Brent Cook
|
3c9b1be649
|
Land #7883, Fix cisco_firepower_download to pass the username properly
|
2017-01-27 16:31:06 -06:00 |
Brent Cook
|
4480ea7877
|
Land #7827, Cisco Firepower Management Console LoginScanner
|
2017-01-27 16:26:40 -06:00 |
Brent Cook
|
171cc7d54e
|
slight wording tweak
|
2017-01-27 16:26:23 -06:00 |
wchen-r7
|
e6de951e3e
|
Fix cisco_firepower_download to pass the username properly
|
2017-01-27 16:25:34 -06:00 |
Brent Cook
|
a4dd1fc846
|
Land #7805, Add CVE-2016-6435 - Cisco Firepower Management Console Dir Traversal
|
2017-01-27 16:09:14 -06:00 |
wchen-r7
|
781bc8420a
|
Add Advantech WebAccess LoginScanner module
|
2017-01-26 13:54:50 -06:00 |
Brent Cook
|
836da6177f
|
Cipher::Cipher is deprecated
|
2017-01-22 10:20:03 -06:00 |
Jin Qian
|
b4d3e9da8d
|
This closes #7849 on the confusing message.
Use result.proof which has the right message. Thanks to Wei for pointing it
|
2017-01-19 15:39:10 -06:00 |
wchen-r7
|
82ab4fc630
|
Update cisco_firepower_download module & documentation
|
2017-01-17 13:58:10 -06:00 |
wchen-r7
|
a687073416
|
Add Cisco Firepower Management Console LoginScanner
|
2017-01-13 16:59:20 -06:00 |
wchen-r7
|
8194603725
|
Add CVE-2016-6435 - Cisco Firepower Management Console Dir Traversal
|
2017-01-09 14:39:37 -06:00 |
dmohanty-r7
|
5cba9b0034
|
Land #7747, Add LoginScanner module for BAVision IP cameras
|
2017-01-06 16:25:44 -06:00 |
wchen-r7
|
144f886e8b
|
Add LoginScanner module for BAVision IP cameras
|
2016-12-23 16:22:17 -06:00 |
William Vu
|
0589948a73
|
Remove other rhost (oops) and fail_with
|
2016-12-23 16:10:21 -06:00 |
Jin Qian
|
da9ea0b85c
|
Change the PCRE.
|
2016-12-16 15:41:10 -06:00 |
William Vu
|
f0dca7abbf
|
Land #7692, print_error for error_sql_injection
|
2016-12-09 17:09:52 -06:00 |
William Vu
|
4e235be484
|
Ensure a trailing slash for base_uri
Technically, the GET parameters should be in vars_get, but we don't want
to refactor the entire module right now.
|
2016-12-09 16:53:58 -06:00 |
Jin Qian
|
8780c325a7
|
Fixed issues #7691, silent exit.
Add a print statement to alert user what is missing, user could be confused that "show missing" is empty yet something is missing.
|
2016-12-09 16:20:44 -06:00 |
Jin Qian
|
17c12a78f5
|
Fixed issue #7689, count of found users not accurate
In module drupal_views_user_enum, the count of found users is not accurate.
Fixed it by doing flatten before doing counting.
|
2016-12-09 15:19:43 -06:00 |
Jin Qian
|
4a35f8449a
|
Fixed issue #7650 by matching Server header using regex as Wei suggested
The suggestion by Wei is simpler than the one I checked in which checks for presence of Server header before calling include method.
|
2016-12-02 20:26:38 -06:00 |
Jin Qian
|
35fdf1473b
|
Fixed issue #7650 where etherpad_duo_login module may crash
Add check for presence of Server header.
|
2016-12-02 18:07:18 -06:00 |
Jin Qian
|
11906eb540
|
Fix issue #7645 where dolibarr_login module crashed
Add "res" (http response) when trying to retrieve the cookie
|
2016-12-01 15:38:26 -06:00 |
William Vu
|
54684d31bd
|
Land #7641, check_conn? fix for cisco_ssl_vpn
|
2016-11-30 21:14:19 -06:00 |
William Vu
|
032312d40b
|
Properly check res
|
2016-11-30 21:03:29 -06:00 |
Jin Qian
|
ec83a861c8
|
Fix issue #7640 where cisco SSL VPN not move despite server responded
Add the "return true" statement that was missing.
|
2016-11-30 16:25:13 -06:00 |
wchen-r7
|
56505d2cc1
|
Resolve merge conflict
|
2016-11-30 14:33:23 -06:00 |
wchen-r7
|
c70c3701c5
|
Fix #7628, concrete5_member_list HTML parser
Fix #7628
|
2016-11-30 14:20:36 -06:00 |
wchen-r7
|
530e9a9bc6
|
Land #7633, fix dell_idrac to stop trying on a user after a valid login
|
2016-11-30 11:46:31 -06:00 |
Jin Qian
|
afed1f465e
|
Fix issue 7632 where MSF keeps trying after success.
