Brent Cook
|
5f43c7f3e9
|
Land #10745, Update lastore_daemon_dbus_priv_esc tested versions
|
2018-10-05 08:37:12 -07:00 |
bwatters-r7
|
0f4ef19555
|
Land #10418, Add DCOM/RPC NTLM Reflection (MS16-075) Via Reflective DLL
Merge branch 'land-10418' into upstream-master
|
2018-10-04 14:57:20 -07:00 |
Jacob Robles
|
9762f921b8
|
Land #10738, Add Zahir Enterprise 6 build 10b BOF
|
2018-10-04 09:03:40 -07:00 |
|
Jacob Robles
|
ff06f81f89
|
Land #10704, Navigate CMS Unauthenticated RCE
|
2018-10-04 04:48:35 -07:00 |
|
Brent Cook
|
3ad5bd429a
|
Land #10732, add api key for android wlan_geolocate
|
2018-10-02 11:46:30 -07:00 |
Tim W
|
d340eeecf9
|
Land #10427, add OSX VNC password gather module
|
2018-10-02 11:46:30 -07:00 |
|
Tim W
|
c2d9677504
|
Land #10723, fix another typo in windows reverse_tcp docs
|
2018-10-02 11:46:30 -07:00 |
|
Tim W
|
5ea9507604
|
Land #10722, fix typo in windows reverse_tcp docs
|
2018-10-02 11:46:29 -07:00 |
|
Brent Cook
|
bff3047e93
|
Land #10428, Update Windows MySQL UDF files, add docs
|
2018-09-24 19:13:53 -07:00 |
Adam Cammack
|
d904fcb866
|
Land #10695, Add docs for Apple iOS WebKit DoS
|
2018-09-24 10:48:42 -07:00 |
h00die
|
c3f335ebb7
|
Land #10663 extremeparr solaris LPE
|
2018-09-24 10:48:42 -07:00 |
|
bwatters-r7
|
2b194e2b47
|
Land #10643, CVE-2018-8440 ALPC Scheduler
Merge branch 'land-10643' into upstream-master
|
2018-09-24 10:48:41 -07:00 |
Brendan Coles
|
53c1adcb41
|
Land #10628, Add Solaris srsexec Arbitrary File Reader module
|
2018-09-24 10:48:41 -07:00 |
William Vu
|
785cf9e5aa
|
Land #10670, Pimcore SQLi module
|
2018-09-19 18:52:40 -07:00 |
|
William Vu
|
4ca0566e10
|
Land #10673, dolibarr_list_creds{,_sqli} rename
|
2018-09-19 16:57:51 -07:00 |
|
h00die
|
fd59cbb61f
|
Land #10620 Solaris 10 LPE for libnspr
|
2018-09-17 15:12:51 -07:00 |
|
Jacob Robles
|
5861087061
|
Land #10598, Store Credentials Found with PhpMyAdmin Password Extractor
|
2018-09-10 09:51:51 -07:00 |
Wei Chen
|
3e801c22fb
|
Land #10546, Add Apache Struts exploit: CVE-2018-11776
|
2018-09-07 12:56:02 -07:00 |
|
Adam Cammack
|
9e3f4744f7
|
Land #10602, Fix windows/shell/reverse_ord_tcp doc
|
2018-09-07 10:08:28 -07:00 |
|
Wei Chen
|
eb39f6da51
|
Land #10564, Add Ghostscript exploit from taviso
|
2018-09-05 19:09:11 -07:00 |
|
Brent Cook
|
a2eb43ab83
|
Land #10474, add documention for windows/shell/reverse_ord_tcp
|
2018-09-05 07:08:02 -07:00 |
|
Wei Chen
|
8897a5d7c6
|
Land #10568, Update weblogic module docs
|
2018-08-31 12:07:12 -07:00 |
|
Wei Chen
|
d1d308e542
|
Land #10565, Add Dolibarr ERP/CRM Auxiliary Module
|
2018-08-31 11:49:23 -07:00 |
Shelby Pace
|
2ecff39be4
|
Land #10484, Add PhpMyAdmin password extractor
|
2018-08-30 10:18:38 -07:00 |
|
Shelby Pace
|
bc87643ea3
|
Land #10482, Add Network Manager VPNC Privesc
|
2018-08-30 08:49:38 -07:00 |
|
Jacob Robles
|
d7728afe42
|
Land #10540, weblogic_deserialize, add check method and linux target
|
2018-08-30 04:13:58 -07:00 |
|
Jacob Robles
|
7a99fc7066
|
Land #10545, foxit fix generated strings, update doc
|
2018-08-30 03:58:19 -07:00 |
|
bwatters-r7
|
631e8bf110
|
Land #8983, Add peinjector post module
Merge branch 'land-8983' into upstream-master
|
2018-08-28 16:55:01 -07:00 |
|
William Vu
|
415379e7ee
|
Land #9364, HP PJL/SNMP CVE-2017-2741 exploit
Finally!
