Brendan Coles
56b01dcf00
Land #10534 , Add FrontPage Credential Dump Module
...
This module downloads and parses the '_vti_pvt/service.pwd',
'_vti_pvt/administrators.pwd', and '_vti_pvt/authors.pwd' files
used by FrontPage to find credentials.
2018-09-22 04:13:24 +00:00
AverageSecurityGuy
02b2559953
Update documentation to match new output.
2018-09-21 12:50:13 -04:00
AverageSecurityGuy
0746ab5847
Create credential table.
2018-09-21 12:44:10 -04:00
AverageSecurityGuy
a603c04da5
Create credential table.
2018-09-21 12:42:32 -04:00
AverageSecurityGuy
5842f0c012
Msftidy
2018-09-21 10:15:31 -04:00
William Vu
02f4fc1876
Prefer to_s.empty?
...
Oh, hell, do it here, too.
2018-09-20 21:26:41 -05:00
William Vu
c875f66154
Prefer to_s over || ''
...
Oops, I wasn't thinking clearly. to_s is cleaner.
2018-09-20 21:26:41 -05:00
William Vu
9da87a600f
Add LEAK_COUNT option to Heartbleed
...
I should have done this in 2014, but I'm a slacker.
2018-09-20 19:49:07 -05:00
William Vu
185931ca91
Land #10625 , repeat command to repeat commands
2018-09-20 15:24:03 -05:00
Brent Cook
549440595f
Land #10627 , Add SMB2 support to smb_enumshares
2018-09-17 22:34:42 -05:00
Brent Cook
6126a627cc
Land #10570 , AKA Metadata Refactor
2018-09-17 22:29:20 -05:00
Erin Bleiweiss
011c25ed59
Merge changes from master (ghostscript)
2018-09-17 13:57:28 -05:00
AverageSecurityGuy
91edebb2ef
Add references, clean up code.
2018-09-17 10:30:54 -04:00
William Vu
4c036e70c1
Fix http://seclists.org links to https://
...
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
Adam Cammack
04cc7843a4
Typo fixes
2018-09-13 11:19:13 -05:00
Jacob Robles
d0e67c5b60
Add SMB2 support to smb_enumshares
2018-09-11 19:05:26 -05:00
Adam Cammack
a8f766cfd5
Update heartbleed description to mention `repeat`
2018-09-11 17:41:06 -05:00
Brent Cook
ea2fcb6fc4
Land #10593 , Refactor SSH mixins and update modules
2018-09-10 15:38:53 -05:00
William Vu
3ec4d2f22b
Normalize loot type OID
...
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported
Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die
39a2d9d2a8
save xml files as xml
2018-09-09 21:24:39 -04:00
William Vu
35fb0d19ab
Refactor SSH mixins and update modules
2018-09-05 23:53:11 -05:00
Erin Bleiweiss
69a785ff46
Update json for python modules
2018-08-31 16:56:22 -05:00
Erin Bleiweiss
eb17d9b198
Refactor AKA references for modules
2018-08-31 16:56:05 -05:00
AverageSecurityGuy
d21c108adf
Fix syntax error.
2018-08-28 12:00:31 -04:00
AverageSecurityGuy
44df7939e9
Added docs. Made suggested code changes.
2018-08-28 10:56:05 -04:00
AverageSecurityGuy
0ba1d11218
Add FrontPage Credential Dump
2018-08-27 15:02:39 -04:00
AverageSecurityGuy
4e45100251
Add FrontPage Credential Dump
2018-08-27 14:20:26 -04:00
William Vu
6df235062b
Land #10505 , post-auth and default creds info
2018-08-24 18:08:15 -05:00
William Vu
578d2375d7
Add full disclosure for CVE-2018-15473
2018-08-22 14:49:13 -05:00
Wei Chen
2780ae6ba9
Update false negatives
2018-08-21 08:50:26 -05:00
William Vu
06582a00a0
Add module doc for ssh_enumusers
...
And update description in module.
2018-08-20 19:26:51 -05:00
William Vu
819b8504e2
Add a little better randomization
2018-08-20 17:10:14 -05:00
William Vu
b38a442bb0
Refactor once more with feeling
...
Also flesh out malformed-packet auth method. Let's not be lazy here. :-)
2018-08-20 16:25:32 -05:00
William Vu
75403d7e05
Add testing note about logging
2018-08-17 20:20:12 -05:00
William Vu
7287779555
Make false positive check optional
...
I couldn't repro this with pubkey-only auth. It also goes to the log.
2018-08-17 20:05:04 -05:00
William Vu
8e3af2dcfc
Add CVE-2018-15473 to ssh_enumusers
2018-08-17 18:48:44 -05:00
William Vu
60c0272270
Make style consistent
2018-08-15 21:27:40 -05:00
Kevin Kirsche
45e0b53fc8
Fix spacing issue with rocket
2018-08-15 14:59:52 -07:00
Kevin Kirsche
09434bd57c
Fix tabbing caused by incorrect VM nvim configuration
2018-08-15 07:00:45 -07:00
Kevin Kirsche
905f26372d
Remove host key checks on ssh scanner modules
2018-08-15 06:48:35 -07:00
Jacob Robles
85a137e0a0
Land #10420 , cgit < 1.2.1 Directory Traversal
2018-08-13 16:25:23 -05:00
Jacob Robles
5a3d040d71
Fix module, Add documentation
2018-08-13 15:48:21 -05:00
Shelby Pace
ce8cbd64d4
Land #10404 , Add Path Traversal Oracle GlassFish
2018-08-13 11:15:26 -05:00
Dhiraj Mishra
14b12f38d0
Fixing
2018-08-05 23:26:18 +05:30
Dhiraj Mishra
9502c26dc1
Updated
2018-08-05 19:14:12 +05:30
Dhiraj Mishra
8a175f50cd
Indentation
2018-08-05 00:15:04 +05:30
Dhiraj Mishra
ebcc9a3c20
Fixing Indentation
2018-08-04 19:16:12 +05:30
Dhiraj Mishra
502c103d37
cgit < 1.2.1 Directory Traversal
2018-08-04 18:52:24 +05:30
Dhiraj Mishra
458fca6ff0
Fixing
...
Thanks bcoles
2018-08-04 13:15:25 +05:30
Brendan Coles
1c82592882
Land #10358 , Add Dicoogle PACS Directory Traversal scanner module
2018-08-04 05:31:16 +00:00