Carter
|
e7b421e226
|
Update netgear_password_disclosure.rb
|
2017-02-08 13:40:11 -05:00 |
William Vu
|
766e7b013d
|
Once more, with feeling
|
2017-02-08 09:17:37 -06:00 |
|
William Vu
|
a71b097e6b
|
Revert status iteration, since it doesn't work
Also.
|
2017-02-08 09:13:42 -06:00 |
|
Carter
|
fd935c8e3c
|
Update netgear_password_disclosure.rb
|
2017-02-08 09:14:39 -05:00 |
|
William Vu
|
6b2a995a7d
|
Revert AutoPublish, since it doesn't work
Apparently.
|
2017-02-08 07:43:17 -06:00 |
|
William Vu
|
df38a91fbd
|
Be nice and parse JSON for the error
|
2017-02-08 07:37:09 -06:00 |
|
Carter
|
2dfff95669
|
Fix msftidy warning
|
2017-02-08 08:28:23 -05:00 |
|
William Vu
|
befe224c58
|
Use wordpress_and_online? before actions
|
2017-02-08 07:24:57 -06:00 |
|
William Vu
|
46ab03f528
|
Add SearchTerm to filter listed posts
|
2017-02-08 06:10:46 -06:00 |
|
William Vu
|
064420075f
|
Update diagnostics and print better header
|
2017-02-08 04:54:25 -06:00 |
|
William Vu
|
6df55c9733
|
Gotta catch 'em (post statuses) all
|
2017-02-08 04:31:06 -06:00 |
|
William Vu
|
7583d050b7
|
Add AutoPublish to publish updated posts
|
2017-02-08 04:01:42 -06:00 |
|
William Vu
|
e480107bd5
|
Add PostCount (default 100) to list more posts
|
2017-02-08 03:52:20 -06:00 |
|
William Vu
|
13f4b0d7ae
|
Be more specific with invalid post ID
|
2017-02-08 02:18:52 -06:00 |
|
Carter
|
c16b7e42a6
|
Fix review stuff
|
2017-02-07 21:41:38 -05:00 |
|
Carter
|
46fbc9dd3f
|
Fix some formatting
|
2017-02-07 21:32:19 -05:00 |
|
William Vu
|
6f4ff89218
|
Add WPVDB reference
|
2017-02-07 18:33:58 -06:00 |
jvoisin
|
96f7b2e245
|
http_version now store the fngerprints
Currently, the `http_version` module doesn't store the fingerprints
into the database; this commit should fix this behaviour.
|
2017-02-07 18:36:36 +01:00 |
|
Carter
|
f4580a2616
|
Add token value check
Sometimes it wouldn't return creds if the token is 0. It usually works after running it another time.
|
2017-02-07 10:53:25 -05:00 |
|
Carter
|
c1f9b724cf
|
Maybe fix syntax error
|
2017-02-07 10:36:05 -05:00 |
|
William Vu
|
b4056a110b
|
Print diagnostics if no posts found/given
|
2017-02-07 04:37:05 -06:00 |
|
William Vu
|
e1ade9caf8
|
Land #7910, closed ports fix for TCP portscan
|
2017-02-07 02:23:15 -06:00 |
|
Carter
|
00050abb73
|
Fix msftidy warnings
|
2017-02-06 22:06:50 -05:00 |
|
Carter
|
1f2a95c202
|
Use html parser instead of regex
|
2017-02-06 22:03:56 -05:00 |
|
Carter
|
115c60446e
|
Fix weird if loop in check
|
2017-02-06 17:30:49 -05:00 |
|
Carter
|
6ebdbc3f81
|
Fix some stuff from review
I'm going to change the HTML Regex to a parser a bit later, I don't have time right now
|
2017-02-06 17:29:39 -05:00 |
h00die
|
f531366d89
|
Land #7790 an aux module to extract Meteocontrol Weblog admin password
|
2017-02-06 15:23:06 -05:00 |
|
Carter
|
9b4ca31432
|
Fix typo
|
2017-02-06 12:52:41 -05:00 |
|
Carter
|
52cf9c44df
|
Update netgear_password_disclosure.rb
|
2017-02-06 12:43:31 -05:00 |
|
Carter
|
16c6480629
|
Add response checks
I can't test this right now as I'm not at a computer that has metasploit installed, but I'll test it when I get a chance to.
