Commit Graph

45004 Commits (90251f3e6c890a8e4b58f550b35c76e79840f506)

Author SHA1 Message Date
Brent Cook f125e13278
python meterpreter whitespace normalization 2018-01-09 16:08:52 -05:00
Wei Chen 777e383568
Land #9377, Add HPE iMC dbman RestoreDBase Unauthenticated RCE exploit
Land #9377
2018-01-09 13:56:53 -06:00
Wei Chen a0c9cdd73d
Land #9376, Add HPE iMC dbman RestartDB Unauthenticated RCE exploit
Land #9376
2018-01-09 13:28:03 -06:00
Wei Chen b06db60a56 Fix typos 2018-01-09 11:20:02 -06:00
Brent Cook cb82015c87
Land #9387, Check exploit stance for array as well as string 2018-01-09 03:52:59 -05:00
Brent Cook 573ee28631
Land #9378, Detect and return on bad VNC negotiations 2018-01-09 03:46:00 -05:00
William Vu f1bb3feb34
Land #9388, update LICENSE and COPYING 2018-01-09 00:01:49 -06:00
William Vu 4849c6cdf1 Update COPYING 2018-01-09 00:01:35 -06:00
Wei Chen 7b6a8af387 Update commvault_cmd_exec module documentation 2018-01-08 15:42:01 -06:00
William Vu bbad416a86 Add module doc to appease the @h00die god 2018-01-08 15:02:39 -06:00
William Vu 4a5a17a8e1 Add NIS ypserv map dumper 2018-01-08 14:27:53 -06:00
Aaron Meese 463d9b836b
Update LICENSE
Updated year
2018-01-08 14:17:44 -06:00
William Vu 333d57461a Check exploit stance for array as well as string
An exploit can be both aggressive and passive.
2018-01-08 13:52:04 -06:00
Kevin Kirsche ab89e552ed
Remove accidental trailing space 2018-01-08 14:42:03 -05:00
Kevin Kirsche 2252490e62
Fix using arbitrary keys to instead use "URL" 2018-01-08 14:30:03 -05:00
Kevin Kirsche e80ca348cf
Add Exploit-DB ID 2018-01-08 10:55:46 -05:00
Wei Chen 693a12e307
Land #9384, Add mkienow to the mailmap file
Land #9384
2018-01-07 20:35:01 -06:00
Kevin Kirsche 6beeece708
Re-add timeout value 2018-01-07 20:21:29 -05:00
Matthew Kienow 3c23fda36a
Add mkienow to the mailmap 2018-01-07 18:00:21 -05:00
Wei Chen a633caf734
Land #9382, Add Aaron to mailmap
Land #9382
2018-01-07 12:22:09 -06:00
Wei Chen d138f1508c
Land #9340, Add exploit for Commvault Remote Command Injection
Land #9340
2018-01-07 12:17:26 -06:00
Daniel Teixeira ff1806ef5f
Update labf_nfsaxe.rb 2018-01-07 16:46:06 +00:00
Pearce Barry 340cd66b7c
Add Aaron to the mailmap. Woo! 2018-01-06 22:37:30 -06:00
Kevin Kirsche eefd432161
Make sure Platforms match our actual target list 2018-01-06 08:31:30 -05:00
Kevin Kirsche 4bd196f8b2
Fix missing single quotes and remove comma 2018-01-06 08:30:48 -05:00
Kevin Kirsche 867b32415d
Fix feedback from wvu-r7
Fixes feedback from wvu-r7

- Consolidates payload to single method
- Replaces gsub! with standard encode method
- Note exploit discovery and proof of concept code used in authors (still seems weird to include the discovery as an author...)
- Change link
- Use `ARCH_CMD` instead of `[ARCH_CMD]`
- Remove Linux target as it's only Windows or Unix
- Remove timeout as I don't know how to pass it to `send_request_cgi`
2018-01-06 08:12:43 -05:00
William Vu 461f1c12e6 Fix nil bug(s) by moving arrays to initialize 2018-01-06 02:31:16 -06:00
William Vu 14143c2b90 Fix missed file_dropper_win_path 2018-01-06 01:44:25 -06:00
Brendan Coles a1a594d1f8 Add documentation 2018-01-06 05:09:24 +00:00
Brendan Coles 9ec17bdd54 Add documentation 2018-01-06 05:08:33 +00:00
Kevin Kirsche 744f20304c
Remove hardcoded user-agent from the headers
Remove hardcoded user-agent from the headers allowing for `send_request_cgi` to control this
2018-01-05 18:22:27 -05:00
Daniel Teixeira a69f275a39
Update labf_nfsaxe.rb 2018-01-05 21:14:47 +00:00
Daniel Teixeira c819aebc76
Add files via upload 2018-01-05 21:11:21 +00:00
Daniel Teixeira 3fd13b86c3
Add files via upload 2018-01-05 21:02:18 +00:00
Daniel Teixeira e797ca4781
Add files via upload 2018-01-05 21:00:47 +00:00
Daniel Teixeira aca76e2a4e
Update labf_nfsaxe.rb 2018-01-05 20:58:36 +00:00
Daniel Teixeira 2643acbc25
Update labf_nfsaxe.rb 2018-01-05 20:55:49 +00:00
Daniel Teixeira b29710c66b
Add files via upload 2018-01-05 20:47:27 +00:00
Daniel Teixeira d34541aebd
Update labf_nfsaxe.rb 2018-01-05 20:44:40 +00:00
Daniel Teixeira 05dc90c615
Update labf_nfsaxe.rb 2018-01-05 20:44:38 +00:00
Daniel Teixeira 94a1198485
Update labf_nfsaxe.rb 2018-01-05 20:41:49 +00:00
Kevin Kirsche 2478de934b
Add CVE-2017-10271 / Oracle WebLogic wls-wsat RCE 2018-01-05 15:05:21 -05:00
Daniel Teixeira b97785c7a9
Update labf_nfsaxe.rb 2018-01-05 18:46:33 +00:00
Daniel Teixeira e7946549d7
Update labf_nfsaxe.rb 2018-01-05 18:31:40 +00:00
jgor 51e5fb450f Detect and return on bad VNC negotiations 2018-01-05 10:12:13 -06:00
Brendan Coles 006514864b Add HPE iMC dbman RestoreDBase Unauthenticated RCE exploit 2018-01-05 11:28:48 +00:00
Brendan Coles 52a5fc9e0a Add HPE iMC dbman RestartDB Unauthenticated RCE exploit 2018-01-05 11:28:14 +00:00
b0yd 10631b687c Removed reverse tcp cache size changes 2018-01-04 21:46:52 -05:00
b0yd 27f96110d1 Moved socket struct inside conditional 2018-01-04 21:29:49 -05:00
Wei Chen 9fbddd6474
Land #9374, fix HTML parsing problems for info -d
Land #9374
2018-01-04 16:08:56 -06:00