Jon Hart
|
b78f7b4d55
|
Land #6319, @all3g's module for abusing redis to achieve file uploads
|
2015-12-14 18:00:44 -08:00 |
|
Jon Hart
|
e448bc3e27
|
If saving fails, print_error and mention permissions
|
2015-12-14 10:47:05 -08:00 |
|
Jon Hart
|
19acd366d6
|
Rename redis file upload module; remove the 'auth' part
|
2015-12-14 10:40:28 -08:00 |
Vex Woo
|
dee23e4bda
|
Merge pull request #3 from jhart-r7/pr/fixup-6319
Cleanup redis unauth_file_upload, move redis stuff to mixin
|
2015-12-12 03:32:05 +00:00 |
|
Jon Hart
|
9ef46140c0
|
Improve output when success
|
2015-12-11 10:10:44 -08:00 |
|
Jon Hart
|
32a64c3d8e
|
Make auth easier, work automatically and on older redis versions
Also, improve check
|
2015-12-11 10:04:47 -08:00 |
|
Jon Hart
|
ac47c87af4
|
Move Password option to redis mixin
|
2015-12-11 08:53:11 -08:00 |
|
Jon Hart
|
38d0b0a0f2
|
Wire in @all3g's redis auth code
|
2015-12-11 08:42:59 -08:00 |
|
Jon Hart
|
555e52e416
|
Document the redis upload process more
|
2015-12-10 09:35:46 -08:00 |
|
Jon Hart
|
48a27170c2
|
Document process better, delete correct key
|
2015-12-10 09:13:13 -08:00 |
|
Jon Hart
|
d2f54af23f
|
Reset the dir and dbfilename back to their original settings
|
2015-12-10 08:56:24 -08:00 |
|
Jon Hart
|
21ab4e96e5
|
First pass at redis mixin
|
2015-12-10 08:29:59 -08:00 |
nixawk
|
0d8fc78257
|
make code more clear
|
2015-12-10 15:13:50 +00:00 |
|
nixawk
|
42013c18ba
|
add a password option - AUTH_KEY
|
2015-12-10 08:24:47 +00:00 |
|
nixawk
|
28bc5b4d4f
|
move it from exploit to auxiliary
|
2015-12-10 08:23:38 +00:00 |
|
Jon Hart
|
4cc7853ad8
|
Don't run_host unless check returns vulnerable; report_service
|
2015-12-09 18:33:40 -08:00 |
|
Jon Hart
|
624e5aeffa
|
First pass at converting redis module to aux; style cleanup
|
2015-12-09 17:59:48 -08:00 |
James Lee
|
98a0ddebda
|
Land #6298, Advantech shellshock module
|
2015-12-01 11:37:09 -06:00 |
HD Moore
|
16d0d53150
|
Update Shellshock modules, add Advantech coverage
|
2015-12-01 10:40:46 -06:00 |
Kyle Gray
|
bd8177bf6c
|
Merge remote-tracking branch 'origin/pr/6284'
Land #6284, fix for false negatives found in #6281
@wvu found some false negatives while testing a server for #6281
|
2015-11-30 16:09:42 -06:00 |
Christian Mehlmauer
|
920d8c6ad7
|
Land #6278, wrong default option for RHOST
|
2015-11-26 06:49:25 +01:00 |
|
Jon Hart
|
8fd2522a59
|
Land #6257, @all3g's aux module for locating git repos over HTTP
|
2015-11-25 12:25:45 -08:00 |
|
Jon Hart
|
a56571479f
|
Remove WmapScanServer mixin; not needed
|
2015-11-25 11:38:32 -08:00 |
William Vu
|
2da9bb8578
|
Follow redirects in apache_userdir_enum
Found false negatives while testing a server for #6281.
|
2015-11-25 13:27:06 -06:00 |
|
William Vu
|
8f459de064
|
Fix tomcat_enum for full_uri
|
2015-11-25 11:28:56 -06:00 |
|
William Vu
|
38a9efe4d6
|
Fix squiz_matrix_user_enum for full_uri
|
2015-11-25 11:28:53 -06:00 |
|
William Vu
|
7d17c5741b
|
Fix nginx_source_disclosure for full_uri
|
2015-11-25 11:19:27 -06:00 |
|
William Vu
|
035882702a
|
Fix barracuda_directory_traversal for full_uri
|
2015-11-25 11:18:17 -06:00 |
|
William Vu
|
7a5f6495d0
|
Fix axis_local_file_include for full_uri
|
2015-11-25 11:16:59 -06:00 |
|
William Vu
|
42d12a4d40
|
Fix apache_userdir_enum for full_uri
|
2015-11-25 11:16:22 -06:00 |
Waqas Ali
|
c09d8031c6
|
Remove default empty string
|
2015-11-25 12:19:16 +05:00 |
|
Jon Hart
|
eac4f02b66
|
Spelling and correct description
|
2015-11-24 17:57:56 -08:00 |
aushack
|
3ad7ef9814
|
Modify the printed URL to add https:// when SSL is used.
|
2015-11-25 12:46:56 +11:00 |
|
Jon Hart
|
ccdf814688
|
Use correct URIs in report_note
|
2015-11-24 09:52:07 -08:00 |
|
Jon Hart
|
c66d56263a
|
Cleaner and more consistent print_ *
|
2015-11-24 09:43:05 -08:00 |
|
Jon Hart
|
1e90a8004d
|
Correct printing of URIs when provided TARGETURI doesn't end with /
|
2015-11-24 09:11:04 -08:00 |
|
Jon Hart
|
afa4d9e74d
|
Add legit git UserAgent
|
2015-11-24 08:57:19 -08:00 |
|
Jon Hart
|
d59c563ee3
|
Don't store index file
|
2015-11-24 08:51:43 -08:00 |
|
Jon Hart
|
e29a229336
|
Minor style cleanup
|
2015-11-24 08:50:21 -08:00 |
|
Waqas Ali
|
2152c310fe
|
Remove the default true option of RHOST
|
2015-11-24 14:54:54 +05:00 |
Louis Sato
|
493e476a43
|
Land #6243, check nil for sock.read
|
2015-11-23 11:15:51 -06:00 |
|
nixawk
|
2dd8567741
|
remove GIT_HEAD / add description / git_config regex match / save index|config file(s)
|
2015-11-22 09:18:19 +00:00 |
|
aushack
|
fc46ce0ced
|
Bring module title in line with other WP modules.
|
2015-11-22 13:39:45 +11:00 |
|
nixawk
|
e0386d6830
|
add scan switches GIT_INDEX / GIT_HEAD / GIT_CONFIG
|
2015-11-21 03:06:37 +00:00 |
|
nixawk
|
1795e09a27
|
scan git disclosure (.git/index)
|
2015-11-19 09:16:32 +00:00 |
wchen-r7
|
0cda20c9e2
|
Fix everything pointed out by @jlee-r7
|
2015-11-18 12:02:28 -06:00 |
|
wchen-r7
|
17a1f2ee8a
|
Fix #6242, Check nil for sock.read
Fix #6242
|
2015-11-16 14:24:46 -06:00 |
|
wchen-r7
|
f0da09090d
|
Land #6233, Konica Minolta FTP Utility 1.00 Directory Traversal
|
2015-11-16 13:55:29 -06:00 |
|
wchen-r7
|
740cacb4c0
|
Check nil
|
2015-11-16 13:54:36 -06:00 |
|
William Vu
|
4401c6f1fd
|
Land #6178, rsync modules_list improvements
|
2015-11-13 10:46:24 -06:00 |