|
2017-02-06 12:10:01 -05:00 |
|
Carter
|
f5450a718a
|
Add TARGETURI datastore option
|
2017-02-06 11:54:29 -05:00 |
|
Carter
|
99227aca1a
|
Fix things from review
|
2017-02-06 09:44:35 -05:00 |
|
William Vu
|
8af966a132
|
Add WordPress content injection module
|
2017-02-06 04:40:26 -06:00 |
|
Carter
|
fb7e5ff847
|
Fix more msftidy warnings
|
2017-02-05 14:00:05 -05:00 |
|
Carter
|
f08590982c
|
Fix some msftidy warnings
|
2017-02-05 13:58:01 -05:00 |
|
Carter
|
609ea3700a
|
Create netgear_password_disclosure.rb
|
2017-02-05 13:39:58 -05:00 |
MatToufoutu
|
db77061719
|
do not add closed ports to database
|
2017-02-04 16:24:40 +01:00 |
juushya
|
d305f895ff
|
Fixed a typo space
|
2017-02-04 11:59:45 +05:30 |
|
juushya
|
36416c20cb
|
Updated check for extract fail case now + Minor edits
|
2017-02-04 03:00:31 +05:30 |
|
juushya
|
34b861403e
|
Minor updates
|
2017-02-04 01:44:18 +05:30 |
Pearce Barry
|
23c2787d57
|
Land #7795, Hardware Bridge API.
Initial bridge API that supports the HW rest protocol.
|
2017-02-02 08:47:59 -06:00 |
|
Pearce Barry
|
16de745437
|
Minor code cleanups/corrections.
|
2017-02-01 16:12:45 -06:00 |
|
juushya
|
58a50d7dd1
|
Minor edits
|
2017-02-01 04:46:05 +05:30 |
|
juushya
|
6d6db2f40f
|
Add epmp1000 dump config module
|
2017-02-01 04:42:47 +05:30 |
|
juushya
|
20a51371ce
|
Minor Edits
|
2017-02-01 04:23:28 +05:30 |
|
juushya
|
423648e347
|
Minor edits
|
2017-02-01 03:53:14 +05:30 |
|
juushya
|
82d2777417
|
Minor update
|
2017-02-01 03:44:50 +05:30 |
|
juushya
|
59e31e26f2
|
Add Binom3 module
|
2017-02-01 03:35:35 +05:30 |
Pedro Ribeiro
|
d5845343bd
|
Fix whitespace, thanks msftidy!
|
2017-01-30 10:15:20 +00:00 |
|
Pedro Ribeiro
|
fd6e10bf26
|
Add CVE numbers
|
2017-01-30 10:03:13 +00:00 |
Brent Cook
|
3c9b1be649
|
Land #7883, Fix cisco_firepower_download to pass the username properly
|
2017-01-27 16:31:06 -06:00 |
|
Brent Cook
|
4480ea7877
|
Land #7827, Cisco Firepower Management Console LoginScanner
|
2017-01-27 16:26:40 -06:00 |
|
Brent Cook
|
171cc7d54e
|
slight wording tweak
|
2017-01-27 16:26:23 -06:00 |
wchen-r7
|
e6de951e3e
|
Fix cisco_firepower_download to pass the username properly
|
2017-01-27 16:25:34 -06:00 |
|
Brent Cook
|
a4dd1fc846
|
Land #7805, Add CVE-2016-6435 - Cisco Firepower Management Console Dir Traversal
|
2017-01-27 16:09:14 -06:00 |
|
h00die
|
f846535d78
|
Land #7876 which adds an Advantech Webaccess credential gatherer
|
2017-01-26 19:37:36 -05:00 |
|
wchen-r7
|
fd6a58a348
|
URI decode users
|
2017-01-26 18:30:17 -06:00 |
|
wchen-r7
|
e47f38b3c9
|
Look at the right link to extract users
|
2017-01-26 18:20:06 -06:00 |
|
wchen-r7
|
ba50f2f88b
|
Fix nil for empty pass
|
2017-01-26 17:51:20 -06:00 |
|
wchen-r7
|
55b9c15d68
|
Pass should not be forced
|
2017-01-26 17:48:41 -06:00 |
|
wchen-r7
|
4ee0a380d1
|
Update module description
|
2017-01-26 16:35:15 -06:00 |
Joe Testa
|
5d255f11e1
|
Added MDNS query spoofing service.
|
2017-01-26 16:18:11 -06:00 |
|
wchen-r7
|
72b654c9b1
|
Update description
|
2017-01-26 14:58:02 -06:00 |
|
wchen-r7
|
94bc44b485
|
Add Advantech WebAccess Post Auth Credential Collector
|
2017-01-26 14:53:59 -06:00 |
|
wchen-r7
|
781bc8420a
|
Add Advantech WebAccess LoginScanner module
|
2017-01-26 13:54:50 -06:00 |
Louis Sato
|
1c6d7ee33e
|
additional changes for Nexpose XXE Arbitrary File Read
|
2017-01-25 10:29:58 -06:00 |
|
Brent Cook
|
836da6177f
|
Cipher::Cipher is deprecated
|
2017-01-22 10:20:03 -06:00 |
|
Brent Cook
|
f69b4a330e
|
handle Ruby 2.4 Fixnum/Bignum -> Integer deprecations
|
2017-01-22 10:20:03 -06:00 |
Jin Qian
|
b4d3e9da8d
|
This closes #7849 on the confusing message.