|
2018-08-23 20:50:23 -07:00 |
|
h00die
|
179b874763
|
Land #10467 documentation for postgresql hashdump
|
2018-08-23 18:37:01 -07:00 |
|
h00die
|
e444aa0489
|
Land #10466 docs for postgres_version
|
2018-08-23 18:12:41 -07:00 |
|
h00die
|
93f68e817a
|
Land #10517 updated docs for CloudMe Sync
|
2018-08-23 17:57:30 -07:00 |
|
Wei Chen
|
7b7c5a73c4
|
Land #10504, add Foxit Reader UAF Module and Docs
|
2018-08-23 16:57:43 -07:00 |
|
William Vu
|
0739892cc8
|
Land #10498, module doc for ssh_enumusers
|
2018-08-21 09:05:07 -07:00 |
|
Tim W
|
f295b22290
|
Land #10313, add linux autostart persistence module
|
2018-08-20 03:19:57 -07:00 |
|
Tim W
|
e5ef254155
|
Land #10320, add module for persistence in /etc/rc.local
|
2018-08-19 00:33:19 -07:00 |
|
William Vu
|
c91eff48fb
|
Land #10472, marked_redos module doc fixes
|
2018-08-16 13:43:26 -07:00 |
|
William Vu
|
e1097f7e38
|
Land #10120, npm "marked" ReDoS module
|
2018-08-16 13:43:26 -07:00 |
|
h00die
|
76e08b9c4a
|
Land #10457 docs for elasticsearch indices_enum
|
2018-08-15 11:40:29 -07:00 |
|
h00die
|
91c61bb692
|
Land #10454 updates to cgit exploit docs
|
2018-08-15 11:40:29 -07:00 |
|
Jacob Robles
|
9617c79f44
|
Land #10420, cgit < 1.2.1 Directory Traversal
|
2018-08-13 14:28:21 -07:00 |
|
Shelby Pace
|
1a86d57bce
|
Land #10404, Add Path Traversal Oracle GlassFish
|
2018-08-13 09:18:05 -07:00 |
|
Wei Chen
|
8b75c7d9ab
|
Land #10436, Add WebLogic exploit (CVE-2018-2628)
|
2018-08-09 12:54:19 -07:00 |
|
Brent Cook
|
b42cf88276
|
Land #10386, Add IEC104 client module
|
2018-08-04 05:44:48 -07:00 |
|
Brent Cook
|
3fd0119d27
|
Land #9692, Add DoS module for Siemens Siprotec 4
|
2018-08-04 05:23:03 -07:00 |
|
Brendan Coles
|
9ac0d0cf6e
|
Land #10358, Add Dicoogle PACS Directory Traversal scanner module
|
2018-08-03 22:30:03 -07:00 |
|
Wei Chen
|
937174d321
|
Land #10412, Add Cisco directory traversal auxiliary module
|
2018-08-02 14:47:24 -07:00 |
|
Tim W
|
65fcdcfd2f
|
Land #9884, add linux ufo priv esc module
|
2018-08-02 02:56:27 -07:00 |
|
Wei Chen
|
580f4cf509
|
Land #10255, Adding Micro Focus Secure Messaging Gateway RCE
|
2018-07-30 19:08:43 -07:00 |
|
William Vu
|
0bc84bb6c6
|
Land #10305, SonicWall XML-RPC RCE
|
2018-07-30 12:15:59 -07:00 |
|
Jacob Robles
|
7e180a390c
|
Land #10060, vTiger CRM v6.3.0 Upload RCE
|
2018-07-30 10:34:17 -07:00 |
|
Shelby Pace
|
ea2a9081a6
|
Land #10247, add WordPress Arbitrary File Deletion
|
2018-07-30 07:09:04 -07:00 |
|
Wei Chen
|
b42545a153
|
Land #10387, Update mov_ss and add mov_ss_dll
|
2018-07-27 12:55:43 -07:00 |
|
Wei Chen
|
3a67d89711
|
Land #10383, Add WP Responsive Thumbnail Slider Plugin Exploit Module
|
2018-07-26 21:56:35 -07:00 |
|
Brent Cook
|
e74ef65aa5
|
Land #9964, android post module to extract subscriber info