Thanks to Wei who suggested adding "return :next_user" after success.
|
2016-11-29 14:57:15 -06:00 |
Jin Qian
|
1beeb99d44
|
Fix issue 7628, username extracted became garbled
Make the regular expression less aggressive.
|
2016-11-29 12:52:57 -06:00 |
William Vu
|
c39c53b102
|
Prefer DefaultOptions to reregistering SSL option
|
2016-11-28 14:29:02 -06:00 |
Pearce Barry
|
8c54b0e5f4
|
Land #7622, Fix check_conn? method in cisco_ironport_enum
|
2016-11-28 14:19:02 -06:00 |
William Vu
|
777d5c1820
|
Fix check_conn? method in cisco_ironport_enum
|
2016-11-28 14:02:39 -06:00 |
wchen-r7
|
4eb109b22f
|
Land #7609, set SSL to true by default for cisco_nac_manager_traversal
|
2016-11-28 11:30:41 -06:00 |
John Q. Public
|
c286c708d9
|
Print file contents
Added a print_good statement at line 63 in order to print to contents of the newly discovered robots.txt file.
|
2016-11-25 15:57:37 -06:00 |
Pearce Barry
|
ec020e3d07
|
Land #7611, cisco_ironport_enum falsely claimed connection failed
Fixes #7610
|
2016-11-24 09:54:09 -06:00 |
Jin Qian
|
65b858ac06
|
Fix issue 7610, cisco_ironport_enum falsely claimed connection failed.
Make sure we return 1 in check_conn method.
|
2016-11-23 14:59:07 -06:00 |
Jin Qian
|
b7ae7a47be
|
Fix issue #7608 where the SSL option was not turned on by default
Set the SSL option to be on by default.
|
2016-11-23 14:45:42 -06:00 |
Jin Qian
|
0df3e17e0c
|
Fix the issue in MS2132 where OWA_LOGIN doesn't continue on connection error.
The possibility of temporary connnection disruption means this module should keep trying other user/pass pairs upon error.
|
2016-11-23 09:56:27 -06:00 |
William Vu
|
6f8660f345
|
Land #7586, NameError fix for brute_dirs
|
2016-11-21 14:46:19 -06:00 |
William Vu
|
c8320d661f
|
Land #7590, mixin order fix for buffalo_login
|
2016-11-21 13:57:27 -06:00 |
Jin Qian
|
90d360a592
|
Fix the issue 7589, both RHOST and RHOSTS options are quired
Thanks to Will who found it's due to the order of mixin.
|
2016-11-21 11:06:32 -06:00 |
Jin Qian
|
18b873be47
|
Fix the exception issue reported in issue #7585
Fix the exception by initialize a key variable that caused the exception.
|
2016-11-21 10:00:23 -06:00 |
wchen-r7
|
d3adfff663
|
Change syntax
|
2016-11-18 11:41:04 -06:00 |
wchen-r7
|
f894b9a4c5
|
Fix typo
|
2016-11-18 11:39:26 -06:00 |
Cantoni Matteo
|
c9b9be9328
|
Update open_proxy aux module
|
2016-11-17 15:44:03 +01:00 |
Alton J
|
98d7b19ab9
|
Passed IP parameter to additional functions.
|
2016-10-11 15:09:50 -05:00 |
Alton J
|
acff0fa9cf
|
Added IP addresses to output.
|
2016-10-11 14:43:42 -05:00 |
Alton J
|
f0ff4a0721
|
Added IP addresses to output.
|
2016-10-11 14:42:06 -05:00 |
wchen-r7
|
245237d650
|
Land #7288, Add LoginScannerfor Octopus Deploy server
|
2016-09-13 17:26:56 -05:00 |