Use result.proof which has the right message. Thanks to Wei for pointing it
|
2017-01-19 15:39:10 -06:00 |
|
wchen-r7
|
b5f41b2915
|
Update advantech_webaccess_dbvisitor_sqli name
|
2017-01-18 11:09:52 -06:00 |
|
wchen-r7
|
82ab4fc630
|
Update cisco_firepower_download module & documentation
|
2017-01-17 13:58:10 -06:00 |
|
juushya
|
7791c58d5c
|
rubocop check & msftidy run clean. Minor updates.
|
2017-01-17 01:10:39 +05:30 |
|
juushya
|
657c7444bf
|
rubocop check & msftidy clean. Few updates.
|
2017-01-17 00:17:57 +05:30 |
|
h00die
|
c31d398549
|
more description
|
2017-01-16 09:46:56 -05:00 |
|
wchen-r7
|
a687073416
|
Add Cisco Firepower Management Console LoginScanner
|
2017-01-13 16:59:20 -06:00 |
|
wchen-r7
|
18347a8de7
|
Land #7774, Fix pivoting of UDP sockets in scanners
|
2017-01-10 13:57:28 -06:00 |
|
wchen-r7
|
8194603725
|
Add CVE-2016-6435 - Cisco Firepower Management Console Dir Traversal
|
2017-01-09 14:39:37 -06:00 |
|
juushya
|
93168648b4
|
Minor update in description
|
2017-01-08 13:28:07 +05:30 |
Craig Smith
|
5f07bca775
|
Hardware Bridge API. Initial bridge API that supports the HW rest protocol specified here:
http://opengarages.org/hwbridge Supports an automotive extension with UDS calls for mdoule
development.
|
2017-01-06 19:51:41 -08:00 |
|
juushya
|
4133a6fa97
|
Minor cleanup, msftidy check
|
2017-01-07 03:57:46 +05:30 |
dmohanty-r7
|
5cba9b0034
|
Land #7747, Add LoginScanner module for BAVision IP cameras
|
2017-01-06 16:25:44 -06:00 |
|
juushya
|
ba8394ecc1
|
Minor updates
|
2017-01-06 15:34:17 +05:30 |
|
juushya
|
39423a70a7
|
Add Meteocontrol Weblog Extract Admin password module
|
2017-01-06 15:20:41 +05:30 |
|
Pedro Ribeiro
|
6004caa475
|
fix whitespace
|
2017-01-05 01:58:16 +00:00 |
|
juushya
|
c5acda0a22
|
Fixed the file permissions
|
2017-01-05 04:40:41 +05:30 |
|
Pedro Ribeiro
|
d95a3ff2ac
|
made changes suggested
|
2017-01-04 23:02:10 +00:00 |
|
juushya
|
c15b77c31b
|
Add Cambium ePMP 1000 Login Scanner module
|
2017-01-05 04:19:32 +05:30 |
|
Pedro Ribeiro
|
9d3e90e8e5
|
cleanup
|
2017-01-02 17:32:38 +00:00 |
Brent Cook
|
04a026e786
|
remove lies from module, this is a bound socket
|
2017-01-02 09:47:18 -06:00 |
|
Pedro Ribeiro
|
4c29d23c8a
|
further cleaning
|
2016-12-31 17:02:34 +00:00 |
|
Pedro Ribeiro
|
956602cbfe
|
add final wnr2000 sploits
|
2016-12-31 16:49:05 +00:00 |
j91321
|
6c9e43f2ad
|
Add fingerprinting of devices, change documentation
|
2016-12-30 23:52:29 +01:00 |
|
Brent Cook
|
fdca963b61
|
check if the socket exists before closing
|
2016-12-30 14:59:31 -06:00 |
|
Pedro Ribeiro
|
870e8046b5
|
add sploits
|
2016-12-27 21:12:35 +00:00 |
|
William Vu
|
a7debd09fd
|
Fix broken YouTube link in firetv_youtube
Guess it's back to Epic Sax Guy. :-)
|
2016-12-25 20:22:07 -06:00 |
|
William Vu
|
6bb0f3207d
|
Add reboot action to chromecast_reset
|
2016-12-25 15:20:46 -06:00 |
|
wchen-r7
|
144f886e8b
|
Add LoginScanner module for BAVision IP cameras
|
2016-12-23 16:22:17 -06:00 |
|
William Vu
|
0589948a73
|
Remove other rhost (oops) and fail_with
|
2016-12-23 16:10:21 -06:00 |
Jon Hart
|
b4235835c8
|
rhost -> ip
|
2016-12-23 13:20:24 -08:00 |
|
Jon Hart
|
60e602c371
|
Update chromecast wifi gather module to use Scanner for scanning in bulk
|
2016-12-23 11:34:19 -08:00 |
|
Jin Qian
|
da9ea0b85c
|
Change the PCRE.
