1286 Commits (ccdd1cd2ced0268e9c7573b8b7d8c62892e1091f)

Author	SHA1	Message	Date
Martin Pizala	cc98e80002	Change arch to ARCH_X64	2017-09-28 20:50:18 +02:00
RootUp	26108f5ac9	Create ibm_lotus_notes.md	2017-09-28 10:31:42 -05:00
h00die	2295146dcd	working optionsbleed module	2017-09-27 22:07:57 -04:00
bwatters-r7	66d6ac418a	Land #8978, Add smb1 scanner	2017-09-26 16:06:41 -05:00
William Vu	98ae054b06	Land #8931, Node.js debugger exploit	2017-09-25 14:00:13 -05:00
h00die	273d49bffd	Land #8891 login scanner for Inedo BuildMaster	2017-09-24 13:30:17 -04:00
h00die	e6c4a87bda	documentation update	2017-09-24 13:29:34 -04:00
h00die	4d1e51a0ff	Land #8906 RCE for supervisor	2017-09-24 08:03:30 -04:00
h00die	9528f279a5	cleaned up version, and docs	2017-09-23 10:51:52 -04:00
Mehmet Ince	3d543b75f5	Fixing typos and replacing double quotes with single	2017-09-21 23:48:12 +03:00
Mehmet Ince	ee969ae8e5	Adding DenyAll RCE module	2017-09-19 14:53:37 +03:00
loftwing	c584592a4b	Remove leftover IPs in docs	2017-09-18 15:12:42 -05:00
loftwing	c953842c96	Added docs and additional dialects	2017-09-18 15:02:38 -05:00
William Webb	d5362333e2	Land #8958, Add Disk Pulse Enterprise web server buffer overflow	2017-09-15 13:34:22 -05:00
loftwing	e3deaadcc7	Documentation added	2017-09-14 11:52:15 -05:00
Craig Smith	b218cc3c7f	Merge branch 'master' into hw_auto_padding_fix	2017-09-11 18:30:34 -07:00
Craig Smith	363e11850b	Added FC to documentation	2017-09-11 18:29:27 -07:00
Martin Pizala	5ae708081d	Wording, reviewer remarks	2017-09-11 23:25:10 +02:00
h00die	fc52ef9941	Land #8942 docs for syn port scanner	2017-09-10 10:03:34 -04:00
h00die	ddfa1d722b	fixed grammar	2017-09-10 10:02:07 -04:00
james	861f4a6201	Changes to buildmaster_login from code review ... Use peer property in messages instead of rhost rport combination for consistency. Documentation updated accordingly.	2017-09-09 18:00:04 -05:00
Deepanshu Gajbhiye	4ec72d7091	Update syn.md	2017-09-09 20:15:13 +05:30
Deepanshu Gajbhiye	8138396ab5	Update syn.md	2017-09-09 13:28:18 +05:30
Brent Cook	8f864c27e3	Land #8924, Add Apache Struts 2 REST Plugin XStream RCE	2017-09-08 13:59:52 -05:00
Brent Cook	54a62976f8	update versions and add quick module docs	2017-09-08 13:59:29 -05:00
dmohanty-r7	c91ef1f092	Land #8768, Add Docker Daemon TCP exploit module	2017-09-08 12:50:00 -05:00
Deepanshu Gajbhiye	35ecc822f1	Update syn.md	2017-09-08 13:23:30 +05:30
Deepanshu Gajbhiye	bead7374de	syn.md ... documentation for syn portscan	2017-09-08 02:57:46 -04:00
Brent Cook	a0181a4d54	Land #8831, Add Maven post-exploitation credential extraction module ... Merge remote-tracking branch 'upstream/pr/8831' into upstream-master	2017-09-08 00:37:03 +02:00
Brent Cook	c67e407c9c	Land #8880, added Cisco Smart Install (SMI) scanner	2017-09-07 08:06:03 -05:00
Brent Cook	a304df265c	fix spelling	2017-09-07 08:02:30 -05:00
Patrick Thomas	637b83a0ea	add docs for nodejs debugger eval exploit	2017-09-06 22:29:46 -07:00
