r7
9da83b6782
Update master changes
2014-10-27 14:35:30 -05:00
Luke Imhoff
43552a8304
Tag module specs with :content
...
MSP-11145
Tag content-related specs so they can be run separately in travis-ci.
2014-10-27 14:25:34 -05:00
William Vu
626cd55b5e
Land #4073 , improved banner selection
2014-10-27 14:20:10 -05:00
Luke Imhoff
c84febea5f
tools/missing-payload-tests.rb
...
MSP-11145
**NOTE: Failing specs**
Add a tool for reading `log/untested-payload.log` and
`framework.payloads` to determine `context`s to add
`spec/modules/payloads_spec.rb` to test the untested payloads.
2014-10-27 13:03:31 -05:00
Spencer McIntyre
04a99f09bb
Land #4064 , Win32k.sys NULL Pointer Dereference
2014-10-27 14:01:07 -04:00
jvazquez-r7
f24129933f
Land jvazquez-r7#22, @zeroSteiner 64 bits version
2014-10-27 12:19:06 -05:00
jvazquez-r7
042d29b1d6
Compile binaries in house
2014-10-27 12:18:33 -05:00
William Vu
090d9b95d1
Land #4078 , pureftpd_bash_env_exec desc. update
2014-10-27 12:12:09 -05:00
William Vu
950fc46e4b
Normalize description
2014-10-27 12:09:39 -05:00
Jon Hart
b8c9ef96ca
Land #4003 , @nstarke's Login Scanner for WD MyBook Live NAS
2014-10-27 09:57:43 -07:00
Jon Hart
765b5e686c
Use configured method and URI rather than duplicated values
2014-10-27 09:56:39 -07:00
Spencer McIntyre
830f631da4
Make the check routine less strict
2014-10-27 12:51:20 -04:00
Luke Imhoff
1df82ea273
Fix typo in file name
...
MSP-11145
2014-10-27 11:34:26 -05:00
James Lee
7081026ae6
Fix some specs broken by 2.x's new rules
...
* default utf-8 everywhere broke tests in lib/rex/text_spec that dealt
with binary data
* new protected rules
2014-10-27 10:28:24 -05:00
James Lee
d4e2d533bf
Add ruby 2.x to travis testing
2014-10-27 10:28:24 -05:00
Spencer McIntyre
d6a63ccc5e
Remove unnecessary C debugging code for the exploit
2014-10-27 11:24:23 -04:00
sinn3r
aa5dc0a354
100 columns per line
2014-10-27 10:24:11 -05:00
sinn3r
7e56948191
Update description about pureftpd_bash_env_exec
...
Make exploitable requirements more obvious
2014-10-27 10:23:06 -05:00