14296 Commits

Author	SHA1	Message	Date
jvazquez-r7	559ec4adfe	Add module for ZDI-14-299	2014-08-31 01:11:46 -05:00
jvazquez-r7	e1b6ee283f	Allow Msf::Payload::JSP to guess system shell path if it isnt provided	2014-08-30 16:27:02 -05:00
Spencer McIntyre	1cdf1c2c6e	Land #3709, @nnam's wing ftp admin console cmd exec	2014-08-29 13:46:01 -04:00
Spencer McIntyre	8095b4893c	Rename and apply rubocop style to wing_ftp_admin_exec	2014-08-29 13:42:11 -04:00
jvazquez-r7	40f581458a	Land #3570, @ikkini scanner for rsync	2014-08-28 18:48:32 -05:00
jvazquez-r7	9fb9ab813c	Add URL reference	2014-08-28 18:47:56 -05:00
jvazquez-r7	bc542a011d	Change module filename	2014-08-28 18:42:30 -05:00
jvazquez-r7	213fe23970	Clean rsync_modules_list	2014-08-28 18:40:55 -05:00
nnam	02bbd53b82	Fix failure messages for check().	2014-08-28 12:09:35 -07:00
Nicholas Nam	6c90a50e47	Handle res.nil case in check(). Revert check for res.nil in ... execute_command() because it was failing prior to the reverse_shell connecting.	2014-08-28 10:57:52 -07:00
Nicholas Nam	0788ce9745	Removed unused require and import. Handle the res.nil case in ... execute_command() and authenticate().	2014-08-28 10:30:30 -07:00
jvazquez-r7	58091b9e2b	Land #3708, @pedrib fix for manage_engine_dc_pmp_sqli	2014-08-28 10:47:03 -05:00
jvazquez-r7	d8c15766bd	Land #3567 @OJ's fixes to the MQAC local exploit solving conflicts	2014-08-28 10:19:47 -05:00
jvazquez-r7	9d3d25a3b3	Solve conflicts	2014-08-28 10:19:12 -05:00
Matt Andreko	784ece574e	Found additional typos.	2014-08-28 09:03:19 -05:00
Matt Andreko	cb634cfef3	Fixed annoying typo that shows up in validation screenshots	2014-08-28 08:50:30 -05:00
Tod Beardsley	6d45f75b47	Land #3690, credential_collect refactor ... @TomSellers strikes again!	2014-08-27 18:31:59 -05:00
Tom Sellers	9b0c5dfb0c	Minor fix	2014-08-27 18:31:13 -05:00
sinn3r	633eaab466	Land #3714 - Firefox 22-27 WebIDL Privileged Javascript Injection	2014-08-27 01:45:18 -05:00
Joe Vennix	26cfed6c6a	Rename exploit module.	2014-08-26 23:05:41 -05:00
Joe Vennix	96276aa6fa	Get the disclosure date right.	2014-08-26 20:36:58 -05:00
Joe Vennix	52f33128cd	Add Firefox WebIDL Javascript exploit. ... Also removes an incorrect reference from another FF exploit.	2014-08-26 20:35:17 -05:00
Tom Sellers	d5e39ae284	Adjustments for new LoginScanner code	2014-08-26 18:13:00 -05:00
HD Moore	ba1f7c3bf6	Land #3687, reworks the nat-pmp portscanner	2014-08-26 14:34:46 -05:00
HD Moore	ed9bb3e52c	Fix a small typo	2014-08-26 14:34:10 -05:00
Jon Hart	775ebce56b	Correct natpmp_portscan's print_* usage to include peer	2014-08-26 12:27:12 -07:00
HD Moore	3b8bbdf10c	Merge master back in before landing #3545	2014-08-26 14:07:58 -05:00
HD Moore	4e19d9ade1	Land #3545, fix up sip scanners, msftidy, db services cmd	2014-08-26 14:07:21 -05:00
Jon Hart	5826d7b164	vprint_status when no external address obtained, print_ is too noisy	2014-08-26 12:05:40 -07:00
Jon Hart	e75e213b52	Clarify SIP mixin method name, store header values as string, etc	2014-08-26 11:40:49 -07:00
Jon Hart	246f021437	Update natpmp_external_address to use Msf::Auxiliary::UDPScanner	2014-08-26 10:49:53 -07:00
Jon Hart	5c57f9b4eb	Don't overload RPORT/LPORT for mapping external -> internal ports	2014-08-26 10:49:53 -07:00
Jon Hart	162508f532	Update NAT-PMP modules to use new/updated mixins	2014-08-26 10:49:53 -07:00
Jon Hart	816404bb88	Move common NAT-PMP functionality into a central place	2014-08-26 10:49:53 -07:00
Jon Hart	ca11eae3a9	Show a useful failure message when the external address probe fails	2014-08-26 10:49:52 -07:00
William Vu	9f6a40dfd6	Fix bad pack in mswin_tiff_overflow ... Reported by @egyjuzer in #3706.	2014-08-26 11:14:44 -05:00
Jon Hart	bb00c97f46	Add a CERT reference	2014-08-26 08:29:28 -07:00
Jon Hart	40fe2fd3a9	Remove DRDoS references, as this just proves amplification	2014-08-26 08:23:50 -07:00
Jon Hart	10f52d8765	Use MX of 1 to speed up responses from endpoints that respect it	2014-08-26 08:00:30 -07:00
Jon Hart	333c3a90ae	Space between SSDP headers and values, which is sometimes required	2014-08-26 07:57:59 -07:00
Jon Hart	337cd02dd7	Change Auxiliary::DRDoS' prove_drdos to prove_amplification	2014-08-26 07:48:44 -07:00
Jon Hart	04fbd07a16	vprint_error in the unlikely event we get an unexpected response	2014-08-26 07:30:14 -07:00
Nicholas Nam	40b66fae33	Add Wing FTP Server post-auth remote command execution module	2014-08-26 07:28:41 -07:00
Jon Hart	79b05db409	Correct minor style issues	2014-08-26 07:26:30 -07:00
Pedro Ribeiro	a8d03aeb59	Fix bug with PMP db paths	2014-08-26 12:54:31 +01:00
Pedro Ribeiro	473341610c	Update name to mention DC; correct servlet name	2014-08-26 12:39:48 +01:00
xistence	63b75a0093	SSDP Amplification module changes	2014-08-26 16:03:32 +07:00
xistence	a90d142140	Add UPnP SSDP Amplication Scanner	2014-08-26 12:53:14 +07:00
Jon Hart	6a522cc105	Remove unused BATCHSIZE from SIP options_tcp, duplicate from options	2014-08-25 13:12:29 -07:00
Jon Hart	bfa89bb3a5	Enforce binary encoding on non-modules, no encoding on modules	2014-08-25 13:12:29 -07:00