b56b6a49ac
Land #7328 , Extend lsa_transname_heap exploit to MIPS
2016-11-15 07:37:19 -06:00
312f33afa3
minor formatting updates
2016-11-15 07:36:54 -06:00
8d1d017188
Land #7562 , fix rex-text column padding for unicode values
2016-11-15 07:12:37 -06:00
dcd64e5964
Land #7261 , Winpmem Meterpreter extension
2016-11-14 16:52:11 -06:00
fafc749447
update metasploit payloads
2016-11-14 16:51:38 -06:00
5490fda0ae
Merge remote-tracking branch 'upstream/master' into land-7261
2016-11-14 16:49:28 -06:00
38af03e8e6
Land #7540 , Add WinaXe 7.7 FTP client Server Ready buffer overflow
2016-11-14 15:53:08 -06:00
fa9f2b340e
def setup isn't needed
2016-11-14 15:52:02 -06:00
bab07b5691
Bring #7540 up to date
2016-11-14 14:59:21 -06:00
142ba7576d
Land #7561 , report correct credential status as successful
2016-11-14 14:54:49 -06:00
203c8132c5
Update the Gemfile to pull in the new rex-text Gem
2016-11-14 14:16:36 -06:00
c458d662ed
report correct credential status as successful
2016-11-14 12:27:22 -06:00
4ae90cbbef
Land #7191 , Add exploit for CVE-2016-6267 - Trend Micro Smart Protection Server authenticated RCE.
2016-11-14 12:06:02 -06:00
4e40546958
Land #7502 , Disk Pulse Enterprise Login Buffer Overflow
2016-11-14 10:28:53 -06:00
4f323527c9
Land #7549 , Deprecate/move wp_ninja_forms_unauthenticated_file_upload
2016-11-14 03:00:02 -06:00
67998600e8
Land #7456 , add android_hide_app_icon command
2016-11-14 02:56:44 -06:00
422ff57335
update metasploit-payloads
2016-11-14 02:53:18 -06:00
98a54cd458
Merge branch 'upstream-master' into land-7456-android-hide-app
2016-11-14 02:43:04 -06:00
4e9802786c
Removed spaces causing build to fail
2016-11-13 21:46:24 -06:00
9eb9d612ca
Minor typo fixups.
2016-11-11 16:54:16 -06:00
1dae206fde
Land #7379 , Linux Kernel BPF Priv Esc (CVE-2016-4557)
2016-11-11 16:50:20 -06:00
6277db4396
Land #7554 , Fix powershell option for shell_to_meterpreter module
2016-11-11 14:33:33 -06:00
8e3888f20c
the template ref in this module was missed
...
when we cleaned up all the other powershell template refs
we missed the one in this module which seems to e replicating
large ammounts of library code
7533
2016-11-11 14:24:33 -06:00
2b5517f597
Land #7506 , Add gather AWS keys post module
2016-11-11 13:56:12 -06:00
3ae021faba
Update aws gather key docs
2016-11-11 13:50:24 -06:00
fbcc4baf58
Land #7553 , apk inject cert fix
...
Lands dana-at-cp's fix for the certtool localization
issues for the APK injection routine.
Fixes #7524
2016-11-11 12:54:41 -06:00
f116ad2c59
Bump version of framework to 4.12.42
2016-11-11 10:02:14 -08:00
415439eda8
the template ref in this module was missed
...
when we cleaned up all the other powershell template refs
we missed the one in this module which seems to e replicating
large ammounts of library code
7533
2016-11-11 10:01:22 -06:00
c0e839dfd9
Fixes keytool bug in APK inject code
2016-11-11 06:12:47 -08:00
8cd9a9b670
Deprecate wp_ninja_forms_unauthenticated_file_upload
...
wp_ninja_forms_unauthenticated_file_upload actually supports
multiple platforms.
Instead of using:
exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload
Please use:
exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload
2016-11-10 11:17:09 -06:00
77bacacb9c
Land rapid7/rex-exploitation#2 , Fix heap_spray method's return value type
...
This fixes #7520
2016-11-09 20:39:01 -06:00
268a72f210
Land #7193 Office DLL hijack module
2016-11-08 23:15:27 -06:00
4ea48a87cb
Land #7546 , Update Gemfile Gem Version
2016-11-08 18:15:57 -06:00
5d5a4baaf7
back out rex-arch to avoid conflict with arch fixup PR
2016-11-08 17:42:42 -06:00
129fa20bc1
update database schema
2016-11-08 17:40:32 -06:00
aeeefc46da
update gems
2016-11-08 17:31:33 -06:00
3c1f642c7b
Moved PPSX to data/exploits folder
2016-11-08 16:04:46 +01:00
099a5984f9
Updated with style suggestions from msftidy and rubocop.
...
Also updated with commented from other contributors.
2016-11-07 10:18:52 -06:00
4eb42a9171
Fix broken ternary in phoenix_command
2016-11-07 00:12:04 -06:00
689fc28d1b
Added WinaXe 7.7 FTP client Server Ready buffer overflow
2016-11-06 23:35:16 -06:00
6ba5e9ca8e
Land #7537 , action port fix for phoenix_command
2016-11-06 15:56:43 -06:00
92964c1f95
Update phoenix_command.rb
2016-11-06 21:22:54 +01:00
2c2729f0b2
Update phoenix_command.rb
...
Coded was messed up by MS Edge, don't use it :)
2016-11-06 21:21:20 +01:00
1b4409f950
Update phoenix_command.rb
...
Style fix: replace "ractionport == nil ?" with "ractionport.nil?"
Is it OK? Did not find time to install and run rubocop ...
2016-11-06 21:15:31 +01:00
4ea9214466
Fixed a small bug
2016-11-06 16:20:55 +01:00
265567fa19
Land #7530 Improve atg_client to detect unsupported commands
2016-11-04 13:15:36 -05:00
5b810fae41
Update atg_client to identify responses that indicate the command was not understood
2016-11-04 10:12:02 -07:00
2c39a14ada
Bump version of framework to 4.12.41
2016-11-04 10:02:13 -07:00
ca5610ccde
Land #7511 , Update jenkins_script_console to support newer versions
2016-11-04 11:24:25 -05:00
5ed030fcf6
Land #7529 , nil.downcase fix for tomcat_mgr_deploy
...
Don't think it was ever needed, since the password is case-sensitive.
Fixed a minor merge conflict where PASSWORD became HttpPassword.
2016-11-03 15:39:46 -05:00
Brent Cook
wchen-r7
Brendan
Jeffrey Martin
William Webb
Chris Higgins
Pearce Barry
David Maloney
dmohanty-r7
Metasploit
dana-at-cp
scriptjunkie
Yorick Koster
William Vu
Tijl Deneut
Jon Hart