Commit Graph

45205 Commits (7e5214fef512da1d607ddaab5a8d3f4b2cc58177)

Author SHA1 Message Date
Carter Brainerd (thecarterb) a65604b09d
Add introduction header to web_delivery 2018-02-02 14:19:25 -05:00
Carter Brainerd (thecarterb) 2d8a249a56
Add intro header to office_ms17_11882 2018-02-02 14:12:36 -05:00
Carter Brainerd (thecarterb) a7e9772e25
A few fixes for office_word_hta
- Add introduction header
- Fix `Vulnerable Application` header and make it plural (multiple apps)
- Remove unnecessary console line for example
2018-02-02 14:11:05 -05:00
Carter Brainerd (thecarterb) daedf2a089
Fix word choice in cve_2017_8464_lnk_rce
- Also remove an unnecessary example step
2018-02-02 14:06:03 -05:00
Carter Brainerd (thecarterb) 0739fab092
Clarify testing environments for hp_dataprotector 2018-02-02 14:03:01 -05:00
Carter Brainerd (thecarterb) acf7f7747d
Fix double backslashes in panda_psevents 2018-02-02 13:32:55 -05:00
Carter Brainerd (thecarterb) 67682bd243
Make webdav.md look a little better 2018-02-02 13:31:30 -05:00
Carter Brainerd (thecarterb) d4c70a3beb
Fix md header in bypassuac_fodhelper 2018-02-02 13:28:47 -05:00
Carter Brainerd (thecarterb) 3de576a0df
Fix md header in vxsrchs_bof doc 2018-02-02 13:24:35 -05:00
Carter Brainerd (thecarterb) 9dde5ebf92
Update eternalblue docs
- Add a reference for OS protection rings
- Uncomment some windows versions
- Fix a word choice issue
2018-02-02 13:21:43 -05:00
William Vu c9473f8cbc
Land #9473, new MS17-010 aux and exploit modules 2018-02-01 23:56:29 -06:00
zerosum0x0 ffc7e078e2 don't disconnect until cleanup 2018-02-01 21:46:56 -07:00
zerosum0x0 afef1948bf catch exception for patched Vista 2018-02-01 21:39:25 -07:00
h00die 7cb0a118c1
Land #9399 a linux priv esc against apport and abrt 2018-02-01 21:54:54 -05:00
Brendan Coles 3c21eb8111 Update documentation 2018-02-02 02:27:13 +00:00
Jacob Robles 559b592394
Corrected Documentation 2018-02-01 13:17:02 -06:00
Jacob Robles bc18389284
Updated Document and Module
Update the documentation based on analysis of the vulnerability.
Slight modifications to the exploit module as well to reduce the
size of the generated file and reduce bad characters.
2018-02-01 10:05:50 -06:00
Brent Cook bbb0946008
Land #9481, Update native DNS spoofer for Dnsruby 2018-02-01 00:10:32 -06:00
RageLtMan 812d7ca739 Update native DNS spoofer for Dnsruby
Fix methods relating to answer/question data structures which were
set up for Net::DNS objects in the original implementation
utilizing uppercase letters in the exact same method names.

Testing:
  None yet, completely forgot i even wrote this module till i saw
it in my merge conflicts after upstream merged the PR.
2018-01-31 23:44:51 -05:00
zerosum0x0 469209a2b3 prefer x64 dynamite 2018-01-31 17:19:09 -07:00
zerosum0x0 6d7b48382e fix print arch key 2018-01-31 17:17:53 -07:00
zerosum0x0 ec26f01360 fix x64 typo 2018-01-31 17:12:07 -07:00
Brendan Coles 0d80ca6f79 Change documentation extension from rb to md 2018-01-31 23:26:30 +00:00
Brent Cook beb4d56f7d
Land #9354, Debut embedded httpd server (Brother printers) DoS 2018-01-31 17:03:13 -06:00
William Vu da23432745 Update cleanup method to check CWD 2018-01-31 16:19:43 -06:00
William Vu e60aeca2db Pass in session to CWD check
Oops, used to this being accessible universally. Not the case here.
2018-01-31 16:19:43 -06:00
William Vu 199a7cc134 Check for subdirectories and relative paths 2018-01-31 16:19:43 -06:00
William Vu 09d931e392 Split assignment across two lines for clarity
https://github.com/bbatsov/ruby-style-guide#use-if-case-returns
2018-01-31 16:19:43 -06:00
William Vu 15ff70fbda Add warning to FileDropper for deleting CWD 2018-01-31 16:19:43 -06:00
Brent Cook 465f3fd766
Land #9475, Fix import for Fix proxy authentication in reverse_http 2018-01-31 14:58:10 -06:00
Adam Cammack 64c725164a
Add macOS reverse stager binary 2018-01-31 14:27:44 -06:00
bwatters-r7 8be2b1f59e
Land # 9407, Add BMC Server Automation RSCD Agent RCE exploit module
Merge branch 'land-9407' into upstream-master
2018-01-31 13:35:29 -06:00
zerosum0x0 d5d3769517 more robust Windows XP SP0/SP1 fix 2018-01-30 18:11:07 -07:00
zerosum0x0 a9fa1b6a4d catch TypeError for matched pairs Frag leak 2018-01-30 10:32:59 -07:00
Jacob Robles 656bb7f567
Modified DupScout Fileformat Exploit 2018-01-30 09:12:05 -06:00
Tim W 0ce125ec55 more fixes 2018-01-30 17:54:10 +08:00
Tim W 39c07e2289 add references 2018-01-30 17:52:01 +08:00
zerosum0x0 bbeccdd024 more trace and more flexible tolerance for SP0/SP1 2018-01-29 19:57:43 -07:00
ssyy201506 9ea64db26f
Fix proxy authentication 2018-01-30 11:55:04 +09:00
zerosum0x0 7007bc1444 hopefully fixed XP SP0/SP1 issues 2018-01-29 19:11:30 -07:00
h00die 08dcb5cc49
Land #9445 fixes for ssl labs scanner module 2018-01-29 20:51:05 -05:00
zerosum0x0 cfb7aa6de7 NULL pointer checks on read/write primitives 2018-01-29 18:10:01 -07:00
zerosum0x0 b5a88e3c8b
remove VERBOSE req for prints in DBGTRACE 2018-01-29 15:01:37 -07:00
zerosum0x0 92915ebb69
Update ms17_010_command.md 2018-01-29 11:17:44 -07:00
Jacob Robles d4a0372238
Land #9457, Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow 2018-01-29 11:40:54 -06:00
zerosum0x0 5529bc10b3 fix docs 2018-01-29 10:20:57 -07:00
zerosum0x0 9b7c19db08 fix exception 2018-01-29 07:57:08 -07:00
zerosum0x0 a15befe94b squelch ::Rex::Proto::SMB::Exceptions::NoReply 2018-01-29 07:48:00 -07:00
zerosum0x0 6d35d241de fix pack error for xp 2018-01-29 07:45:07 -07:00
zerosum0x0 1a74c60339 fix output 2018-01-29 02:21:01 -07:00