jvazquez-r7
|
f56ea01988
|
Add module
|
2014-05-09 10:27:41 -05:00 |
Tod Beardsley
|
3072c2f08a
|
Update CVEs for RootedCon Yokogawa modules
Noticed they were nicely documented at
http://chemical-facility-security-news.blogspot.com/2014/03/ics-cert-publishes-yokogawa-advisory.html
We apparently never updated with CVE numbers.
|
2014-05-05 13:25:55 -05:00 |
William Vu
|
517f264000
|
Add last chunk of fixes
|
2014-03-11 12:46:44 -05:00 |
|
jvazquez-r7
|
bc8590dbb9
|
Change DoS module location
|
2014-03-10 16:12:20 +01:00 |
|
jvazquez-r7
|
1061036cb9
|
Use nick instead of name
|
2014-03-10 16:11:58 +01:00 |
|
Tod Beardsley
|
5485028501
|
Add 3 Yokogawa SCADA vulns
These represent our part for public disclosure of the issues listed
here:
http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf
Yokogawa is calling these YSAR-14-0001E, and I think that they map
thusly:
YSAR-14-0001E Vulnerability 1 :: R7-2013-19.1
YSAR-14-0001E Vulnerability 2 :: R7-2013-19.3
YSAR-14-0001E Vulnerability 3 :: R7-2013-19.4
@jvazquez-r7 if you could confirm, I'd be delighted to land these and
get your disclosure blog post published at:
https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
Thanks for all the work on these!
|
2014-03-10 09:33:54 -05:00 |
|
Tod Beardsley
|
de6be50d64
|
Minor cleanup and finger-wagging about a for loop
|
2014-03-03 14:12:22 -06:00 |
|
jvazquez-r7
|
96ffb1db47
|
Delete extra comma
|
2014-02-25 15:29:46 -06:00 |
|
jvazquez-r7
|
cb18639b66
|
Add small fixes and clean up
|
2014-02-25 15:25:01 -06:00 |
|
jvazquez-r7
|
1d4b2ea60d
|
Add module for ZDI-14-015
|
2014-02-25 15:07:09 -06:00 |
sinn3r
|
e5dc6a9911
|
Update exploit checks
Progress group 1: Making sure these checks comply with the new
guidelines. Please read: "How to write a check() method" found in
the wiki.
|
2014-01-20 14:26:10 -06:00 |
|
jvazquez-r7
|
7f9f4ba4db
|
Make gsubs compliant with the new indentation standard
|
2013-12-31 11:06:53 -06:00 |
|
Tod Beardsley
|
55847ce074
|
Fixup for release
Notably, adds a description for the module landed in #2709.
|
2013-12-02 16:19:05 -06:00 |
|
sinn3r
|
8817c0eee0
|
Change description a bit
Try to make this sound smoother
|
2013-11-28 12:19:42 -06:00 |
|
jvazquez-r7
|
807e2dfd31
|
Fix title
|
2013-11-28 10:53:12 -06:00 |
|
jvazquez-r7
|
7dee4ffd4d
|
Add module for ZDI-13-270
|
2013-11-28 10:47:04 -06:00 |
|
William Vu
|
2c485c509e
|
Fix caps on module titles (first pass)
|
2013-11-15 00:03:42 -06:00 |
|
William Vu
|
2aed8a3aea
|
Update modules to use new ZDI reference
|
2013-10-21 15:13:46 -05:00 |
|
sinn3r
|
6430fa3354
|
Land #2539 - Support Windows CMD generic payload
This also upgrades auxiliary/admin/scada/igss_exec_17 to an exploit
|
2013-10-21 11:26:13 -05:00 |
|
sinn3r
|
45d06dd28d
|
Change plate
|
2013-10-21 11:24:30 -05:00 |
jvazquez-r7
|
be1d6ee0d3
|
Support Windows CMD generic payload
|
2013-10-17 14:07:27 -05:00 |
|
Tod Beardsley
|
c83262f4bd
|
Resplat another common boilerplate.