h00die	be66ed8af3	Land #8788 exploits for Gh0st and PlugX malware controllers	2017-09-05 20:42:07 -04:00
h00die	d05c401866	modules cleanup and add docs	2017-09-04 20:57:23 -04:00
Calum Hutton	52c8fff3cb	Make options a list	2017-08-30 03:10:46 +01:00
Calum Hutton	42ab00fd2c	Add documentation for module	2017-08-30 03:10:46 +01:00
Brent Cook	202c936868	Land #8826, git submodule remote command execution	2017-08-29 18:11:32 -05:00
Brent Cook	8928197584	rename module docs so they are viewable	2017-08-29 18:09:30 -05:00
Pearce Barry	d5124fdc94	Land #8759, Add TeamTalk Gather Credentials auxiliary module	2017-08-29 13:17:28 -05:00
Tim	e1b38ac3a3	fix malicious typo	2017-08-29 17:52:51 +08:00
Tim	5631ddc246	add docs for the git submodule vulnerability	2017-08-29 17:06:30 +08:00
james	5bf1d916bc	Fix uneven quotes in various documentation files ... Uneven quotes lead to malformed markdown, which will not render as intended. Even out the quotes in several files.	2017-08-26 19:12:48 -05:00
james	f785fe63ad	Grammar fix in buildmaster_login documentation	2017-08-26 18:35:13 -05:00
james	2e9d7cdf0a	Documentation formatting fix for buildmaster_login	2017-08-26 18:23:00 -05:00
james	7dfde651ea	Add login scanner module for Inedo BuildMaster ... This module attempts to log into BuildMaster. BuildMaster is an application release automation tool. More information about BuildMaster: http://inedo.com/	2017-08-26 17:56:53 -05:00
Erik Lenoir	682851ac59	Edit doc	2017-08-25 18:28:24 +02:00
h00die	899c2cc6fa	Land #8866 tcp scanner docs	2017-08-23 20:23:51 -04:00
h00die	a54ef94c79	style fixes	2017-08-23 20:20:31 -04:00
Deepanshu Gajbhiye	0fac36c2af	Update tcp.md	2017-08-23 10:36:56 +05:30
Deepanshu Gajbhiye	99dfc9901c	Update tcp.md ... Adding documentation for tcp module	2017-08-23 10:36:08 +05:30
Deepanshu Gajbhiye	d254da5150	Update tcp.md	2017-08-23 10:23:28 +05:30
Deepanshu Gajbhiye	6fb90640b9	Update tcp.md	2017-08-23 10:02:21 +05:30
William Vu	4c285c0129	Land #8827, QNAP Transcode Server RCE	2017-08-22 23:07:01 -05:00
h00die	a0585dcb9e	Land #8872 docs for octopusdeploy_deploy	2017-08-22 21:36:44 -04:00
Jon Hart	e4fc307ebb	Add docs	2017-08-22 15:12:02 -07:00
Erik Lenoir	be2739d335	Transform loots into creds	2017-08-22 11:57:51 +02:00
james	7f8e6b83dc	Update documentation for exploit/windows/http/octopusdeploy_deploy ... Remove self explanatory options.	2017-08-21 19:47:24 -05:00
james	60215297be	Update documentation for exploit/windows/http/octopusdeploy_deploy ... Fix awkward wording.	2017-08-21 19:17:41 -05:00
james	de9392995a	Add documentation for exploit/windows/http/octopusdeploy_deploy	2017-08-21 19:11:36 -05:00
Deepanshu Gajbhiye	8f4fcb5094	tcp.md ... This module does a complete full tcp scan of each port on the target host. It does a full 3 way handshake on each port.	2017-08-21 13:09:12 -04:00