|
2016-12-16 15:41:10 -06:00 |
|
dmohanty-r7
|
f74fd9e5dd
|
Land #7672, support LOCKED_OUT and DISABLED login status
|
2016-12-16 15:11:05 -06:00 |
jinq102030
|
378d8aea36
|
Merge pull request #7697 from h00die/fix_colorado
Fix ftp traversal error conditions
|
2016-12-16 13:51:15 -06:00 |
|
h00die
|
b5beb2eb93
|
throw errors
|
2016-12-12 21:48:08 -05:00 |
|
h00die
|
2dca7c871b
|
applying #7582 to all ftp aux traversals
|
2016-12-10 16:05:09 -05:00 |
|
William Vu
|
f0dca7abbf
|
Land #7692, print_error for error_sql_injection
|
2016-12-09 17:09:52 -06:00 |
|
William Vu
|
2b0bce6459
|
Land #7690, drupal_views_user_enum user count fix
|
2016-12-09 16:55:01 -06:00 |
|
William Vu
|
4e235be484
|
Ensure a trailing slash for base_uri
Technically, the GET parameters should be in vars_get, but we don't want
to refactor the entire module right now.
|
2016-12-09 16:53:58 -06:00 |
|
Jin Qian
|
8780c325a7
|
Fixed issues #7691, silent exit.
Add a print statement to alert user what is missing, user could be confused that "show missing" is empty yet something is missing.
|
2016-12-09 16:20:44 -06:00 |
|
dmohanty-r7
|
77dd952370
|
Land #7592, check nil return value when using redis_command
|
2016-12-09 16:07:12 -06:00 |
|
Jin Qian
|
17c12a78f5
|
Fixed issue #7689, count of found users not accurate
In module drupal_views_user_enum, the count of found users is not accurate.
Fixed it by doing flatten before doing counting.
|
2016-12-09 15:19:43 -06:00 |
|
wchen-r7
|
7e0b224eb2
|
Make ABORT_ON_LOCKOUT non default
|
2016-12-08 15:07:53 -06:00 |
|
wchen-r7
|
0110b97fa2
|
Fix #7671, support LOCKED_OUT and DISABLED login status
This allows login scanner modules to skip a user if it is
locked out, or disabled.
Fix #7671
|
2016-12-07 16:49:16 -06:00 |
Rich Whitcroft
|
d3a8409a49
|
prevent further lockouts in smb_login
|
2016-12-06 21:53:08 -05:00 |
|
h00die
|
3d09e283cf
|
module ready
|
2016-12-02 22:03:23 -05:00 |
|
Jin Qian
|
4a35f8449a
|
Fixed issue #7650 by matching Server header using regex as Wei suggested
The suggestion by Wei is simpler than the one I checked in which checks for presence of Server header before calling include method.
|
2016-12-02 20:26:38 -06:00 |
|
Jin Qian
|
35fdf1473b
|
Fixed issue #7650 where etherpad_duo_login module may crash
Add check for presence of Server header.
|
2016-12-02 18:07:18 -06:00 |
|
Jin Qian
|
11906eb540
|
Fix issue #7645 where dolibarr_login module crashed
Add "res" (http response) when trying to retrieve the cookie
|
2016-12-01 15:38:26 -06:00 |
|
wchen-r7
|
9325ef8d8f
|
Land #7573, Add WP Symposium Plugin SQLI aux mod to steal credentials
|
2016-12-01 14:56:30 -06:00 |
|
wchen-r7
|
6b5dba72d4
|
Update description
|
2016-12-01 14:55:16 -06:00 |
|
wchen-r7
|
64bc029106
|
Fix Ruby style
|
2016-12-01 14:53:55 -06:00 |
|
wchen-r7
|
90ec367a99
|
Add method to save creds to database
|
2016-12-01 14:52:51 -06:00 |
|
William Vu
|
54684d31bd
|
Land #7641, check_conn? fix for cisco_ssl_vpn
|
2016-11-30 21:14:19 -06:00 |
|
William Vu
|
032312d40b
|
Properly check res
|
2016-11-30 21:03:29 -06:00 |
|
Jin Qian
|
ec83a861c8
|
Fix issue #7640 where cisco SSL VPN not move despite server responded
Add the "return true" statement that was missing.
|
2016-11-30 16:25:13 -06:00 |
|
wchen-r7
|
56505d2cc1
|
Resolve merge conflict
|
2016-11-30 14:33:23 -06:00 |
|
wchen-r7
|
c70c3701c5
|
Fix #7628, concrete5_member_list HTML parser
Fix #7628
|
2016-11-30 14:20:36 -06:00 |
|
wchen-r7
|
530e9a9bc6
|
Land #7633, fix dell_idrac to stop trying on a user after a valid login
|
2016-11-30 11:46:31 -06:00 |
|
Jin Qian
|
afed1f465e
|
Fix issue 7632 where MSF keeps trying after success.
