a1e6d4d19a
Update note about staging payloads over HTTPS
2019-03-16 13:36:58 -05:00
621fa8e4db
Fix issues and refactor module
2019-03-16 00:38:48 -05:00
0fa2d985e7
Add Jenkins ACL bypass and metaprogramming RCE
2019-03-16 00:32:36 -05:00
f2edda207f
Land #11382 , Added BMC Patrol Agent Command Exec Module
2019-03-15 13:21:06 -05:00
82f0c9e9ee
Land #11385 , Add Webmin Upload Exec
2019-03-15 08:15:49 -05:00
5abfc2c136
Add Module Doc
2019-03-14 13:46:34 -05:00
fa3e84f764
Cleanup and Add Option
2019-03-14 13:26:41 -05:00
1d586e46c0
Use MIME for form
2019-03-14 10:13:48 -05:00
9a32231cb5
Change upload and add option
...
Change the contents of the uploaded file and
don't overwrite and existing file by default.
Add option to specify name of file.
2019-03-14 09:34:55 -05:00
bd1cd7fae8
Bug and style fixes
...
webmin RCE
2019-03-12 10:54:43 -05:00
59fc1ec7ab
Rubocop changes
2019-03-09 12:22:04 -05:00
6d14a53c80
Update tested versions
2019-03-09 04:41:51 +00:00
9aa01c9ed2
Add elfinder_php_connector_exiftran_cmd_injection exploit
2019-03-09 03:24:18 +00:00
468679f907
Land #11092 , Add FreeBSD 8.3 / 9.0 Intel SYSRET Privilege Escalation module
2019-03-06 19:50:08 -06:00
9ca5ac294d
Land #10012 , Add an Android module to run payloads with su on a rooted device
2019-03-06 19:46:33 -06:00
7347db65a6
Land #11534 , fix module title for sonicwall_xmlrpc_rce
2019-03-06 17:44:39 -06:00
d923e1fb84
Land #11523 , remove unneded RHOST reregister in scanners
2019-03-06 17:35:54 -06:00
d67bfdfea4
Fix module heading and typo
...
The newline in the name breaks the msfconsole output
2019-03-07 10:29:15 +11:00
50f89321a0
Land #11419 , systemd user service persistence
2019-03-06 01:39:58 -06:00
31ba073009
Add per-target SHELLPATH defaults
2019-03-06 00:07:17 -06:00
c539951311
Clean up method
2019-03-05 23:17:34 -06:00
715409496e
Fix #11210 , imperva_securesphere_exec options
2019-03-05 22:01:24 -06:00
4e31f53ca2
Fix required USERNAME and PASSWORD
...
Somehow I forgot to commit this? Strange.
2019-03-05 21:57:42 -06:00
c48dec7331
Land #11210 , imperva_securesphere_exec exploit
2019-03-05 21:52:13 -06:00
4e76eeceb7
Clean up module
2019-03-05 21:37:55 -06:00
108e90ca38
Land #11527 , .rubocop.yml TargetRubyVersion update
...
And TrailingCommaInArrayLiteral fixes in my modules. :(
2019-03-05 21:29:47 -06:00
6ff18828c0
Land #11481 , Drupal SA-CORE-2019-003/CVE-2019-6340
2019-03-05 21:09:06 -06:00
1f5695de07
Fix TrailingCommaInArrayLiteral in my modules
2019-03-05 21:02:39 -06:00
0de69e776a
Add friendly default payloads
2019-03-05 20:25:00 -06:00
2f76ad4205
Move print_line for DUMP_OUTPUT
2019-03-05 20:10:32 -06:00
84376c30c4
Refactor check methods once again
2019-03-05 19:47:41 -06:00
72bb49aca9
Make HTTP method configurable and prefer POST
2019-03-05 17:16:04 -06:00
d30bfe2cbf
Update drupal_drupalgeddon2
2019-03-05 13:26:05 -06:00
ea7c589b19
Refactor module and address review comments
2019-03-05 13:26:01 -06:00
ddef5b4961
MSF5: Remove unneeded RHOST deregister in scanners
...
With Metasploit 5, RHOST and RHOSTS are aliases, so no need to
deregister one or the other, as they are the same option. Deregistering
one deregisters both.
2019-03-05 13:04:49 -06:00
6765ed80d6
Land #11077 , Improvements and documentation for wing_ftp_admin_exec
2019-03-05 12:42:33 -06:00
a8a48050f9
Merge remote-tracking branch 'upstream/master' into pr/11481
2019-03-05 11:14:56 -06:00
502f63c0c4
Indent SOAP requests and prefer $() over ``
2019-03-04 19:10:33 -06:00
1dd243b8bd
Improve positive/negative prints in check method
2019-03-04 19:08:47 -06:00
225e0549c0
Revert CheckCode::Vulnerable to CheckCode::Appears
2019-03-04 18:38:44 -06:00
4100f1cfeb
Revert vprint_status to vprint_good
2019-03-04 18:22:12 -06:00
f8208bf0ef
Land #11464 , version checking for Wemo exploit
2019-03-04 18:18:02 -06:00
40ff708306
Refactor check method and address review comments
2019-03-04 17:49:09 -06:00
f05d86ffae
Even Less Code
2019-02-28 21:49:29 -05:00
b96326ec80
Less Code
2019-02-28 21:48:25 -05:00
b5587b926c
Add ForceExploit and fix code ident
2019-02-26 19:59:31 -08:00
2c2e1f0615
Remove custom imp. in favor of library change
...
Remove custom full_uri implementation in favor of a library change in #11485 which adds vhost support in the full_uri method.
2019-02-26 13:35:32 -05:00
24fa3a367d
Added directory creation to all the paths from systemd.unit(5)
2019-02-25 23:40:30 -06:00
f6a402c999
Fix tabs in the previous commit and fix style issues.
2019-02-25 21:24:13 -06:00
a6148f7733
Code improvements and fixes
2019-02-25 17:24:34 -05:00
William Vu
Brent Cook
Jacob Robles
rwincey
Brendan Coles
Patrick Webster
Wei Chen
rsp3ar
rotemreiss
terrorbyte