|
2018-07-26 15:00:23 -07:00 |
|
Wei Chen
|
5fce9d8222
|
Land #10300, Add root exploit for Axis network cameras
|
2018-07-25 12:47:50 -07:00 |
|
William Vu
|
68272c410e
|
Land #10357, CouchDB improvements and docs
|
2018-07-24 22:59:52 -07:00 |
|
Wei Chen
|
3fbd4f8f2f
|
Land #10368, PhpMyAdmin Login Scanner Module
|
2018-07-24 21:27:32 -07:00 |
|
Brent Cook
|
e9b04b9750
|
Land #10362, Fix reporting in backup_file, add more docs
|
2018-07-23 16:27:45 -07:00 |
|
Wei Chen
|
e075836ad5
|
Land #10346, update check method and doc for CMS Made Simple
|
2018-07-20 15:49:07 -07:00 |
|
Wei Chen
|
fdc24fe453
|
Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE
|
2018-07-19 10:20:10 -07:00 |
|
Tim W
|
691d8f2c41
|
Land #9753, Linux BPF sign extension local privesc
|
2018-07-18 11:05:32 -07:00 |
|
William Vu
|
88518ec4ae
|
Land #10064, Claymore Dual Miner API RCE
|
2018-07-16 16:04:38 -07:00 |
|
Jacob Robles
|
d138ddba8d
|
Land #10295, Add QNAP Q'Center change_passwd Command Execution exploit
|
2018-07-14 08:20:32 -07:00 |
|
Wei Chen
|
06e8cc49f5
|
Land #10297, Add priv escalation mod for CVE-2018-8897
|
2018-07-13 08:57:19 -07:00 |
|
William Vu
|
942befab73
|
Land #10302, module doc fixes
|
2018-07-12 21:53:05 -07:00 |
|
William Vu
|
3ffcc658e6
|
Land #10296, a few aux module docs
|
2018-07-12 20:22:03 -07:00 |
|
William Vu
|
f6a7f19e2b
|
Land #10027, Hadoop unauthed command execution
|
2018-07-12 20:00:57 -07:00 |
|
William Vu
|
f18fd4aca1
|
Land #9780, CouchDB auth bypass and RCE
|
2018-07-12 11:24:05 -05:00 |
|
William Vu
|
81ef17aa62
|
Land #10286, Docker server version scanner
|
2018-07-12 11:24:04 -05:00 |
|
Shelby Pace
|
8586e6fc8f
|
Land #10260, Add phpMyAdmin v4.8.1/4.8.0 LFI RCE
|
2018-07-12 11:24:03 -05:00 |
|
Shelby Pace
|
45f354e55d
|
Land #10231, Monstra Fileupload Exec
|
2018-07-12 11:24:02 -05:00 |
|
Brent Cook
|
3a92908e9b
|
Land #10108, add IBM QRadar SIEM exploit
|
2018-07-12 11:24:02 -05:00 |
|
Jacob Robles
|
9dc3e35f23
|
Land #10107, Add the scanner/smb/impacket/secretsdump module
|
2018-07-06 13:02:46 -07:00 |
|
Shelby Pace
|
a4f0dc5ea2
|
Land #10133, Add HID discoveryd RCE exploit
|
2018-07-06 12:35:38 -07:00 |
|
Wei Chen
|
e915bb0f66
|
Land #10262, Add GitList argument injection exploit module
|
2018-07-06 12:30:10 -07:00 |
|
Brent Cook
|
5d95172a81
|
Land #10171, Implement desktop shell and screensaver post modules
|
2018-07-05 15:36:46 -07:00 |
|
Brent Cook
|
1abbd61cee
|
Land #10246, add documentation for APK injection
|
2018-07-05 15:28:41 -07:00 |
|
Brent Cook
|
b5981caa0b
|
Land #10219, Add HP VAN SDN Controller exploit
|
2018-07-05 12:23:50 -07:00 |
|
Wei Chen
|
144923db3a
|
Land #10237, Add Boxoft WAV to MP3 Converter exploit module
|
2018-07-02 12:03:05 -07:00 |