Thanks to Wei who suggested adding "return :next_user" after success.
|
2016-11-29 14:57:15 -06:00 |
|
Jin Qian
|
1beeb99d44
|
Fix issue 7628, username extracted became garbled
Make the regular expression less aggressive.
|
2016-11-29 12:52:57 -06:00 |
|
William Vu
|
c39c53b102
|
Prefer DefaultOptions to reregistering SSL option
|
2016-11-28 14:29:02 -06:00 |
|
Pearce Barry
|
8c54b0e5f4
|
Land #7622, Fix check_conn? method in cisco_ironport_enum
|
2016-11-28 14:19:02 -06:00 |
|
William Vu
|
777d5c1820
|
Fix check_conn? method in cisco_ironport_enum
|
2016-11-28 14:02:39 -06:00 |
Cantoni Matteo
|
f0b5b5a153
|
call store_loot once at the end
|
2016-11-28 20:28:36 +01:00 |
|
wchen-r7
|
4eb109b22f
|
Land #7609, set SSL to true by default for cisco_nac_manager_traversal
|
2016-11-28 11:30:41 -06:00 |
|
Brent Cook
|
60210f57e9
|
Land #7505, fixed some targets for cisco_asa_extrabacon
|
2016-11-27 22:19:45 -06:00 |
jjarmoc
|
8824cc990a
|
Use Auxilliary Actions for different behaviors.
|
2016-11-26 13:04:04 -06:00 |
John Q. Public
|
0935d31de1
|
Changed print_status to print_good
Changed line 315 print type to good instead of the general status indication, so that the result output is easier to see.
|
2016-11-25 16:54:58 -06:00 |
|
John Q. Public
|
c286c708d9
|
Print file contents
Added a print_good statement at line 63 in order to print to contents of the newly discovered robots.txt file.
|
2016-11-25 15:57:37 -06:00 |
|
h00die
|
efa191dd10
|
fixed some spacing
|
2016-11-25 11:50:56 -05:00 |
|
h00die
|
00d9e69a98
|
potential double fix for #7582
|
2016-11-24 12:14:09 -05:00 |
|
Pearce Barry
|
ec020e3d07
|
Land #7611, cisco_ironport_enum falsely claimed connection failed
Fixes #7610
|
2016-11-24 09:54:09 -06:00 |
|
Cantoni Matteo
|
fd11e7c4df
|
modified it as recommended (@brandonprry) and added Module Documentation
|
2016-11-24 10:36:32 +01:00 |
|
Jin Qian
|
65b858ac06
|
Fix issue 7610, cisco_ironport_enum falsely claimed connection failed.
Make sure we return 1 in check_conn method.
|
2016-11-23 14:59:07 -06:00 |
|
Jin Qian
|
b7ae7a47be
|
Fix issue #7608 where the SSL option was not turned on by default
Set the SSL option to be on by default.
|
2016-11-23 14:45:42 -06:00 |
|
Jin Qian
|
0df3e17e0c
|
Fix the issue in MS2132 where OWA_LOGIN doesn't continue on connection error.
The possibility of temporary connnection disruption means this module should keep trying other user/pass pairs upon error.
|
2016-11-23 09:56:27 -06:00 |
|
h00die
|
372cf740da
|
saving before changing branches
|
2016-11-21 22:06:20 -05:00 |
|
wchen-r7
|
83a3a4e348
|
Fix #7463, check nil return value when using redis_command
Fix #7463
|
2016-11-21 15:52:12 -06:00 |
|
William Vu
|
6f8660f345
|
Land #7586, NameError fix for brute_dirs
|
2016-11-21 14:46:19 -06:00 |
|
William Vu
|
c8320d661f
|
Land #7590, mixin order fix for buffalo_login
|
2016-11-21 13:57:27 -06:00 |
|
Jin Qian
|
90d360a592
|
Fix the issue 7589, both RHOST and RHOSTS options are quired
Thanks to Will who found it's due to the order of mixin.
|
2016-11-21 11:06:32 -06:00 |
|
Jin Qian
|
18b873be47
|
Fix the exception issue reported in issue #7585
Fix the exception by initialize a key variable that caused the exception.
