Brent Cook
c73cd8248e
whine more uniformly
2017-05-26 22:57:59 -05:00
Brent Cook
0f832fd4d1
skip generating gem file contents if this is not a git checkout
2017-05-26 22:57:59 -05:00
Brent Cook
ab6b5f381d
msfupdate is no longer a distributed binary, it's a dev tool
2017-05-26 22:57:59 -05:00
Brent Cook
c58d8afa2f
redirect msfupdate users on Kali
2017-05-26 22:57:59 -05:00
William Webb
d4ba28a20b
Land #8457 , Update multi/fileformat/office_word_macro to allow custom templates
2017-05-26 15:09:23 -05:00
William Webb
f176315942
Land #8462 , Remove deprecated windows/fileformat/office_word_macro
2017-05-26 13:38:02 -05:00
h00die
06ccd17d49
land #8466 update to docs for is_known_pipename
2017-05-26 14:14:01 -04:00
h00die
b3a5a8840b
added ubuntu information
2017-05-26 14:10:26 -04:00
Metasploit
15b3b7de41
Bump version of framework to 4.14.23
2017-05-26 10:02:14 -07:00
wchen-r7
162a660d45
Remove the old windows/fileformat/office_word_macro
...
windows/fileformat/office_word_macro.rb has been deprecated and
it should have been removed on March 16th.
If you want to create a Microsoft Office macro exploit, please
use the multi/fileformat/office_word_macro exploit instead, which
supports multiple platforms, and will support template injection.
2017-05-26 07:33:46 -05:00
wchen-r7
04a701dba5
Check template file extension name
2017-05-26 07:31:34 -05:00
wchen-r7
2835c165d7
Land #8390 , Add module to execute powershell on Octopus Deploy server
2017-05-25 17:33:07 -05:00
wchen-r7
330526af72
Update check method
2017-05-25 17:30:58 -05:00
William Vu
ae22b4ccf4
Land #8450 , Samba is_known_pipename() exploit
2017-05-25 16:36:28 -05:00
HD Moore
4ec5831bd4
Merge pull request #15 from h00die/sambapwn
...
docs for is_known_pipename
2017-05-25 17:32:06 -04:00
HD Moore
1474faf909
Remove ARMLE for now, will re-PR once functional
2017-05-25 16:14:35 -05:00
HD Moore
2ad386948f
Small cosmetic typo
2017-05-25 16:10:37 -05:00
HD Moore
18a871d6a4
Delete the .so, add PID bruteforce option, cleanup
2017-05-25 16:03:14 -05:00
wchen-r7
ee13195760
Update office_word_macro exploit to support template injection
2017-05-25 15:53:45 -05:00
h00die
e8a34c5797
updates to docs
2017-05-25 16:53:39 -04:00
William Webb
eb1f6fcd8d
Land #8456 , Correct typo in exploits/unix/webapp/webmin_show_cgi_exec
2017-05-25 14:17:09 -05:00
nks
1a8961b5e3
fied typo
2017-05-25 19:14:59 +02:00
HD Moore
cf7cfa9b2c
Add check() implementation based on bcoles notes
2017-05-25 09:49:45 -05:00
h00die
98ad754475
updated OJ info and wvu ubuntu box
2017-05-25 08:09:37 -04:00
h00die
b1514fcbc0
docs
2017-05-24 22:18:46 -04:00
HD Moore
0520d7cf76
First crack at Samba CVE-2017-7494
2017-05-24 19:42:04 -05:00
William Vu
e4ea618edf
Land #8419 , ETERNALBLUE fixes (round two)
...
Hope I resolved the conflicts correctly.
2017-05-23 17:03:21 -05:00
William Vu
46eb6bdf62
Land #8399 , ETERNALBLUE fixes (round one)
2017-05-23 16:51:19 -05:00
William Vu
f80c3aa3f4
Correct absolute path
2017-05-23 16:50:25 -05:00
bwatters-r7
461649ed34
Land #8378 , Add check in archmigrate to prevent privdesc
2017-05-23 14:37:29 -05:00
Carter
c73e7673b1
Please the rubocop god
2017-05-23 15:13:55 -04:00
Carter
e945773576
Update archmigrate.rb
2017-05-23 14:40:42 -04:00
Jeffrey Martin
b7b1995238
Land #8274 , Wordpress admin upload `check`
2017-05-22 22:08:32 -05:00
Brent Cook
fc3af168d4
Land #8424 , change postgres docker image to alpine and add timezone
2017-05-22 22:07:01 -04:00
Brent Cook
47d2917a5f
Land #8418 , Add docs for 3 smb related aux modules
2017-05-22 22:04:22 -04:00
Brent Cook
0733790091
Land #8435 , update payload sizes
2017-05-22 22:01:11 -04:00
Brent Cook
0f4ad4994d
Land #8428 , Session listing from aggregator should show any remote id found.
2017-05-22 21:55:39 -04:00
Brent Cook
3e4e5dc810
Land #8421 , fix rspec failures with newer OpenSSL
2017-05-22 21:49:52 -04:00
Jeffrey Martin
4a43e9bcb2
add spec for reverse_ncat_ssl
2017-05-22 18:34:18 -05:00
Jeffrey Martin
5395d8f17c
update python stageless payload sizes
2017-05-22 18:21:13 -05:00
William Webb
9a0e2e6c8a
Land #8324 , Update Gemfile.local example, use Gemfile.local if it exists
2017-05-22 17:05:15 -05:00
Jeffrey Martin
d69bfd509f
store the credential using the new store_valid_credential
2017-05-22 15:08:03 -05:00
William Webb
467f1ce0ca
Land #8411 , Buffer overflow in VXSearch Enterprise v9.5.12
2017-05-22 07:37:31 -05:00
William Webb
b83853d7bc
Land #8433 , Fix proxy_type references to handle nil case
2017-05-22 07:21:30 -05:00
OJ
86aad6b7c3
Fix proxy_type references to handle nil case
2017-05-22 21:47:37 +10:00
William Webb
ec2ce6e473
Land #8432 , Restrict iis_webdav_ScStoragePathFromUrl to 32 bit targets
2017-05-22 06:17:36 -05:00
Christian Mehlmauer
b5caeb29dd
only support for 32bit so far
2017-05-22 12:30:52 +02:00
Jeffrey Martin
f6f421afb7
remote id not suppressed based on local
2017-05-21 19:21:52 -05:00
Renato Piccoli
29d1022ae2
Fix the rake spec failures under ruby 2.4.
...
Ths typo3_spec is giving some errors under ruby 2.4+
and OpenSSL 1.1+.
2017-05-21 21:56:04 +02:00
Christian Mehlmauer
10cedf81b3
Land #8420 , clean payload for iis_webdav_scstoragepathfromurl
2017-05-21 19:34:17 +02:00