a3fb8b6619
Update labf_nfsaxe.rb
2018-01-04 20:55:38 +00:00
67e7ea4df9
Fix markdown premature less-than sign escape
2018-01-04 15:51:05 -05:00
e5bb4bf057
Add files via upload
2018-01-04 20:26:28 +00:00
160f960f78
Add files via upload
2018-01-04 20:25:41 +00:00
3a7a539c84
Bump version of framework to 4.16.31
2018-01-04 12:17:08 -08:00
78872be2ad
Merge released '4.x'
2018-01-04 14:13:18 -06:00
fb75cd4617
it does work!
2018-01-04 14:44:43 -05:00
65f444ddcc
land #9362 exploit for pfsense graph injection
2018-01-04 14:35:52 -05:00
c9d6d0a7a7
-51
2018-01-04 12:25:31 -06:00
d4de9eef9b
Bump version of framework to 4.16.30
2018-01-04 10:03:21 -08:00
50f4ebb3b2
Add register_dirs_for_cleanup to FileDropper
2018-01-04 11:06:32 -06:00
d7c826b5e8
Add rm_rf to Post::File
2018-01-03 23:14:21 -06:00
366a20a4a4
Fix #9215 , minor style nitpick
2018-01-03 23:11:51 -06:00
520e890520
Land #8581 , VMware Workstation ALSA Config File Local Privilege Escalation
2018-01-03 21:35:57 -06:00
b8dde2e650
Land #9360 , Ayukov NFTP FTP client buffer overflow vulnerability
...
Land #9360
2018-01-03 20:56:12 -06:00
04cf3017c0
Update ayukov_nftp exploit and module documentation
2018-01-03 20:52:57 -06:00
7849155347
Land #9359 , Improve DCE/RPC fault handling
2018-01-03 20:42:17 -06:00
c3f10c1d57
Land #9336 , Linksys WVBR0-25 exploit
2018-01-03 18:13:44 -06:00
589de0483b
Clarification in product linkage and small syntax fixup in repro steps
2018-01-03 17:00:26 -06:00
a5fa63405f
Land #9206 , Add Xplico RCE exploit module
2018-01-03 16:02:51 -06:00
16fa3b99ef
Land #9350 , Improve fake SSL cert details
2018-01-03 15:32:27 -06:00
a98de2d9a3
Land #9358 , Support password protected key files
2018-01-03 15:12:28 -06:00
a1d43c8f33
Land #9215 , new Drupageddon vector
2018-01-03 14:45:32 -06:00
84c951cc1d
Land #8059 , Postfixadmin alias modification module
2018-01-03 14:29:49 -06:00
16d709f180
changes+filedropper
2018-01-03 14:09:30 -06:00
70fbcc3ea8
Land #9280 , add initial module automation tests
2018-01-03 10:47:24 -06:00
e23e87b444
bcoles fixes
2018-01-02 20:23:24 -05:00
3b0f0aa358
Adding doc file for module linksys_wvbr0_user_agent_exec_noauth
2018-01-02 14:54:18 -06:00
8f0e41e159
requested changes
2018-01-01 17:30:43 -06:00
bc088cb379
added md
2018-01-01 05:46:04 -06:00
c47d09717d
pfsense graph sploit
2018-01-01 03:18:51 -06:00
3af27a04e0
Update ayukov_nftp.rb
2017-12-31 17:48:37 +00:00
67357e316b
Update ayukov_nftp.rb
2017-12-31 17:48:23 +00:00
10b2833e7c
Update ayukov_nftp.rb
2017-12-31 17:00:17 +00:00
21717ae0a2
Create ayukov_nftp.rb
2017-12-31 15:43:16 +00:00
76d345039d
Create ayukov_nftp.md
2017-12-31 15:42:32 +00:00
086f657c56
Fix early termination of auxiliary/scanner/dcerpc/hidden
...
This commit fixes an issue, where auxiliary/scanner/dcerpc/hidden terminates directly, once an endpoint can't be reached or access is denied. Instead the next endpoint in list should be checked, instead of terminating directly.
2017-12-31 14:41:33 +01:00
f2a8d68a1f
Permit encrypted SSH keys for login scanner
...
Net::SSH::KeyFactory permits loading keys using a passphrase.
The Framework SSH modules were implemented back when we had a fork
of net-ssh in our tree, and can now use functionality provided by
the upstream gem.
Update the ssh key login scanner to add a KEY_PASS datastore
OptString which is then passed to the KeyCollection class and used
in the updated :read_key method which now calls the KeyFactory to
read data and give us the appropriate String representation of the
key in the KeyCollection's cache.
A bit of cleanup performed as well, removing legacy code paths no
longer hit by the module. Shamelessly added self to authors, fair
amount of blood and sweat in the SSH subsystem over the years, hope
nobody objects.
Testing:
None yet
2017-12-31 02:53:06 -05:00
bc0a08ef5a
a few updates per bcoles
2017-12-30 11:23:58 -05:00
c153788424
Remove sleeps
2017-12-30 15:20:56 +00:00
7f3df74134
fixup! Adding Module for Postfixadmin CVE-2017-5930
...
Add error handling if request fails
Fix a typo in doc, add default value to doc
2017-12-30 13:04:23 +01:00
ece5528379
Small tweaks based on @bcoles feedback. Thanks!
2017-12-29 16:17:53 -06:00
54159c29eb
Add documentation line from h00die
2017-12-29 16:14:28 -06:00
2b96f8e272
Land #9353 , Implement CommandShellCleanupCommand
2017-12-29 17:06:28 -05:00
3516305517
land #9191 an exploit against HP LoadRunner magentproc
2017-12-29 16:35:43 -05:00
4dacc70b9a
slight updates to magentproc docs
2017-12-29 16:35:12 -05:00
b698095c49
slight updates to magentproc docs
2017-12-29 16:30:32 -05:00
a444bdb329
handle no datastore
2017-12-29 15:26:28 -06:00
bb97467b31
docs for auxiliary/scanner/http/directadmin_login
2017-12-29 14:43:20 -06:00
0b9fbe5a63
Resolve a bug in reverse_tcp and segfaults across payloads
2017-12-29 14:18:55 -06:00
Daniel Teixeira
Matthew Kienow
Metasploit
Jeffrey Martin
h00die
wetw0rk
William Vu
Brent Cook
Wei Chen
Aaron Soto
headlesszeke
dmohanty-r7
Adam Cammack
bka-dev
RageLtMan
Brendan Coles
Jan-Frederik Rieckers
HD Moore