|
2016-11-21 10:00:23 -06:00 |
|
Brent Cook
|
0504cae21f
|
Land #7536, fix get_ipv4_addr(@interface) usage
|
2016-11-21 01:09:05 -06:00 |
|
h00die
|
05e59bbe19
|
non-working copy of varnish
|
2016-11-19 22:09:19 -05:00 |
|
h00die
|
774d363220
|
direct copy
|
2016-11-18 16:43:53 -05:00 |
David Maloney
|
6a35b366bc
|
Land #7577, URPORT fix
|
2016-11-18 14:41:10 -06:00 |
|
wchen-r7
|
00e4a8881f
|
Land #7574, Update open_proxy aux module
|
2016-11-18 11:41:43 -06:00 |
|
wchen-r7
|
d3adfff663
|
Change syntax
|
2016-11-18 11:41:04 -06:00 |
|
wchen-r7
|
f894b9a4c5
|
Fix typo
|
2016-11-18 11:39:26 -06:00 |
|
David Maloney
|
8d1c718873
|
Land #7572, wireshark dos typos
Lands mcantoni's pr for fixing typos in the
wireshark dos modules
|
2016-11-18 11:01:32 -06:00 |
|
wchen-r7
|
22d70ddd09
|
Fix #7455, handle the URIPORT option properly in is_uxss_injection
Fix #7455
|
2016-11-17 15:50:35 -06:00 |
Brian Patterson
|
abddeb5cd2
|
Land 7473, add censys search module
|
2016-11-17 13:44:00 -06:00 |
Brendan
|
f2b9498643
|
Land #7576, Fix RHOSTS use in auxiliary/scanner/ftp/titanftp_xcrc_traversal
|
2016-11-17 13:06:29 -06:00 |
|
Jin Qian
|
c03f35ef13
|
Fix the hanging of module auxiliary/scanner/ftp/titanftp_xcrc_traversal.rb
Thanks for Wei who pointed out the error: in store_loop call, it used "rhosts", should have been ip.
|
2016-11-17 10:08:59 -06:00 |
|
Cantoni Matteo
|
c9b9be9328
|
Update open_proxy aux module
|
2016-11-17 15:44:03 +01:00 |
|
Cantoni Matteo
|
b3b89a57b5
|
Add WordPress Symposium Plugin SQL Injection module
|
2016-11-17 15:04:53 +01:00 |
|
Cantoni Matteo
|
30f7006b5b
|
Fixed typos of an old commit
|
2016-11-17 14:39:33 +01:00 |
|
wchen-r7
|
f50e609d12
|
Land #7556, Prevent psexec_command from dying when one host errors
|
2016-11-15 12:17:01 -06:00 |
|
wchen-r7
|
e5d3289c18
|
Fix name for exception
|
2016-11-15 12:14:58 -06:00 |
|
j91321
|
3fd3bbdfb6
|
Added comments, removed uneccesary code
|
2016-11-13 23:22:15 +01:00 |
|
j91321
|
b377cd8fa3
|
Allegrosoft rompager auth bypass auxiliary module
|
2016-11-13 10:39:26 +01:00 |
Dylan Davis
|
a8a09261e1
|
Use files for rescue error, because left is not available
|
2016-11-11 21:49:06 -07:00 |
Jenna Magius
|
db32c5fdcc
|
msftidy whitespace fixes
|
2016-11-11 10:28:37 -07:00 |
|
Dylan Davis
|
fddc2c221f
|
Catch the specific exception. Include the error code in the error message.
|
2016-11-11 10:24:05 -07:00 |
|
Dylan Davis
|
69a4a327b8
|
Add begin-rescue blocks that prevent individual hosts from bailing out a threaded multi-host execution
|
2016-11-11 10:15:36 -07:00 |
|
William Vu
|
4eb42a9171
|
Fix broken ternary in phoenix_command
|
2016-11-07 00:12:04 -06:00 |
Tijl Deneut
|
92964c1f95
|
Update phoenix_command.rb
|
2016-11-06 21:22:54 +01:00 |
|
Tijl Deneut
|
2c2729f0b2
|
Update phoenix_command.rb
Coded was messed up by MS Edge, don't use it :)
|
2016-11-06 21:21:20 +01:00 |
|
Tijl Deneut
|
1b4409f950
|
Update phoenix_command.rb
Style fix: replace "ractionport == nil ?" with "ractionport.nil?"
Is it OK? Did not find time to install and run rubocop ...
|
2016-11-06 21:15:31 +01:00 |
|
Tijl Deneut
|
4ea9214466
|
Fixed a small bug
|
2016-11-06 16:20:55 +01:00 |
朱雄宇
|
e9d85750c2
|
fix get_ipv4_addr(@interface) usage
get_ipv4_addr(@interface) returns a string not list, so get_ipv4_addr(@interface)[0] only got the first character of IP, which raises an error.
|
2016-11-06 19:04:57 +08:00 |
|
Jon Hart
|
5b810fae41
|
Update atg_client to identify responses that indicate the command was not understood
|
2016-11-04 10:12:02 -07:00 |
|
William Vu
|
a651985b4f
|
Land #7498, Joomla account creation and privesc
|
2016-11-01 22:46:36 -05:00 |
|
William Vu
|
f414db5d6d
|
Clean up module
|
2016-11-01 22:46:28 -05:00 |
|
h00die
|
a924981369
|
Landing #7516, X11 print fixes
|
2016-11-01 19:50:05 -04:00 |
|
Brendan
|
05e2aad837
|
Land #7497, Add Kerberos domain user enumeration module
|
2016-11-01 14:34:47 -05:00 |
attackdebris
|
1b4cef10d1
|
Change creds_name to Kerberos
|
2016-11-01 17:59:51 +00:00 |
|
William Vu
|
5c065459ae
|
print_{good,error} more specifically in open_x11
|
2016-10-31 11:29:00 -05:00 |
|
Pearce Barry
|
991a3fe448
|
Markdown docs added.
