Pedro Ribeiro
|
bf7c7688c0
|
Merge pull request #7 from jvazquez-r7/review_4137
Review Eventlog Analzyer exploit for CVE-2014-6038/6039
|
2014-11-08 11:04:28 +00:00 |
jvazquez-r7
|
9d6e0664a4
|
Guess service name and port
|
2014-11-07 20:56:01 -06:00 |
|
jvazquez-r7
|
a44640c9fc
|
Use single quotes
|
2014-11-07 20:48:04 -06:00 |
|
jvazquez-r7
|
7c1c08fc19
|
Use single quotes without interpolation
|
2014-11-07 20:46:47 -06:00 |
|
jvazquez-r7
|
0373156cce
|
Use unless over if not
|
2014-11-07 20:42:08 -06:00 |
|
jvazquez-r7
|
f5a920da99
|
Use || operator
|
2014-11-07 20:41:44 -06:00 |
|
jvazquez-r7
|
64754a5609
|
Delete unnecessary begin..end block
|
2014-11-07 20:38:36 -06:00 |
|
jvazquez-r7
|
0919f74a3d
|
Delete unused variable
|
2014-11-07 20:37:57 -06:00 |
|
jvazquez-r7
|
22b875d0f3
|
Reduce code complexity
|
2014-11-07 20:37:40 -06:00 |
|
jvazquez-r7
|
b1517e6ace
|
Delete unnecessary nil comparision
|
2014-11-07 20:34:13 -06:00 |
|
jvazquez-r7
|
aa1fec7f02
|
Use fail_with
|
2014-11-07 20:33:33 -06:00 |
|
jvazquez-r7
|
d630eac272
|
Reduce code complexity
|
2014-11-07 20:32:15 -06:00 |
|
jvazquez-r7
|
cea30b5427
|
Use built-in format for RPORT
|
2014-11-07 20:30:32 -06:00 |
|
jvazquez-r7
|
e99cc00a57
|
No more than 100 columns on description
|
2014-11-07 20:29:38 -06:00 |
|
Pedro Ribeiro
|
c00a3ac9cd
|
Add full disclosure URL
|
2014-11-07 08:06:21 +00:00 |
|
Pedro Ribeiro
|
8a0249cdbf
|
Address Juan's points
|
2014-11-06 21:02:28 +00:00 |
|
Pedro Ribeiro
|
e71ba1ad4a
|
Push exploit for CVE-2014-6038/39
|
2014-11-05 20:12:03 +00:00 |
|
Pedro Ribeiro
|
490d6d046b
|
Merge pull request #6 from rapid7/master
merge
|
2014-11-05 20:10:42 +00:00 |
Tod Beardsley
|
cca30b536f
|
Land #4094, fixes for OWA brute forcer
Fixes #4083
Thanks TONS to @jhart-r7 for doing most of the work on this!
|
2014-11-05 14:00:26 -06:00 |
|
Tod Beardsley
|
a46839726e
|
Make OWA 2013 the default, other fixes
Thanks @jhart-r7!
