b33e7f477c
Land #4947 , h0ng10's TWiki exploit.
2015-03-18 17:17:34 -05:00
5dd718e4fa
Better description
2015-03-18 09:51:51 +01:00
00de437918
Initial commit
2015-03-18 09:45:08 +01:00
b197b7aaf0
Additional Updates
...
-Removed unused mixin
-Cleaned up Module name
-Cleaned up author name
2015-03-17 19:24:13 -04:00
085e6cc815
Implemented Recommended Changes
...
-corrected spelling error
-set only option to required
-dumped header data to included file
-Used Rex for jmp values
2015-03-17 16:39:56 -04:00
4d3a1a2f71
fix all duplicated keys in modules
2015-03-14 13:10:42 +01:00
bb81107e51
Land #4927 , @wchen-r7's exploit for Flash PCRE CVE-2015-0318
2015-03-13 23:58:05 -05:00
3bfdfbc987
Small changes
2015-03-13 18:55:11 -05:00
1ead57a80d
Land #4928 , @h0ng10's local exploit for iPass Mobile Client
2015-03-13 16:58:45 -05:00
9894a3dc54
Change module filename
2015-03-13 16:53:17 -05:00
b4de3ce42b
Do minor cleanup
2015-03-13 16:52:26 -05:00
b0e730d5ae
Typo
2015-03-13 20:41:14 +01:00
726f01b8cc
Initial version
2015-03-13 20:33:45 +01:00
182850df30
Stick to Win 7
2015-03-13 12:41:05 -05:00
2b199315d4
Final
2015-03-13 12:30:41 -05:00
75b2ef81dc
Land #4890 , @julianvilas's improvements struts_code_exec_classloader
2015-03-12 17:25:00 -05:00
b6146b1499
Use print_warning
2015-03-12 17:22:03 -05:00
e035e6ce51
Land #4899 , @h0ng10's exploit for iPass Open Mobile CVE-2015-0925
2015-03-12 16:42:52 -05:00
7b7ebc20d7
Fix indentation
2015-03-12 16:41:41 -05:00
da47d368e8
Do minor style cleaning
2015-03-12 16:35:48 -05:00
a77078b555
Add X86 target
2015-03-12 16:34:44 -05:00
b43893ad71
Lands #4903 , corrects the return value used for the script path
2015-03-12 14:05:22 -05:00
2eab258a76
msftidy
2015-03-12 19:07:56 +01:00
220a26c5a4
Land #4907 , CVE-2015-1427, elasticsearch groovy code injection
2015-03-12 11:28:24 -05:00
ac24652196
Land #4911 , CVE-2015-0096 (ms15_020_shortcut_icon_dllloader)
2015-03-12 10:51:56 -05:00
67d05f9354
Add the PR as a reference (how to guide)
2015-03-12 10:51:01 -05:00
68d69177ad
Add smb module for MS15-020
2015-03-11 23:46:50 -05:00
24440b8c38
Lands #4913 , adds OSVDB reference to nvidia module
2015-03-11 23:32:22 -05:00
a9fa2d25aa
Add SMB module for MS10-046
2015-03-11 23:23:56 -05:00
99494328d2
Update Nvidia module with an OSVDB ref
...
The paper is really good, but could use a more traditional reference.
[See #4884 ]
2015-03-11 19:51:22 -05:00
0e4e264325
Redo description
2015-03-11 18:19:28 -05:00
4e6aca0209
refactor create_exploit_file
2015-03-11 18:13:09 -05:00
5662e5c5a6
Add module for MS15-020
2015-03-11 17:29:02 -05:00
43b90610b1
Temp
2015-03-11 13:53:34 -05:00
2a9d6e64e2
Starting point for CVE-2015-0318
2015-03-11 09:58:41 -05:00
8a452a7cba
Do somce cleanup
2015-03-10 17:10:44 -05:00
4a84693fb0
Support windows
2015-03-10 16:58:33 -05:00
c26bea3429
Fix credits
2015-03-10 16:27:07 -05:00
980c83cb70
Fix metadata
2015-03-10 16:25:02 -05:00
9e17874389
Exploit CVE-2015-1427
2015-03-10 16:17:51 -05:00
64f769504b
encoding
2015-03-10 17:47:15 +01:00
6657c7d11d
Belkin - CVE-2014-1635
2015-03-10 16:49:51 +01:00
f8f178b1db
Fix script_mvel_rce check
2015-03-10 09:39:02 -05:00
9dc99e4207
Update check
2015-03-10 09:26:22 -05:00
c6cb1e840d
Fixes persistence module by revering changes to the value returned by the write_script_to_target function, which screws up the path that is used for startup. Currently an escaped path "C://Users//..." is being used instead of using windows standards "C:\Users\...".
2015-03-10 10:26:03 +01:00
fc4b312879
Add template
2015-03-09 23:04:32 -05:00
fe822f8d33
Modify automatic file cleanup
2015-03-10 00:45:20 +01:00
0ef303cb6c
Fix Java payload
2015-03-10 00:01:27 +01:00
78167c3bb8
Use single quotes when possible
2015-03-09 16:55:21 -05:00
cb72b26874
Add module for CVE-2014-0311
2015-03-09 16:52:23 -05:00
bba4223d68
Initial commit
2015-03-09 16:36:11 +01:00
3075c56064
Fix "response HTML" message
...
In modules/exploits/multi/browser/firefox_xpi_bootstrapped_addon.rb.
