infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
27,082 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

27082 Commits (d02f0dc4b9776ca0b7e175d5af969e3759782b5d)

Author SHA1 Message Date
jvazquez-r7 d02f0dc4b9 Make minor cleanup 2014-10-08 10:36:56 -05:00
jvazquez-r7 d913bf1c35 Fix metadata 2014-10-08 10:29:59 -05:00
mfadzilr a2a2ca550e add test result on different windows version 2014-09-20 20:06:30 +08:00
mfadzilr dd71c666dc added osvdb reference and software download url, use FileDropper method 
for cleanup
 2014-09-20 15:31:28 +08:00
mfadzilr 19ed594e98 using FileDropper method for cleanup 2014-09-20 10:52:21 +08:00
mfadzilr 677d035ce8 added proper regex for check function 
add comment for changed code
 2014-09-19 11:30:51 +08:00
mfadzilr 978803e9d8 add proper regex 2014-09-16 21:49:02 +08:00
mfadzilr 783b03efb6 change line 84 as mubix advice, update disclosure date according to 
bugtraq security list.
 2014-09-15 17:21:05 +08:00
mfadzilr 9860ed340e run msftidy, make correction for CVE format and space at EOL (line 77) 2014-09-15 13:13:25 +08:00
mfadzilr f1d3c44f4f exploit module for HTTP File Server version 2.3b, exploiting HFS scripting commands 'save' and 'exec'. 2014-09-15 12:59:27 +08:00
mfadzilr 74ef83812a update module vulnerability information 2014-09-15 01:43:18 +08:00
mfadzilr 8b4b66fcaa initial test 2014-09-14 12:26:02 +08:00
James Lee b8000517cf
Land #3746, reinstate DB_ALL_CREDS 2014-09-08 17:24:12 -05:00
Tod Beardsley b9c8eb70c4
Land #3675, update copyright on Rex 2014-09-08 16:05:41 -05:00
HD Moore 250b3d227c Fix the rex.rb header and copyright date 2014-09-08 15:32:13 -05:00
William Vu b61d1dca88
Land #3763, release fixes 2014-09-08 14:02:45 -05:00
Tod Beardsley 4abee39ab2
Fixup for release 
Ack, a missing disclosure date on the GDB exploit. I'm deferring to the
PR itself for this as the disclosure and URL reference.
 2014-09-08 14:00:34 -05:00
David Maloney ef748fdef7
check if database is connected first 
wooops
 2014-09-08 12:54:19 -05:00
David Maloney 09e6c2f51f
Merge branch 'master' into feature/MSP-11162/db-all-creds 2014-09-08 12:52:25 -05:00
David Maloney 16502b831f Merge branch 'master' of github.com:rapid7/metasploit-framework 2014-09-08 12:45:52 -05:00
David Maloney b84142715f
rescue mysql host blocked 
rbmysql can throw an exception if the
server blocked this host due to too many connection errors
 2014-09-08 12:45:10 -05:00
William Vu ae5a8f449c
Land #3691, gdbserver hax 2014-09-08 11:48:39 -05:00
jvennix-r7 b48aa8f2ca Merge pull request #13 from wvu-r7/pr/3691 
Add verify_checksum and use it
 2014-09-08 11:41:54 -05:00
sinn3r 0ccb39c057
Land #3726 - Fix typos in wordpress login 2014-09-08 09:40:57 -05:00
William Vu 5c1d95812c
Add verify_checksum and use it 
Also fixed a YARD typo.
 2014-09-08 02:19:21 -05:00
jvazquez-r7 10bb77af9f
Land #3716, @wchen-r7's Glassfish LoginScanner update 2014-09-07 21:54:34 -05:00
jvazquez-r7 6cdfd322f2 change should to expect 2014-09-07 21:35:33 -05:00
jvazquez-r7 e6f7b35d0d Use context to describe #attempt_login 2014-09-07 21:26:01 -05:00
jvazquez-r7 f266ca99f5 Use allow_any_instance_of as with rspec 3 2014-09-07 21:18:22 -05:00
jvazquez-r7 768b50974f Redo try_glassfish_3 specs 2014-09-07 21:04:43 -05:00
jvazquez-r7 07238ef7b3 Redo try_glassfish_2 specs 2014-09-07 20:47:54 -05:00
jvazquez-r7 9a42e7635a Use expect instead of should on try_login 2014-09-07 20:01:44 -05:00
jvazquez-r7 06207afb12 Use expect instead of should 2014-09-07 19:37:24 -05:00
jvazquez-r7 424d1ec47f Add example to describe how send_request handles a JSESSIONID cookie 2014-09-07 19:33:56 -05:00
jvazquez-r7 28aa7429ed
Land #3751, @wchen-r7's [FixRM #8836] Use windows\\win.ini vs boot.ini 2014-09-07 01:47:10 -05:00
jvazquez-r7 c86d01a667 Fix win.ini signature 2014-09-07 01:46:38 -05:00
William Vu 422d6bd2e4
Land #3758, nil deref fix for iax2/call.rb 2014-09-06 16:08:32 -05:00
HD Moore af24e30ae9 Return instead of crashing if no challenge is received 2014-09-06 15:51:50 -05:00
sinn3r 419b2136b1 remove the "instance methods" context 2014-09-06 01:42:48 -05:00
sinn3r c8ccb5e848 In 3rd person 2014-09-06 01:39:32 -05:00
sinn3r febf70fed1 Merge pull request #21 from jvazquez-r7/review_3716 
Clean YARD documentation
 2014-09-06 01:22:58 -05:00
sinn3r 44b9dc9b28 Update tmlisten_traversal 2014-09-06 01:18:11 -05:00
jvazquez-r7 78cf75c4d5 Clean YARD documentation 2014-09-06 00:24:39 -05:00
William Vu 7d942be715
Land #3755, WVE and BPS reference removal 2014-09-05 19:56:40 -05:00
sinn3r 0d56a8ee14 Merge pull request #20 from wvu-r7/pr/3755 
Remove WVE references from msftidy
 2014-09-05 19:55:38 -05:00
William Vu 48e098b172
Remove WVE references from msftidy 2014-09-05 19:28:27 -05:00
Samuel Huckins 643329e2c4
Land #3757, postgres login scanner nil public fix 2014-09-05 16:35:46 -05:00
jvennix-r7 671c7f1095 Merge pull request #12 from wvu-r7/pr/3691 
Fix read_ack to read only the ACK
 2014-09-05 16:09:38 -05:00
David Maloney 0d9fbe798a
turn nil publics and privates into blanks 
don't pass nil into the credential object, pass an empty string instead
this is the expected behaviour and avoids stack traces
 2014-09-05 16:06:58 -05:00
sinn3r ce0e7b59f5 Remove WVE and BPS reference identifiers 
Reasons why they should be gone:

WVE:
* wirelessve.org is down.
* Not a single module uses WVE as a reference

BPS:
* "BreakingPoint" no longer exists
* The URL takes you to a login page to ixia. And there is no point
  of referencing something people can't see.
* Not a single module uses BPS as a reference.
 2014-09-05 13:28:10 -05:00