Brent Cook	eabe4001c2	Land #8492, Add IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution module	2017-08-20 18:48:22 -05:00
Brent Cook	cbd7790e95	Land #8751, Add Asterisk Gather Credentials auxiliary module	2017-08-20 18:34:27 -05:00
Brent Cook	840c0d5f56	Land #7808, add exploit for VMware VDP with known ssh private key (CVE-2016-7456)	2017-08-20 17:36:45 -05:00
Brent Cook	f7dc831e9a	Land #8799, Add module to detect Docker, LXC, and systemd-nspawn containers	2017-08-20 14:45:57 -05:00
Brent Cook	2eba188166	Land #8789, Add COM class ID hijack method for bypassing UAC	2017-08-20 13:57:17 -05:00
Erik Lenoir	cde319a5ec	Optim module and add doc	2017-08-18 19:30:41 +02:00
Jay Turla	b0a4634b24	Update connect.md ... Adding the command in installing gem "serialport".	2017-08-17 18:55:44 +08:00
Brendan Coles	3fcd248d3a	Add documentation	2017-08-17 09:51:09 +00:00
Tim	648dca7bdb	fix silly documentation mistake	2017-08-17 14:43:58 +08:00
james	1c44092ba9	Add module documentation for post/linux/gather/checkcontainer	2017-08-16 21:15:56 -05:00
OJ	408a83a36b	Added comhijack module documentation	2017-08-16 13:05:27 +10:00
Erik Lenoir	6ac8ed490b	Add documentation file	2017-08-15 16:56:20 +02:00
Brendan Coles	60f7534969	Add documentation	2017-08-15 03:43:22 +00:00
Brent Cook	68f569d8f5	Land #8809, Add documentation for OSX meterpreter	2017-08-13 09:31:28 -04:00
William Vu	4315c2d8ea	Land #8802, single-char args for terp scripts	2017-08-10 01:29:55 -05:00
Pearce Barry	bb5fffebc4	Land #8796, SMBLoris Denial of Service Module.	2017-08-09 16:24:55 -05:00
Pearce Barry	901a1fdd1b	Minor tweaks.	2017-08-09 15:44:32 -05:00
bwatters-r7	dd79aa3afb	Land #8627, Add post module multi/gather/jenkins	2017-08-09 10:43:21 -05:00
Tim	9c87f5f52f	commands should be highlighted	2017-08-08 12:45:39 +08:00
Tim	eb3e07ee10	minor tweak since background is default now	2017-08-08 12:37:28 +08:00
Tim	61bb59d653	fix typos	2017-08-08 12:31:30 +08:00
Tim	0fde536691	add documentation for OSX meterpreter	2017-08-08 12:26:22 +08:00
Tim	46ca543712	add docs for Android APK injection	2017-08-07 15:56:48 +08:00
Josh Hale	ed2286c637	Fix references to multi_console_command	2017-08-06 18:58:38 -05:00
Pearce Barry	e1576154fb	Document the new padding option.	2017-08-06 18:34:56 -05:00
David Maloney	289f03241b	add module documentation ... add module docs for the new smbloris DoS	2017-08-04 16:10:44 -05:00
Brent Cook	da3ca9eb90	update some documentation	2017-08-03 17:09:44 -05:00
Yorick Koster	67dddd2402	Typo reported by @nixawk	2017-08-02 15:47:21 -05:00
Yorick Koster	3229320ba9	Code review feedback from @nixawk	2017-08-02 15:46:51 -05:00
Yorick Koster	565a3355be	CVE-2017-8464 LNK Remote Code Execution Vulnerability ... This module exploits a vulnerability in the handling of Windows Shortcut files (.LNK) that contain a dynamic icon, loaded from a malicious DLL. This vulnerability is a variant of MS15-020 (CVE-2015-0096). The created LNK file is similar except in an additional SpecialFolderDataBlock is included. The folder ID set in this SpecialFolderDataBlock is set to the Control Panel. This is enought to bypass the CPL whitelist. This bypass can be used to trick Windows into loading an arbitrary DLL file.	2017-08-02 15:46:30 -05:00