|
2016-10-28 17:38:00 -05:00 |
Jan Rude
|
971c8207bd
|
Update telpho10_credential_dump.rb
Code improvements suggested by @h00die
|
2016-10-28 16:45:14 -05:00 |
|
Jan Rude
|
c9574a4707
|
Update telpho10_credential_dump.rb
output correction
|
2016-10-28 16:44:52 -05:00 |
|
Jan Rude
|
05ee51a832
|
Update telpho10_credential_dump.rb
do not write to stdout
|
2016-10-28 16:44:40 -05:00 |
|
Jan Rude
|
fb534a9e85
|
add telpho10_exploit
telpho10 credential dump exploit
|
2016-10-28 16:44:27 -05:00 |
Jeff
|
5eca6866f2
|
Fix failing versions, specify version explicitly
|
2016-10-28 16:24:06 -05:00 |
Filipe Reis
|
88a2a770a3
|
Update to have checks in place
Add: added checks to the code
|
2016-10-28 11:24:39 +01:00 |
|
Brendan
|
9eaaba1dea
|
Added user logging into the db and humored rubocop
|
2016-10-27 15:50:17 -05:00 |
|
attackdebris
|
c2af2ab214
|
Move kerberos_enumusers module to aux/gather & add documentation
|
2016-10-27 19:11:22 +01:00 |
|
Filipe Reis
|
88beea0c56
|
updating code
Fix: changing to seggested fixes
|
2016-10-27 14:30:59 +01:00 |
|
Filipe Reis
|
2851faefe8
|
Update module info
Fix: removed info that didn't belong
|
2016-10-27 03:11:38 +01:00 |
|
Filipe Reis
|
e522d7f5a4
|
Fixing issues regarding travis checks
Fix: EOL spaces;
|
2016-10-27 02:50:20 +01:00 |
|
Filipe Reis
|
8ad1c66bd3
|
Code update and file rename
Fix: clean up and improving code using all the comments.
Fix: rename file to a more meaning and more easy to search
|
2016-10-27 02:46:40 +01:00 |
|
Filipe Reis
|
0af47ef411
|
Fixing warning from travis checks
Fixing: Auxiliary modules have no 'Rank': Rank = ExcellentRanking
Fixing: Spaces at EOL
|
2016-10-26 23:29:17 +01:00 |
|
Filipe Reis
|
5a127886bb
|
Fixing issues regarding travis checks
Fixing unicode issues;
Fixing CVE format;
Fixing EOL spaces;
Fixing the way cookies are read.
|
2016-10-26 23:24:09 +01:00 |
|
Filipe Reis
|
94b05d7943
|
Joomla Account Creation and Privilege Escalation
This module allows to create an arbitrary account with administrative privileges in Joomla versions 3.4.4 through 3.6.3.
|
2016-10-26 23:11:38 +01:00 |
William Webb
|
9672759be8
|
Land #7462, Add support for Unicode domains
|
2016-10-26 16:47:09 -05:00 |
|
attackdebris
|
18c3d42aca
|
This commit adds the kerberos_enumusers module
|
2016-10-26 20:56:41 +01:00 |
|
Jon Hart
|
342bfd628a
|
Dont' set default PORTS or PROBE options. Require user configuration.
|
2016-10-25 15:58:46 -05:00 |
|
Jon Hart
|
2a18ea0e33
|
Initial commit of generic module for detecting UDP amplification vulnerabilities
|
2016-10-25 15:58:46 -05:00 |
|
Louis Sato
|
f7f28a0833
|
Land #7480, deprecation msg for udp_probe
|
2016-10-25 15:52:56 -05:00 |
|
David Maloney
|
c00df4dd71
|
Land #6969, Regsrv cmd delivery server module
This Lands kn0's PR for the Regsrv32 command delivery server
|
2016-10-24 11:46:59 -05:00 |
|
Jon Hart
|
7f65b28483
|
Deprecate udp_probe in favor of udp_sweep
|
2016-10-23 13:06:58 -07:00 |
Vex Woo
|
b5ba862e98
|
parse ipv4 / website info
|
2016-10-23 10:53:43 -05:00 |
|
Vex Woo
|
50284cf01b
|
parse domain/ip info from certificate
|
2016-10-23 10:33:17 -05:00 |
nixawk
|
c79c102998
|
remove unuse variable @uri
|
2016-10-21 23:59:09 -05:00 |
|
nixawk
|
893a6ef82e
|
add censys search module
|
2016-10-21 23:45:44 -05:00 |
|
David Maloney
|
e442f5f76b
|
Land #7460, zoomeye search module
typo in previous land commit
|
2016-10-21 13:48:28 -05:00 |
|
David Maloney
|
264fe7b8f8
|