See rapid7#4083 and see rapid7#4094
|
2014-11-05 13:56:37 -06:00 |
William Vu
|
40ee03ee63
|
Land #4126, rm Travis testing for 2.0
|
2014-11-05 10:18:57 -06:00 |
Jon Hart
|
ff8d481eec
|
Update description to remove comments about defaults. Default to 2013
|
2014-11-04 21:21:19 -08:00 |
|
Jon Hart
|
2c028ca7a6
|
Move redirect check before body check -- a redirect won't have a body
|
2014-11-04 14:19:21 -08:00 |
|
Jon Hart
|
7855ede2de
|
Move userpass emptiness checking into setup
|
2014-11-04 14:07:39 -08:00 |
|
William Vu
|
ebb8b70472
|
Land #4015, another Android < 4.4 UXSS module
|
2014-11-04 15:52:29 -06:00 |
|
Tod Beardsley
|
f8593ca1b5
|
Land #4109, tnftp savefile exploit from @wvu-r7
|
2014-11-04 15:44:13 -06:00 |
|
Tod Beardsley
|
5fb268bbdf
|
Updates to better OWA fix
|
2014-11-04 14:32:54 -06:00 |
|
Tod Beardsley
|
714fd0bec6
|
Incorporate @jhart-r7's better fix
|
2014-11-04 14:02:37 -06:00 |
|
Jon Hart
|
b0e388f4c3
|
Land #3516, @midnitesnake's snmp_enumusers fix for Solaris, OS X
|
2014-11-04 08:23:16 -08:00 |
Joshua Smith
|
b45cbfdf53
|
Land 4127, fix broken refactor in util/exe
|
2014-11-04 07:51:12 -06:00 |
agix
|
333d420c94
|
Fix refactoring bug from 23 october in util/exe
23 October, {} instead of #{} totally break windows service generation
f19b093529 (diff-0f5729034d8b0b321e738f2fc047854fL578)
|
2014-11-04 11:59:36 +01:00 |
midnitesnake
|
1a2b1db0d5
|
Merge pull request #3 from jhart-r7/landing-3516-jhart
Numerous cleanups for snmp_enumusers
|
2014-11-04 06:46:32 +00:00 |
|
jvazquez-r7
|
400ef51897
|
Land #4076, exploit for x7chat PHP application
|
2014-11-03 18:22:04 -06:00 |
|
jvazquez-r7
|
3bf7473ac2
|
Add github pull request as reference
|
2014-11-03 18:18:42 -06:00 |
|
jvazquez-r7
|
44a2f366cf
|
Switch ranking
|
2014-11-03 18:06:09 -06:00 |
|
jvazquez-r7
|
039d3cf9ae
|
Do minor cleanup
|
2014-11-03 18:04:30 -06:00 |
|
William Vu
|
277fd5c7a1
|
Land #4123, release fixes
|
2014-11-03 16:20:00 -06:00 |
Juan Escobar
|
7e4248b601
|
Added compatibility with older versions, Updated descriptions and fixed issue with Ubuntu 12.04
|
2014-11-03 16:42:50 -05:00 |
|
Tod Beardsley
|
30ff0a3f55
|
Remove 2.0 Travis testing
Fixes #4125
|
2014-11-03 15:32:20 -06:00 |
|
Tod Beardsley
|
0199e4d658
|
Land #3770, resolve random stager bugs
|
2014-11-03 14:15:14 -06:00 |
|
Tod Beardsley
|
0b39c2ed85
|
Land #4084, prep for Ruby 2.1
|
2014-11-03 13:43:50 -06:00 |
|
Tod Beardsley
|
51b96cb85b
|
Cosmetic title/desc updates
|
2014-11-03 13:37:45 -06:00 |
HD Moore
|
8aecd5e4a5
|
Address the two open comments from @jlee-r7
|
2014-11-03 12:33:11 -06:00 |
OJ
|
4f0fbaa60c
|
Land #4112 - Fix pointer types
|
2014-11-01 10:55:19 +10:00 |
|
jvazquez-r7
|
83360ba9d2
|
Land #4114, @wchen-r7's change to handle Rex::HostUnreachable
|
2014-10-31 19:23:45 -05:00 |
sinn3r
|
6f013cdcaf
|
Missed these
|
2014-10-31 18:48:48 -05:00 |
|
jvazquez-r7
|
f43a6e9be0
|
Use PDWORD_PTR and DWORD_PTR
|
2014-10-31 17:35:50 -05:00 |
|
sinn3r
|
d6a830eb6e
|
Rescue the correct exception: Rex::HostUnreachable
|
2014-10-31 16:43:33 -05:00 |
|
jvazquez-r7
|
6154b7d55f
|
Fix style again
|
2014-10-31 12:51:48 -05:00 |
|
jvazquez-r7
|
203af90a44
|
Fix style
|
2014-10-31 12:50:23 -05:00 |