Martin Pizala	d7d64286e2	Add documentation for exploit module Rancher Server - Docker Exploit	2017-07-28 08:04:59 +02:00
Brendan Coles	798dfe0b88	Add documentation	2017-07-26 10:18:23 +00:00
Martin Pizala	dd0c78484a	Fix mistake	2017-07-26 02:17:51 +02:00
Martin Pizala	cd418559bc	Docker Daemon - Unprotected TCP Socket Exploit	2017-07-26 00:21:35 +02:00
Brent Cook	6300758c46	use https for metaploit.com links	2017-07-24 06:26:21 -07:00
Ricardo Almeida	fe5c6dc28f	Orientdb 2.2.x RCE - Update documentation	2017-07-24 10:09:06 +01:00
Brent Cook	7c55cdc1c8	fix some module documentation ... 3 modules got documentation landed in the wrong spot. This also fixes a few typos and improves formatting.	2017-07-23 07:46:52 -07:00
Pearce Barry	6bb745744b	Land #8471, Add VICIdial user_authorization Unauthenticated Command Execution module	2017-07-21 15:57:08 -05:00
Ricardo Almeida	00a817d228	Orientdb 2.2.x RCE - Add documentation	2017-07-20 09:03:26 +01:00
bwatters-r7	ffad0d1bbf	Land #8559, Ipfire oinkcode exec	2017-07-19 14:31:18 -05:00
thesubtlety	47f55b1c81	add documentation	2017-07-18 21:30:53 -04:00
Jon Hart	e93e524c3b	Merge branch 'upstream-master' into feature/rdp-scanner	2017-07-17 13:46:59 -07:00
Jon Hart	e5ef737c21	Add documentation	2017-07-17 13:45:12 -07:00
David Maloney	8f6cac9c37	Land #8652, rpc console write exploit ... lands pr for the metasploit rpc console write exploit	2017-07-14 14:47:35 -05:00
bwatters-r7	de230478eb	Land #8566, Add ye olde NNTP Login Utility scanner module	2017-07-13 13:19:34 -05:00
Pearce Barry	59de7d3635	Land #8671, Add a module for CVE-2017-7615	2017-07-12 14:58:02 -05:00
Corey Harding	6cb956ea81	Update rfpwnon.md	2017-07-09 05:07:36 -04:00
jvoisin	f10cf75ae0	Fix some stuff	2017-07-09 10:45:15 +02:00
jvoisin	e1b9330136	Add some documentation	2017-07-09 02:25:11 +02:00
Pearce Barry	e3f95954ba	Minor doc update.	2017-07-07 16:54:56 -05:00
Brendan Coles	95ba5d61ce	Move documentation to correct folder	2017-07-07 16:54:56 -05:00
Brendan Coles	8e2ff7a4c5	Add command stager and code cleanup	2017-07-07 16:54:56 -05:00
dmohanty-r7	8f464e17a1	Land #8658, Add Gather PDF Authors auxiliary module	2017-07-07 16:20:29 -05:00
Brendan Coles	afc704aea5	Ad documentation	2017-07-07 18:54:48 +00:00
Brent Cook	f4820d24fb	add a few more AKA references	2017-07-06 22:43:46 -05:00
Brent Cook	b0c5d734ee	s/swith/switch/ - ok @bcoles	2017-07-06 07:03:06 -05:00
Brendan Coles	baff473cae	Add Metasploit RPC Console Command Execution module	2017-07-05 08:48:35 +00:00
dmohanty-r7	aa387e96a7	Land #8577, Add SurgeNews User Credentials scanner	2017-07-03 10:14:03 -05:00
