Commit Graph

4864 Commits (dfb6f1f5548fb647b8731d7f228c487900ad95ac)

Author SHA1 Message Date
Brendan Coles 56b01dcf00
Land #10534, Add FrontPage Credential Dump Module
This module downloads and parses the '_vti_pvt/service.pwd',
  '_vti_pvt/administrators.pwd', and '_vti_pvt/authors.pwd' files
  used by FrontPage to find credentials.
2018-09-22 04:13:24 +00:00
AverageSecurityGuy 02b2559953 Update documentation to match new output. 2018-09-21 12:50:13 -04:00
AverageSecurityGuy 0746ab5847 Create credential table. 2018-09-21 12:44:10 -04:00
AverageSecurityGuy a603c04da5 Create credential table. 2018-09-21 12:42:32 -04:00
AverageSecurityGuy 5842f0c012 Msftidy 2018-09-21 10:15:31 -04:00
William Vu 02f4fc1876 Prefer to_s.empty?
Oh, hell, do it here, too.
2018-09-20 21:26:41 -05:00
William Vu c875f66154 Prefer to_s over || ''
Oops, I wasn't thinking clearly. to_s is cleaner.
2018-09-20 21:26:41 -05:00
William Vu 9da87a600f Add LEAK_COUNT option to Heartbleed
I should have done this in 2014, but I'm a slacker.
2018-09-20 19:49:07 -05:00
William Vu 185931ca91
Land #10625, repeat command to repeat commands 2018-09-20 15:24:03 -05:00
Brent Cook 549440595f
Land #10627, Add SMB2 support to smb_enumshares 2018-09-17 22:34:42 -05:00
Brent Cook 6126a627cc
Land #10570, AKA Metadata Refactor 2018-09-17 22:29:20 -05:00
Erin Bleiweiss 011c25ed59
Merge changes from master (ghostscript) 2018-09-17 13:57:28 -05:00
AverageSecurityGuy 91edebb2ef Add references, clean up code. 2018-09-17 10:30:54 -04:00
William Vu 4c036e70c1 Fix http://seclists.org links to https://
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
Adam Cammack 04cc7843a4
Typo fixes 2018-09-13 11:19:13 -05:00
Jacob Robles d0e67c5b60
Add SMB2 support to smb_enumshares 2018-09-11 19:05:26 -05:00
Adam Cammack a8f766cfd5
Update heartbleed description to mention `repeat` 2018-09-11 17:41:06 -05:00
Brent Cook ea2fcb6fc4
Land #10593, Refactor SSH mixins and update modules 2018-09-10 15:38:53 -05:00
William Vu 3ec4d2f22b Normalize loot type OID
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported

Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die 39a2d9d2a8 save xml files as xml 2018-09-09 21:24:39 -04:00
William Vu 35fb0d19ab Refactor SSH mixins and update modules 2018-09-05 23:53:11 -05:00
Erin Bleiweiss 69a785ff46
Update json for python modules 2018-08-31 16:56:22 -05:00
Erin Bleiweiss eb17d9b198
Refactor AKA references for modules 2018-08-31 16:56:05 -05:00
AverageSecurityGuy d21c108adf Fix syntax error. 2018-08-28 12:00:31 -04:00
AverageSecurityGuy 44df7939e9 Added docs. Made suggested code changes. 2018-08-28 10:56:05 -04:00
AverageSecurityGuy 0ba1d11218 Add FrontPage Credential Dump 2018-08-27 15:02:39 -04:00
AverageSecurityGuy 4e45100251 Add FrontPage Credential Dump 2018-08-27 14:20:26 -04:00
William Vu 6df235062b
Land #10505, post-auth and default creds info 2018-08-24 18:08:15 -05:00
William Vu 578d2375d7 Add full disclosure for CVE-2018-15473 2018-08-22 14:49:13 -05:00
Wei Chen 2780ae6ba9 Update false negatives 2018-08-21 08:50:26 -05:00
William Vu 06582a00a0 Add module doc for ssh_enumusers
And update description in module.
2018-08-20 19:26:51 -05:00
William Vu 819b8504e2 Add a little better randomization 2018-08-20 17:10:14 -05:00
William Vu b38a442bb0 Refactor once more with feeling
Also flesh out malformed-packet auth method. Let's not be lazy here. :-)
2018-08-20 16:25:32 -05:00
William Vu 75403d7e05 Add testing note about logging 2018-08-17 20:20:12 -05:00
William Vu 7287779555 Make false positive check optional
I couldn't repro this with pubkey-only auth. It also goes to the log.
2018-08-17 20:05:04 -05:00
William Vu 8e3af2dcfc Add CVE-2018-15473 to ssh_enumusers 2018-08-17 18:48:44 -05:00
William Vu 60c0272270 Make style consistent 2018-08-15 21:27:40 -05:00
Kevin Kirsche 45e0b53fc8 Fix spacing issue with rocket 2018-08-15 14:59:52 -07:00
Kevin Kirsche 09434bd57c Fix tabbing caused by incorrect VM nvim configuration 2018-08-15 07:00:45 -07:00
Kevin Kirsche 905f26372d Remove host key checks on ssh scanner modules 2018-08-15 06:48:35 -07:00
Jacob Robles 85a137e0a0
Land #10420, cgit < 1.2.1 Directory Traversal 2018-08-13 16:25:23 -05:00
Jacob Robles 5a3d040d71
Fix module, Add documentation 2018-08-13 15:48:21 -05:00
Shelby Pace ce8cbd64d4
Land #10404, Add Path Traversal Oracle GlassFish 2018-08-13 11:15:26 -05:00
Dhiraj Mishra 14b12f38d0
Fixing 2018-08-05 23:26:18 +05:30
Dhiraj Mishra 9502c26dc1
Updated 2018-08-05 19:14:12 +05:30
Dhiraj Mishra 8a175f50cd
Indentation 2018-08-05 00:15:04 +05:30
Dhiraj Mishra ebcc9a3c20
Fixing Indentation 2018-08-04 19:16:12 +05:30
Dhiraj Mishra 502c103d37
cgit < 1.2.1 Directory Traversal 2018-08-04 18:52:24 +05:30
Dhiraj Mishra 458fca6ff0
Fixing
Thanks bcoles
2018-08-04 13:15:25 +05:30
Brendan Coles 1c82592882
Land #10358, Add Dicoogle PACS Directory Traversal scanner module 2018-08-04 05:31:16 +00:00