Jeffrey Martin
4ae90cbbef
Land #7191 , Add exploit for CVE-2016-6267 - Trend Micro Smart Protection Server authenticated RCE.
2016-11-14 12:06:02 -06:00
William Webb
4e40546958
Land #7502 , Disk Pulse Enterprise Login Buffer Overflow
2016-11-14 10:28:53 -06:00
Brent Cook
4f323527c9
Land #7549 , Deprecate/move wp_ninja_forms_unauthenticated_file_upload
2016-11-14 03:00:02 -06:00
Brent Cook
67998600e8
Land #7456 , add android_hide_app_icon command
2016-11-14 02:56:44 -06:00
Brent Cook
422ff57335
update metasploit-payloads
2016-11-14 02:53:18 -06:00
Brent Cook
98a54cd458
Merge branch 'upstream-master' into land-7456-android-hide-app
2016-11-14 02:43:04 -06:00
Pedro Ribeiro
908713ce68
remove whitespace at end of module name
2016-11-14 08:35:34 +00:00
Chris Higgins
4e9802786c
Removed spaces causing build to fail
2016-11-13 21:46:24 -06:00
Dylan Davis
a8a09261e1
Use files for rescue error, because left is not available
2016-11-11 21:49:06 -07:00
Pearce Barry
9eb9d612ca
Minor typo fixups.
2016-11-11 16:54:16 -06:00
Pearce Barry
1dae206fde
Land #7379 , Linux Kernel BPF Priv Esc (CVE-2016-4557)
2016-11-11 16:50:20 -06:00
Pearce Barry
6277db4396
Land #7554 , Fix powershell option for shell_to_meterpreter module
2016-11-11 14:33:33 -06:00
David Maloney
8e3888f20c
the template ref in this module was missed
...
when we cleaned up all the other powershell template refs
we missed the one in this module which seems to e replicating
large ammounts of library code
7533
2016-11-11 14:24:33 -06:00
dmohanty-r7
2b5517f597
Land #7506 , Add gather AWS keys post module
2016-11-11 13:56:12 -06:00
dmohanty-r7
3ae021faba
Update aws gather key docs
2016-11-11 13:50:24 -06:00
David Maloney
fbcc4baf58
Land #7553 , apk inject cert fix
...
Lands dana-at-cp's fix for the certtool localization
issues for the APK injection routine.
Fixes #7524
2016-11-11 12:54:41 -06:00
Metasploit
f116ad2c59
Bump version of framework to 4.12.42
2016-11-11 10:02:14 -08:00
Jenna Magius
db32c5fdcc
msftidy whitespace fixes
2016-11-11 10:28:37 -07:00
Dylan Davis
fddc2c221f
Catch the specific exception. Include the error code in the error message.
2016-11-11 10:24:05 -07:00
Dylan Davis
69a4a327b8
Add begin-rescue blocks that prevent individual hosts from bailing out a threaded multi-host execution
2016-11-11 10:15:36 -07:00
David Maloney
415439eda8
the template ref in this module was missed
...
when we cleaned up all the other powershell template refs
we missed the one in this module which seems to e replicating
large ammounts of library code
7533
2016-11-11 10:01:22 -06:00
dana-at-cp
c0e839dfd9
Fixes keytool bug in APK inject code
2016-11-11 06:12:47 -08:00
wchen-r7
8cd9a9b670
Deprecate wp_ninja_forms_unauthenticated_file_upload
...
wp_ninja_forms_unauthenticated_file_upload actually supports
multiple platforms.
Instead of using:
exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload
Please use:
exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload
2016-11-10 11:17:09 -06:00
Brent Cook
77bacacb9c
Land rapid7/rex-exploitation#2 , Fix heap_spray method's return value type
...
This fixes #7520
2016-11-09 20:39:01 -06:00
scriptjunkie
268a72f210
Land #7193 Office DLL hijack module
2016-11-08 23:15:27 -06:00
Brendan
4ea48a87cb
Land #7546 , Update Gemfile Gem Version
2016-11-08 18:15:57 -06:00
Brent Cook
5d5a4baaf7
back out rex-arch to avoid conflict with arch fixup PR
2016-11-08 17:42:42 -06:00
Brent Cook
129fa20bc1
update database schema
2016-11-08 17:40:32 -06:00
Brent Cook
aeeefc46da
update gems
2016-11-08 17:31:33 -06:00
Pedro Ribeiro
50f578ba79
Add full disclosure link
2016-11-08 22:15:19 +00:00
Yorick Koster
3c1f642c7b
Moved PPSX to data/exploits folder
2016-11-08 16:04:46 +01:00
Pedro Ribeiro
95bd950133
Point to proper link on github
2016-11-07 17:59:29 +00:00
Pedro Ribeiro
f268c28415
Create dlink_hnap_login_bof.rb
2016-11-07 17:45:37 +00:00
Pedro Ribeiro
cc24bb3993
Merge pull request #35 from rapid7/master
...
aa
2016-11-07 17:44:47 +00:00
Chris Higgins
099a5984f9
Updated with style suggestions from msftidy and rubocop.
...
Also updated with commented from other contributors.
2016-11-07 10:18:52 -06:00
William Vu
4eb42a9171
Fix broken ternary in phoenix_command
2016-11-07 00:12:04 -06:00
Chris Higgins
689fc28d1b
Added WinaXe 7.7 FTP client Server Ready buffer overflow
2016-11-06 23:35:16 -06:00
William Vu
6ba5e9ca8e
Land #7537 , action port fix for phoenix_command
2016-11-06 15:56:43 -06:00
Tijl Deneut
92964c1f95
Update phoenix_command.rb
2016-11-06 21:22:54 +01:00
Tijl Deneut
2c2729f0b2
Update phoenix_command.rb
...
Coded was messed up by MS Edge, don't use it :)
2016-11-06 21:21:20 +01:00
Tijl Deneut
1b4409f950
Update phoenix_command.rb
...
Style fix: replace "ractionport == nil ?" with "ractionport.nil?"
Is it OK? Did not find time to install and run rubocop ...
2016-11-06 21:15:31 +01:00
Tijl Deneut
4ea9214466
Fixed a small bug
2016-11-06 16:20:55 +01:00
朱雄宇
e9d85750c2
fix get_ipv4_addr(@interface) usage
...
get_ipv4_addr(@interface) returns a string not list, so get_ipv4_addr(@interface)[0] only got the first character of IP, which raises an error.
2016-11-06 19:04:57 +08:00
OJ
d751c43f52
FINALLY fix the last of the tests
...
Sorry for the stupidity.
2016-11-05 06:20:43 +10:00
OJ
3bc6808278
Really fix the session test this time
2016-11-05 06:07:44 +10:00
OJ
5f5684841b
Fix the DB/Session test
2016-11-05 05:59:31 +10:00
OJ
abe46024de
Fix tests after arch refactor
2016-11-05 05:15:57 +10:00
William Vu
da356e7d62
Remove Compat hash to allow more payloads
2016-11-04 13:57:05 -05:00
William Vu
f0c89ffb56
Refactor module and use FileDropper
2016-11-04 13:57:05 -05:00
William Vu
6d7cf81429
Update references
2016-11-04 13:57:05 -05:00