|
Jacob Robles
|
fa95c0c2a1
|
Land #9958, Nagios xi 2 electric
|
2018-06-29 10:18:13 -07:00 |
|
Brendan Coles
|
9bed9f0797
|
Land #10213, Add FTPShell client 6.70 Stack Buffer Overflow exploit
|
2018-06-29 07:39:54 -07:00 |
|
William Vu
|
87b50e57cc
|
Land #9933, auxiliary/scanner/db2/discovery docs
|
2018-06-27 14:03:34 -07:00 |
|
Adam Cammack
|
165fb9dc79
|
Land #10109, Teradata login scanner and SQL runner
|
2018-06-27 13:39:02 -07:00 |
|
Shelby Pace
|
f14597bcb2
|
Land #10199, Kace Systems Management Command Injection
|
2018-06-26 10:11:07 -07:00 |
|
Wei Chen
|
0a9dca2b5a
|
Land 10200, Add SickRage Password Leak Auxiliary Module
|
2018-06-25 15:27:22 -07:00 |
|
Brent Cook
|
679378d025
|
Land #10156, WebKit, as used in WebKitGTK+ Crash - CVE-2018-11646
|
2018-06-21 14:33:05 -07:00 |
|
Wei Chen
|
cc293b54c4
|
Land #10193, Updated Documentation for httpdasm module
|
2018-06-21 11:06:35 -07:00 |
|
Wei Chen
|
17c0bc1fa7
|
Land #10183, Add auxiliary mod to exploit httpdasm dir traversal vuln
|
2018-06-19 12:58:49 -07:00 |
|
Jacob Robles
|
95cb9f3654
|
Land #9825, Add 'phpMyAdmin Authenticated Remote Code Execution'
|
2018-06-18 06:55:53 -07:00 |
|
William Vu
|
94abd923f3
|
Land #10021, post/multi/recon/sudo_commands module
|
2018-06-14 14:35:32 -07:00 |
|
bwatters-r7
|
fff6d2ebb7
|
Lad #10017, D-Link DSL-2750B Unauthenticated OS Command Injection
Merge branch 'land-10017' into upstream-master
|
2018-06-14 15:09:38 -05:00 |
|
bwatters-r7
|
7e2c1fae2c
|
Land #10148, Add New Module - Badpdf
Merge branch 'land-10148' into upstream-master
|
2018-06-12 15:21:25 -07:00 |
|
bwatters-r7
|
0a19221af2
|
Land #10101, Add glibc 'realpath()' Privilege Escalation exploit
|
2018-06-12 14:43:57 -07:00 |
|
William Vu
|
7f372d178d
|
Land #10059, CVE-2018-1111 exploit
|
2018-06-12 13:04:36 -07:00 |
Aaron Soto
|
aa5c114364
|
Land #10067, Added `auxiliary/fileformat/odt_badodt`
|
2018-06-06 09:29:34 -07:00 |
|
Aaron Soto
|
f6e0f5bd81
|
Land #10115, Added module `auxiliary/fileformat/multidrop`
|
2018-06-05 14:32:25 -07:00 |
|
Jacob Robles
|
1df5b7655f
|
Land #10106, Add the scanner/smb/impacket/wmiexec module
|
2018-06-05 06:39:34 -07:00 |
|
Brent Cook
|
31ce48502c
|
Land #9528, WebKit apple safari trident exploit (CVE-2016-4657)
|
2018-06-04 15:37:57 -07:00 |
|
Brent Cook
|
650c5c7a93
|
Land #10121, finish deprecating modules
|
2018-06-04 15:37:56 -07:00 |
|
bwatters-r7
|
e7ab118aaf
|
Land #9777, Slui File Handler Hijack LPE
|
2018-06-01 07:03:22 -07:00 |
|
Aaron Soto
|
c8ff6cb5a4
|
Land #9701, Flexense HTTP Server DoS exploit
|
2018-06-01 07:03:22 -07:00 |
|
Tim W
|
016ee4d460
|
Land #9987, AF_PACKET chocobo_root exploit
|
2018-05-21 15:22:51 -07:00 |
|
bwatters-r7
|
81368bef7a
|