Land #7460, zoomeye search module
|
2016-10-21 13:47:46 -05:00 |
|
David Maloney
|
05ffa0074c
|
Land 37460, zoomeye search module
Lands nixawk's zoomeye search aux module
|
2016-10-21 10:25:58 -05:00 |
|
nixawk
|
ada571bfdf
|
Fix login - check condition
|
2016-10-20 22:52:24 -05:00 |
|
nixawk
|
344b688ae5
|
remove ZoomEye_APIKEY, add (USERNAME / PASSWORD)
|
2016-10-20 22:48:01 -05:00 |
|
nixawk
|
097a273abb
|
fix dork_search
|
2016-10-19 20:54:31 -05:00 |
|
nixawk
|
72b2ba2e88
|
replace [Net::HTTP] with [rex/proto/http]
|
2016-10-19 20:40:45 -05:00 |
|
nixawk
|
a77f415893
|
remove unuseful condition
|
2016-10-19 20:05:12 -05:00 |
|
nixawk
|
9f3f0fd358
|
make [matches_records] simple
|
2016-10-19 19:59:02 -05:00 |
|
Brendan
|
b5a41c3011
|
Convert ANSI data to UTF-8 char by char because MS might
put an invalid character in the WORKGROUP name during SMB
handshake
|
2016-10-19 17:42:26 -05:00 |
|
nixawk
|
fcc22d9027
|
add module references info
|
2016-10-19 02:23:11 -05:00 |
|
William Vu
|
2668a4a1cd
|
Fix #6993, tnspoison_checker cleanup
|
2016-10-19 00:53:33 -05:00 |
|
nixawk
|
3630388e91
|
zoomeye search
|
2016-10-18 22:52:23 -05:00 |
|
William Webb
|
8e2ff8df80
|
Land #7433, Add IP Addresses to HTTP PUT/DELETE scanner output
|
2016-10-14 13:27:17 -05:00 |
|
Brent Cook
|
9fbe1ddd9d
|
Land #7384, CVE-2016-6415 - Cisco IKE Information Disclosure
|
2016-10-14 08:41:34 -05:00 |
|
nixawk
|
b74539be44
|
check if isakmp payload is same to IKE Leak data
|
2016-10-13 04:20:23 -05:00 |
|
nixawk
|
7536d1d94a
|
print leak data
|
2016-10-12 02:42:50 -05:00 |
|
nixawk
|
70d4833654
|
Fix report_vuln
|
2016-10-12 02:16:00 -05:00 |
Alton J
|
98d7b19ab9
|
Passed IP parameter to additional functions.
|
2016-10-11 15:09:50 -05:00 |
|
Alton J
|
acff0fa9cf
|
Added IP addresses to output.
|
2016-10-11 14:43:42 -05:00 |
|
Alton J
|
f0ff4a0721
|
Added IP addresses to output.
|
2016-10-11 14:42:06 -05:00 |
Sonny Gonzalez
|
3fd806b87f
|
Merge remote-tracking branch 'upstream/pr/6993' into land-6993
|
2016-10-11 09:33:26 -05:00 |
|
Brent Cook
|
e074669406
|
Land #7296, Added a SCADA module for detecting Profinet devices, e.g. Siemens controllers
|
2016-10-08 21:34:40 -05:00 |
|
William Vu
|
e8c3a61e72
|
Land #7405, nil fix for ntp_protocol_fuzzer
|
2016-10-05 15:26:39 -05:00 |
“lvarela”
|
8749eaf097
|
Fix the default num to be 0 when not specified.
|
2016-10-05 14:52:43 -05:00 |
|
Jon Hart
|
b95cc7bbbe
|
Set correct default options; fix usage on OS X
Fixes 7404
|
2016-10-05 09:51:31 -07:00 |
Stephen Haywood
|
2d361fabc6
|
No need to interpolate when using .to_s
|
2016-10-03 11:38:36 -04:00 |
|
Stephen Haywood
|
95f9b778bd
|
Use standard status messages instead of verbose.
|
2016-10-03 11:01:51 -04:00 |
|
Stephen Haywood
|
d088005d95
|
TABLE_NAME option not needed.
|
2016-10-03 10:58:13 -04:00 |
|
Stephen Haywood
|
5f12c8e026
|
Incorrect warning message
The filename is not always test so the warning message and the note in the description are incorrect.
|
2016-10-03 10:57:25 -04:00 |
|
Stephen Haywood
|
25996a16bb
|
Fixed file read block.
|
2016-10-03 10:47:03 -04:00 |
|
Stephen Haywood
|
708eb0eb4f
|
Fixed syntax error.
|
2016-10-03 10:17:29 -04:00 |
|
Stephen Haywood
|
fac03570d1
|
Use File.open block.
|
2016-10-03 10:09:45 -04:00 |
|
Stephen Haywood
|
bc57537205
|
Add warning statement.
|
2016-10-03 10:07:40 -04:00 |
|
Stephen Haywood
|
a627c3cd5e
|
Removed unnecessary return statements.
|
2016-10-03 10:02:26 -04:00 |