0ee0a0da1c
This seems to work
2015-03-13 04:43:06 -05:00
0c3329f69e
Back on track
2015-03-12 15:26:55 -05:00
43b90610b1
Temp
2015-03-11 13:53:34 -05:00
2a9d6e64e2
Starting point for CVE-2015-0318
2015-03-11 09:58:41 -05:00
df80d56fda
Land #4898 , prefer URI to open-uri
2015-03-09 09:14:10 -05:00
6c71ae7fc3
Lands #4893 , coerce to string to avoid stack trace
...
essage aborts
ssage aborts
2015-03-07 18:40:49 -06:00
c3e91c263f
Fix NoMethodError in plugins/nessus.rb
...
Triggered by @port.length in nessus_login from YAML.
2015-03-07 17:56:12 -06:00
5316e0f0ce
Land #4887 , msfconsole -n store_loot fix
2015-03-07 17:14:21 -06:00
b79e99f55a
Land #4892 , "response HTML" message fix
2015-03-07 17:09:13 -06:00
3075c56064
Fix "response HTML" message
...
In modules/exploits/multi/browser/firefox_xpi_bootstrapped_addon.rb.
2015-03-07 17:08:08 -06:00
f3494d9019
Correct grammar in BES
2015-03-07 16:04:06 -06:00
d7295959ca
Remove open-uri usage in msf.
2015-03-05 23:45:28 -06:00
ca3b2220b5
Check to ensure Mdm is loaded to fix store_loot.
2015-03-05 23:27:13 -06:00
a13cd2bcb7
Land #4880 : @wchen-r7 check if module has session before comparison
2015-03-05 20:48:42 -06:00
2134cc3d22
Modify description
2015-03-05 16:55:24 -06:00
c46c05f5ab
Land #4884 , @Meatballs1's module for Nvidia arbitrary dll injection
2015-03-05 16:53:11 -06:00
7b4776ee79
Deregister FOLDER_NAME
2015-03-05 16:42:07 -06:00
1bc81ea723
Merge #4884 into updated master
2015-03-05 16:41:15 -06:00
33f089b1a5
Tidyup
2015-03-05 21:50:12 +00:00
2da1b6cfda
Land #3323 , @0x41414141's SMB target for struts_code_exec_classloader
2015-03-05 15:49:22 -06:00
9f3f8bb727
Merging #3323 work
2015-03-05 15:44:15 -06:00
c388fd49c2
Fix print message
2015-03-05 15:43:54 -06:00
dd2559b748
Favor new target over new module
2015-03-05 15:41:53 -06:00
ad0e287795
Modify struts_code_exec_classloader instead of adding a new module
2015-03-05 15:41:16 -06:00
e1a4b046a0
Add support for tomcat 7 to struts_code_exec_classloader
2015-03-05 15:40:24 -06:00
c56679f33e
Modify for new SMB mixin
2015-03-05 21:26:13 +00:00
3e81bf073c
Land #4883 , Postgres PTH reference
2015-03-05 15:05:27 -06:00
e429d4c04f
Add reference and description for PTH on Postgres
...
Dave and William did most of the work already over on PR #4871 , this
just points it out in the module.
2015-03-05 14:36:56 -06:00
0c87e28208
Land #4882 , workspace sort order
...
[Fixes #4881 ]
2015-03-05 14:30:00 -06:00
fef8b89001
Merge pull request #6 from jvazquez-r7/final_3323_folder_support
...
Add support for a folder and update module. Thanks @jvazquez-r7 - yeah I was using an older version of my code for the exploit (whoops - long day...). Landed. I'll look at merging this with the existing exploit over the weekend.
2015-03-05 20:08:10 +00:00
7cb3e236fb
Adding back prepended colons
...
Don't seem to be needed but don't want to introduce that change.
2015-03-05 14:06:50 -06:00
02d30b3d44
Changes workspace cmd ordering to updated_at asc
2015-03-05 14:05:24 -06:00
84df403d11
Land #4852 , vuln note import/export addition
2015-03-05 13:54:22 -06:00
de08d8247b
Do some module cleanup
2015-03-05 13:00:01 -06:00
31191bef39
Fix #4865 , undef method 'ancestors' in lib/msf/core/payload_set.rb
...
Fix #4865
2015-03-05 12:49:51 -06:00
82659aba93
Populate metadata from code to make test easier
2015-03-05 12:40:20 -06:00
dc02f8332f
Pass msftidy
2015-03-05 12:29:31 -06:00
a06eb04d59
Deregister FOLDER_NAME on exploit modules
2015-03-05 12:27:12 -06:00
38f8fe382c
Update specs
2015-03-05 12:24:41 -06:00
5ede40a39d
Change the variable name
2015-03-05 12:21:33 -06:00
e0a22a6794
Add support for folder
2015-03-05 12:19:33 -06:00
cb9922ad39
Land #4874 , Add PHPMoAdmin command injection
2015-03-05 11:30:44 -06:00
8978b1d7b5
Add a version
2015-03-05 11:29:44 -06:00
5b65811fb2
Merge pull request #5 from jvazquez-r7/land_3323
...
Update with rapid7 master changes. I'll take a further look at this module and add version support to pick the best exploit path for differing tomcat versions.
2015-03-05 14:46:01 +00:00
32188f09d6
Update phpmoadmin_exec.rb
...
Changes:
Added required comment at the top of the file;
Changed Class name "Metasploit3" >> "Metasploit4";
Standard name/email format for public PoC author.
2015-03-05 12:56:08 +00:00
95962aab0d
Update phpmoadmin_exec.rb
...
Changes:
"Check if vulnerable" code improvement;
Payload delivery code improvement;
Minor indent issues.
Thanks for your feedback guys :)
2015-03-05 12:46:53 +00:00
a23381118b
Land #4878 , squid_pivot_scanning interpolation fix
2015-03-05 01:09:40 -06:00
2f4df39dc9
Fixed typo
2015-03-05 17:40:51 +11:00
b9a30d60d4
Land #3294 , @0x41414141's generic dll injection through SMB shared folder
2015-03-04 16:42:24 -06:00
e715eaba58
Update description
2015-03-04 16:39:27 -06:00
sinn3r