Pearce Barry	a2602bf514	Land #8600, Add GoAutoDial 3.3 RCE Command Injection / SQL injection module	2017-06-30 17:32:51 -05:00
Pearce Barry	3d4d03c9b4	Land #8575, Cerberus Helpdesk hash disclosure	2017-06-30 16:02:53 -05:00
Pearce Barry	71b2ddaa2c	Minor doc tweaking.	2017-06-30 15:53:27 -05:00
Brent Cook	796fe99744	update docs to note that cluster mode is not necessary to exploit	2017-06-30 11:26:35 -04:00
Brent Cook	40f0d36f6b	Land #8615, add @artkond's DoS module for Cisco CVE-2017-3881	2017-06-30 11:17:09 -04:00
William Webb	6349026134	Land #8442, Exploit module for Backup Exec Windows Agent UaF	2017-06-28 10:39:28 -05:00
Brent Cook	0d9f57ad7c	add @artkond's DoS module for Cisco CVE-2017-3881 ... This makes a few improvements, adds module docs.	2017-06-27 01:53:23 -05:00
Brent Cook	05c72214ae	Land #8205, Add Satel SenNet Command Exec Module	2017-06-25 18:01:44 -05:00
Rob Fuller	2918b3af13	Land #8599, Dynamic DNS updater module	2017-06-25 15:08:22 -05:00
Rob Fuller	24fe6ac0fe	Update dns_dyn_update.md	2017-06-24 17:07:56 -05:00
h00die	cc9326d946	bcoles updates and table printing	2017-06-24 13:01:39 -04:00
dmohanty-r7	18410d8230	Land #8540, Add Symantec Messaging Gateway RCE	2017-06-22 19:00:32 -05:00
Brent Cook	5e48a11e60	handle specific exceptions, update docs	2017-06-22 18:01:52 -05:00
Brent Cook	6a261b172f	move from scanner to admin	2017-06-22 17:47:04 -05:00
Brent Cook	cdf0091962	fixup docs	2017-06-22 16:07:34 -05:00
KINGSABRI	2410a3232f	Adding DNS Server Dynamic Update Record Injection module	2017-06-22 15:41:25 -05:00
Brent Cook	4fdd77f19a	Land #8051, Add Netgear DGN2200v1/v2/v3/v4 Command Injection Module	2017-06-22 11:46:40 -05:00
Pearce Barry	24d9bec0ae	Land #8260, OpManager Version Check	2017-06-20 17:58:10 -05:00
Pearce Barry	700d392106	Add markdown docs.	2017-06-20 17:45:44 -05:00
Pearce Barry	3cd28b28e2	Land #8569, Add ability to specify API token instead of password	2017-06-19 17:42:35 -05:00
Pearce Barry	58cd432120	Added docs, minor code tweak to remove duplication.	2017-06-19 17:35:41 -05:00
h00die	071dc09b1f	fix spelling	2017-06-19 10:31:24 -05:00
mccurls	19ceb53304	Modified payload handling and uploaded documentation	2017-06-18 02:04:22 +10:00
Brendan Coles	b82051757d	Add SurgeNews User Credentials scanner module	2017-06-17 01:49:47 +00:00
h00die	41e96f9ff1	updated docs	2017-06-16 20:54:25 -04:00
h00die	f008f2aa8f	working code	2017-06-16 08:24:54 -04:00
Brendan Coles	414f440d62	Add documentation	2017-06-15 21:12:09 +00:00
h00die	46ffd250a0	module working and docs	2017-06-14 21:15:56 -04:00
Brendan Coles	0766f92013	Add option for workspace	2017-06-13 12:46:36 +00:00
William Vu	bb9d1a6768	Land #8507, Riverbed SteelHead VCX file read	2017-06-12 10:39:48 -05:00
Mehmet Ince	6ae540d889	Adding Symantec messaging gateway rce	2017-06-10 12:23:12 +03:00
bwatters-r7	99fa52e660	Land #8434, Add Windows 10 Bypassuac fodhelper module	2017-06-07 11:15:01 -05:00