Land #9966, Add Reliable Datagram Sockets (RDS) Privilege Escalation exploit
Merge branch 'land-9966' into upstream-master
|
2018-05-21 17:01:36 -05:00 |
|
Tim W
|
d5019be697
|
Land #10049, fix docs for android/gather/wireless_ap
|
2018-05-17 08:16:35 -07:00 |
|
Tim W
|
a51c1209ab
|
Land #9956, add module to extract wireless credentials on Android
|
2018-05-17 08:16:35 -07:00 |
|
Tim W
|
bacab0507b
|
Land #9947, AF_PACKET packet_set_ring exploit
|
2018-05-17 08:16:34 -07:00 |
|
Jacob Robles
|
6e71f5c5fd
|
Land #9816, Add the scanner/smb/impacket/dcomexec module
|
2018-05-17 08:16:34 -07:00 |
|
William Vu
|
bbb5ff8ad4
|
Land #7815, CVE-2016-9299 exploit
|
2018-05-17 08:16:33 -07:00 |
|
Tim W
|
1de1b04c4f
|
Land #9919, add libuser roothelper privilege escalation exploit
|
2018-05-15 11:58:14 -07:00 |
|
Jacob Robles
|
b2b97db28b
|
Land #9878, Add MSF module for EDB 6768, Mantis <= v1.1.3 Post-auth RCE
|
2018-05-09 17:48:53 -07:00 |
|
William Vu
|
0aaae09e5c
|
Land #9980, PAN-OS readSessionVarsFromFile exploit
|
2018-05-09 17:48:53 -07:00 |
|
Jacob Robles
|
dcbc871883
|
Land #9988, playsms_uploadcsv_exec
|
2018-05-07 09:35:08 -07:00 |
|
Jacob Robles
|
75196b4fc6
|
Land #9944, playsms_filename_exec.rb
|
2018-05-07 09:35:08 -07:00 |
|
William Vu
|
935fa6414e
|
Land #9968, second round of Drupalgeddon 2 updates
|
2018-05-04 09:38:34 -05:00 |
|
bwatters-r7
|
38465e69a8
|
Land #8795, Added CVE-2016-0040 Windows Privilege Escalation
Merge branch 'land-8795' into upstream-master
|
2018-05-04 09:38:28 -05:00 |
|
Jacob Robles
|
8739befa70
|
Land #9821, osCommerce 2.3.4.1 - Remote Code Execution
|
2018-05-03 09:21:02 -07:00 |
|
Aaron Soto
|
c38bca1799
|
Land #9908, msfd_rce_remote and msfd_rce_browser
|
2018-04-30 09:49:50 -05:00 |
|
Aaron Soto
|
3b8280c33f
|
Land #9918, XDebug Unauthenticated OS command execution
|
2018-04-30 09:42:26 -05:00 |
|
Brent Cook
|
3b7d2c8177
|
Land #9853, Update Linux sock_sendpage local exploit module
|
2018-04-26 16:06:10 -07:00 |
|
Brent Cook
|
d340ef2632
|
Land #9876, Drupalgeddon 2
|
2018-04-26 08:29:59 -07:00 |
|
Wei Chen
|
0949bedf67
|
Land #9628, Add GitStack v2.3.10 Unauth REST API Aux Module
Land #9628
|
2018-04-23 11:21:11 -07:00 |
|
bwatters-r7
|
a44bcff2d8
|
Land #9756, Add lastore-daemon D-Bus Privilege Escalation exploit
Merge branch 'land-9756' into upstream-master
|
2018-04-23 11:21:10 -07:00 |
|
bwatters-r7
|
6cbd7ba895
|
Land #9862, Post-exploitation module for meterpreter (Windows) to send wireless probe requests
Merge branch 'land-9862' into upstream-master
|
2018-04-23 11:21:10 -07:00 |
|
bwatters-r7
|
d2a43d934d
|
Land # 9247, Add ASUS infosvr Auth Bypass Command Execution exploit
Merge branch 'land-9247' into upstream-master
|
2018-04-23 11:21:10 -07:00 |
|
Tim W
|
b958526b6a
|