2015-03-07 17:08:08 -06:00
2eb0011a99
Autotrigger JSP shell at docBase
2015-03-07 20:41:08 +01:00
3be2bde5a2
Use bypass for bulletin S2-020
2015-03-07 19:14:20 +01:00
2134cc3d22
Modify description
2015-03-05 16:55:24 -06:00
7b4776ee79
Deregister FOLDER_NAME
2015-03-05 16:42:07 -06:00
1bc81ea723
Merge #4884 into updated master
2015-03-05 16:41:15 -06:00
33f089b1a5
Tidyup
2015-03-05 21:50:12 +00:00
9f3f8bb727
Merging #3323 work
2015-03-05 15:44:15 -06:00
c388fd49c2
Fix print message
2015-03-05 15:43:54 -06:00
dd2559b748
Favor new target over new module
2015-03-05 15:41:53 -06:00
e1a4b046a0
Add support for tomcat 7 to struts_code_exec_classloader
2015-03-05 15:40:24 -06:00
c56679f33e
Modify for new SMB mixin
2015-03-05 21:26:13 +00:00
de08d8247b
Do some module cleanup
2015-03-05 13:00:01 -06:00
82659aba93
Populate metadata from code to make test easier
2015-03-05 12:40:20 -06:00
dc02f8332f
Pass msftidy
2015-03-05 12:29:31 -06:00
a06eb04d59
Deregister FOLDER_NAME on exploit modules
2015-03-05 12:27:12 -06:00
cb9922ad39
Land #4874 , Add PHPMoAdmin command injection
2015-03-05 11:30:44 -06:00
8978b1d7b5
Add a version
2015-03-05 11:29:44 -06:00
32188f09d6
Update phpmoadmin_exec.rb
...
Changes:
Added required comment at the top of the file;
Changed Class name "Metasploit3" >> "Metasploit4";
Standard name/email format for public PoC author.
2015-03-05 12:56:08 +00:00
95962aab0d
Update phpmoadmin_exec.rb
...
Changes:
"Check if vulnerable" code improvement;
Payload delivery code improvement;
Minor indent issues.
Thanks for your feedback guys :)
2015-03-05 12:46:53 +00:00
e715eaba58
Update description
2015-03-04 16:39:27 -06:00
e155f2998e
Change module filename
2015-03-04 16:38:08 -06:00
77abd57397
Do code cleanup
2015-03-04 16:37:31 -06:00
22ff4d0097
Update with master changes
2015-03-04 16:30:19 -06:00
e7de09df29
Change module filename
2015-03-04 16:18:45 -06:00
1337b7ace8
Clean module
2015-03-04 16:18:10 -06:00
9530e15c81
Update phpmoadmin_exec.rb
...
Changes:
Changed description section;
Changed 'URL' to 'EDB' in references section;
Added newline at the end.
2015-03-04 21:59:08 +00:00
d4738d8c0a
Update #3076 branch
2015-03-04 15:51:00 -06:00
c19895ac85
Update phpmoadmin_exec.rb
...
Changes:
Added new URL;
Added CVE number;
Corrected the disclosure date;
Corrected the normalize_uri() function syntax.
2015-03-04 21:31:44 +00:00
5cc9ea3618
Update with master changes
2015-03-04 15:16:12 -06:00
fa9d921138
Beautify description
2015-03-04 13:07:10 -06:00
8fdb7a798e
Change module filename
2015-03-04 13:01:06 -06:00
36375fab28
Fix downcase path handling
2015-03-04 12:58:41 -06:00
62dde22d88
Clean packet building
2015-03-04 12:27:58 -06:00
4d67e0e1bb
Add PHPMoAdmin RCE
2015-03-04 18:17:31 +00:00
e04ff3ee24
Delete CMD option
2015-03-04 11:51:58 -06:00
d4337ce1ae
Do minor metadata cleanup
2015-03-04 11:46:01 -06:00
1371cfe025
Test landing #4451
2015-03-04 11:20:07 -06:00
aaab4b401a
Fix indenting and use primer
2015-03-04 10:46:34 -06:00
0e57277dc1
Do cleanup
2015-03-04 10:33:57 -06:00
b9ed8178a9
Solve conflicts on ms13_071_theme
2015-03-04 10:28:52 -06:00
4757698c15
Modify primer to utilise file_contents macro.
2015-03-04 09:52:00 +00:00
a90ebfe9a7
Modify primer to utilise file_contents macro.
2015-03-04 09:51:32 +00:00
dfb6711ad7
Modify primer to utilise file_contents macro.
2015-03-04 09:51:01 +00:00
a5d748d19e
Modify primer to utilise file_contents macro.
2015-03-04 09:50:28 +00:00
0d56f5b6e6
Modify primer to utilise file_contents macro.
2015-03-04 09:49:17 +00:00
80b76436bb
Land #4831 , @wchen-r7's update for MS14-064 exploit
...
* Support Windows XP with VBScript technique
2015-03-03 19:19:49 -06:00
7591e9ece3
Unbreak the comment
2015-03-03 19:14:18 -06:00
79e7bf7f9c
Update comments and description
2015-03-03 19:13:15 -06:00
joev
Hans-Martin Münch (h0ng10)
jakxx
Sven Vetsch
jvazquez-r7
sinn3r
HD Moore
m-1-k-3
Tod Beardsley
Sigurd Jervelund Hansen
Julian Vilas
William Vu
Meatballs
Ricardo Almeida
Matthew Hall