infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
51,321 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

51321 Commits (ced68536ab9c40be59b4c14b6dd25b94a3143464)

Author SHA1 Message Date
Metasploit ced68536ab
automatic module_metadata_base.json update 2019-04-02 13:04:27 -07:00
William Vu bc4857954e
Land #11679, duplicate mailcleaner_exec CVE fix 2019-04-02 14:55:36 -05:00
todb-r7 9e3984ea51
Remove duplicate CVE for Mailcleaner module 
See #11304
 2019-04-02 12:51:09 -05:00
Brent Cook 94eb039bd3
Land #11677, add missing payload specs 2019-04-02 07:23:16 -05:00
Metasploit 46535074f6
automatic module_metadata_base.json update 2019-04-01 16:24:03 -07:00
Jeffrey Martin a53ce7539d
add missing payload specs 2019-04-01 18:23:52 -05:00
surefire 1b6cd64016 Land #11136, exploit/multi/misc/weblogic_deserialize_unicastref 2019-04-01 18:15:26 -05:00
surefire 40191e5a01 Dissected JSOs, randomized strings, copied T3 header breakdown from @acamro 2019-04-01 18:05:45 -05:00
Metasploit 601719f0e8
automatic module_metadata_base.json update 2019-04-01 14:07:11 -07:00
William Vu 06397bb087
Land #11636, postgres_createlang version check fix 2019-04-01 15:21:57 -05:00
Metasploit 3318f52524
automatic module_metadata_base.json update 2019-04-01 12:20:28 -07:00
surefire f292befed4 Land #11134, exploit/multi/misc/weblogic_serialize_marshalledobject 2019-04-01 14:11:30 -05:00
surefire 4d0e47044b Fixed a hardcoded payload length resulting in 40% failures 2019-04-01 14:05:39 -05:00
Brendan Coles ddbd7ba080 Case insensitive match 2019-04-01 18:58:14 +00:00
Metasploit 66a6b61441
automatic module_metadata_base.json update 2019-04-01 10:47:23 -07:00
William Vu 5867158238
Land #11595, can_flood post module 2019-04-01 12:38:46 -05:00
William Vu f5f4c4bec2 Clean up module 2019-04-01 12:24:35 -05:00
William Vu 36deeceae9
Land #11652, search -u to use first search result 2019-04-01 11:30:30 -05:00
William Vu e577b8f46a Prefer print_status for status message 2019-04-01 11:30:11 -05:00
Brent Cook edca25d277 remove search 'use by number' option, only use if there is one match 2019-03-30 20:01:40 -05:00
PietroBiondi 2afd27a671 1)Fixed documentation format 2)Refactoring and more efficient loop 2019-03-30 17:12:15 +01:00
Metasploit d3f30297dd
automatic module_metadata_base.json update 2019-03-29 14:30:54 -07:00
Brent Cook 82b7c926fe
Land #11579, Add support for splunk 7.2.4 to splunk_upload_app_exec 2019-03-29 16:22:26 -05:00
Metasploit 795cc90586
automatic module_metadata_base.json update 2019-03-29 13:54:37 -07:00
Brent Cook 9c38d58e9f
Land #11625, add es file explorer open port CVE-2019-6447 module 2019-03-29 15:46:09 -05:00
Metasploit f048cde596
automatic module_metadata_base.json update 2019-03-29 08:57:01 -07:00
William Vu 269cb4bca6
Land #11635, Authors check for msftidy 2019-03-29 10:45:31 -05:00
William Vu af494300ec Add timwr as an author to his own modules 2019-03-29 10:44:58 -05:00
William Vu c1758037b9 Include only common module types in Authors check 2019-03-29 10:44:22 -05:00
Brent Cook a5dbf18ade fix the module showing path 2019-03-28 20:36:45 -05:00
Brent Cook 9e3ca56cdd error handling 2019-03-28 20:26:34 -05:00
Brent Cook 07ce0cf358 add search-by-number support that allows 'use' on the module in one easy step 
This implements a feature request from a few years back, adding a numeric column to module search, as well as a '-u' option that automatically uses the first module that matches, or if the user specifies a number value, the nth module that matches.
 2019-03-28 20:17:01 -05:00
Metasploit 6060c7ac06
automatic module_metadata_base.json update 2019-03-28 16:01:53 -07:00
Brent Cook 0a24266029
Land #11482, RV320 Unauthenticated RCE 2019-03-28 17:53:05 -05:00
Metasploit 51e204af70
Bump version of framework to 5.0.15 2019-03-28 10:08:24 -07:00
Metasploit 845805f15e
automatic module_metadata_base.json update 2019-03-28 07:16:26 -07:00
h00die 1e6850fa53
land #11623 oracle 12 support for hashdumper 2019-03-28 10:07:54 -04:00
h00die 2a311931d3 oracle hashdump cleanup 2019-03-28 10:06:56 -04:00
7043mcgeep f2a19d5e32
Final revisions 2019-03-27 21:53:52 -05:00
Brent Cook dbbf1ea5cb
Land #11644, Add check for active database to relevant Msf::Payload::UUID::Options methods 2019-03-27 15:52:20 -05:00
Metasploit 9d5163ca1a
automatic module_metadata_base.json update 2019-03-27 13:29:27 -07:00
Wei Chen 927d20cb95
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE 2019-03-27 15:21:07 -05:00
Wei Chen 38bdccb91a Use instance variables instead of datastore options 2019-03-27 15:17:32 -05:00
fabiocogno fdb1f4adea
Update cmsms_showtime2_rce.rb 
Fix to CSRF Token stealing function for older versions of CMSMS
 2019-03-27 20:09:14 +01:00
Matthew Kienow 337e061a77
Skip operation if there is no active database 2019-03-27 13:03:37 -04:00
William Vu cfe3e8fba9 Fix tidy auxiliary and payload modules 2019-03-27 09:59:55 -05:00
Metasploit 1981e9be0c
automatic module_metadata_base.json update 2019-03-26 16:52:37 -07:00
Jeffrey Martin 6a0a7c996a Land #11637, Fix a git snafu when landing 2019-03-26 18:42:42 -05:00
h00die 3f9c9341f9 add 2016 authors 2019-03-26 19:39:17 -04:00
asoto-r7 399532154d
Fix a git snafu when landing #11131 
While landing PR #11131, I tripped over my own shoelaces and overwrote `weblogic_deserialize_rawobject.rb` with `weblogic_deserialize_unicastref.rb`, destroying my changes and introducing a great deal of confusion.

This PR gets us back to where we should have been, with #11131 landed and a few changes to add randomization and expanding on the T3 protocol.
 2019-03-26 17:54:37 -05:00