Land #9784, add osx high sierra APFS password disclosure post module
|
2018-04-18 15:31:20 -07:00 |
|
Adam Cammack
|
5b42a81d3a
|
Land #9823, Private IP leak via WebRTC
|
2018-04-12 09:27:21 -07:00 |
|
h00die
|
084e6b1db3
|
Land #9813, Add etcd library and version scanner
|
2018-04-10 06:55:58 -07:00 |
|
Brent Cook
|
62c6340d70
|
Land #9794, Added support for regional dialects
|
2018-04-06 14:20:42 -07:00 |
Chris Higgins
|
ded6a50883
|
Land #8539, ProcessMaker Plugin Upload exploit
|
2018-04-04 19:06:18 -07:00 |
|
bwatters-r7
|
4765ffc05a
|
Land #9595, Add post module RID Hijacking on Windows
|
2018-04-04 19:06:17 -07:00 |
|
Brent Cook
|
ef4fd1dc75
|
Land #9742, QNX exploit improvements
|
2018-04-03 09:13:57 -05:00 |
|
Brent Cook
|
c2bf848ba9
|
Land #9748, Convert the smbloris DoS into an external module
Help reliability and performance. This some Ruby-specific external module
tooling as a result as well.
|
2018-04-03 09:13:56 -05:00 |
|
Brent Cook
|
c3f9ee2ae3
|
Land #9802, update kerberoasting setup docs
|
2018-04-03 09:13:29 -05:00 |
|
Brent Cook
|
d6f23071ca
|
Land #9718, Add get_user_spns 'kerberoasting' module
|
2018-04-03 09:13:29 -05:00 |
Jon Hart
|
36ba1468e8
|
Land #9760, @h00die's etcd scanner
|
2018-03-29 09:17:54 -07:00 |
|
Jacob Robles
|
3b87bf5a03
|
Land #9666, Add 2017-8917 RCE for Joomla 3.7.0
|
2018-03-29 09:17:54 -07:00 |
|
Wei Chen
|
6108d79dcd
|
Land #9684, Adding ManageEngine Application Manager RCE
Land #9684
|
2018-03-27 15:44:50 -07:00 |
|
Wei Chen
|
409ae22a7e
|
Land #9633, Exodus Wallet Remote Code Execution
Land #9633
|
2018-03-27 15:44:49 -07:00 |
|
William Vu
|
fdf9ea04a6
|
Land #9775, module doc improvements to MS17-010
|
2018-03-27 15:44:49 -07:00 |
|
Wei Chen
|
5b1577e46d
|
Land #9670, Gitstack v2.3.10 RCE
Land #9670
|
2018-03-27 14:24:23 -05:00 |
|
h00die
|
c56e571b18
|
Land #9702 exploit for clipbucket
|
2018-03-27 13:55:43 -05:00 |
|
Brent Cook
|
ef7b77ed01
|
Land #9529, Add module for HP iLO CVE-2017-12542 authentication bypass
|
2018-03-17 20:33:05 -07:00 |
|
Jacob Robles
|
715279311a
|
Land #8422, Typo3 News Module Sql Injection exploit
|
2018-03-15 09:21:14 -07:00 |
|
h00die
|
8af0d9ceaa
|
Land #9713 update to juniper config docs
|
2018-03-15 06:49:02 -07:00 |
|
Brent Cook
|
028d329b4d
|
Land #9632, owa_login and auth_brute enhancements
|
2018-03-12 10:14:19 -07:00 |
|
Jacob Robles
|
bcc0a2a94c
|
Land #7654, varnish file read
|
2018-03-09 12:53:20 -08:00 |
|
Jacob Robles
|
49bc0024c1
|
Land #9678, Add memcached UDP version scanner
|
2018-03-07 18:47:47 -08:00 |
|
Jacob Robles
|
fbee660136
|
Land #9554, Eclipse Equinoxe OSGi console RCE
|
2018-03-07 07:49:31 -08:00 |
|
Brent Cook
|
f6223c0193
|
Land #9614, Juniper post enum module
|
2018-03-07 07:49:29 -08:00 |