|
2013-10-15 14:07:48 -05:00 |
|
Tod Beardsley
|
23d058067a
|
Redo the boilerplate / splat
[SeeRM #8496]
|
2013-10-15 13:51:57 -05:00 |
Tab Assassin
|
41e4375e43
|
Retab modules
|
2013-08-30 16:28:54 -05:00 |
Steve Tornio
|
a920127f8c
|
reference updates for several modules
|
2013-06-23 20:43:34 -05:00 |
m-1-k-3
|
1d6184cd63
|
fixed author details
|
2013-03-30 12:41:31 +01:00 |
sinn3r
|
b65f410048
|
Updates the description
|
2013-03-06 16:37:41 -06:00 |
|
sinn3r
|
fee07678dd
|
Rename module to better describe the bug.
|
2013-03-06 16:33:41 -06:00 |
|
sinn3r
|
79d3597d31
|
That's not a real check...
|
2013-03-06 16:32:53 -06:00 |
|
sinn3r
|
16d7b625bc
|
Format cleanup
|
2013-03-06 16:31:39 -06:00 |
Enrique A. Sanchez Montellano
|
aa5c9461ae
|
Fixed more styling issues, EOL, tabs and headers
|
2013-03-06 10:50:31 -08:00 |
|
Enrique A. Sanchez Montellano
|
437d6d6ba6
|
Fixed EOL, bad indent, added header, removed #!/usr/env/ruby
|
2013-03-06 10:44:29 -08:00 |
|
Enrique A. Sanchez Montellano
|
aa3a54fba0
|
Added CoDeSyS Gateway.exe Server remote execution via arbitrary file creation
|
2013-03-06 09:29:28 -08:00 |
Christian Mehlmauer
|
8f2dd8e2ce
|
msftidy: Remove $Revision$
|
2013-01-04 00:48:10 +01:00 |
|
Christian Mehlmauer
|
25aaf7a676
|
msftidy: Remove $Id$
|
2013-01-04 00:41:44 +01:00 |
|
sinn3r
|
38f0886058
|
James has more modules that need to be updated.
e-mail update.
|
2012-12-24 17:51:58 -06:00 |
|
jvazquez-r7
|
44633c4f5b
|
deleted incorrect cve ref
|
2012-12-11 12:16:47 +01:00 |
|
sinn3r
|
f5193b595c
|
Update references
|
2012-12-10 11:42:21 -06:00 |
Michael Schierl
|
910644400d
|
References EDB cleanup
All other types of references use String arguments, but approximately half
of the EDB references use Fixnums. Fix this by using Strings here too.
|
2012-10-23 21:02:09 +02:00 |
|
sinn3r
|
fbc3709774
|
Change the title and regex a bit
|
2012-10-03 12:16:25 -05:00 |
|
jvazquez-r7
|
30846f4190
|
fix typo in comment
|
2012-10-03 16:06:00 +02:00 |
|
jvazquez-r7
|
24037ac79a
|
Added module for CVE-2011-4051
|
2012-10-03 16:03:36 +02:00 |
m-1-k-3
|
e06ca8e654
|
Winlog-CVE-resource
|
2012-07-02 20:33:15 +02:00 |
|
sinn3r
|
f5faccfa07
|
Add missing CVEs for SCADA modules
|
2012-06-27 22:10:24 -05:00 |
|
sinn3r
|
8f355554c8
|
Update missing CVE reference
|
2012-06-26 01:21:24 -05:00 |
|
m-1-k-3
|
315a1707e7
|
also new version v2.07.16 is vulnerable
|
2012-06-22 13:18:45 +02:00 |
Tod Beardsley
|
559683f2a1
|
Fixing CRLFs on winlog_runtime_2
|
2012-06-13 13:59:39 -05:00 |
|
sinn3r
|
41d49ed553
|
Another badchar analysis. Allow shorter delay (5sec to 1)
|
2012-06-08 01:59:09 -05:00 |
|
sinn3r
|
e5b451c000
|
Too many tabs for the beginning of the description
|
2012-06-07 23:08:11 -05:00 |
|
sinn3r
|
520c0ca660
|
Make msftidy happy
|
2012-06-07 23:07:39 -05:00 |