UP #3

XZVB12 · 2020-06-10T20:56:31Z

Tell us what this change does. If you're fixing a bug, please mention
the github issue number.

Please ensure you are submitting from a unique branch in your repository to master in Rapid7's.

Verification

List the steps needed to make sure this thing works

Start msfconsole
use exploit/windows/smb/ms08_067_netapi
...
Verify the thing does what it should
Verify the thing does not do what it should not
Document the thing and how it works (Example)

…request and checking the status code

And a little formatting Closes #13403 Update modules/auxiliary/admin/android/google_play_store_uxss_xframe_rce.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/admin/backupexec/dump.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/admin/http/arris_motorola_surfboard_backdoor_xss.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/dos/android/android_stock_browser_iframe.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/admin/tikiwiki/tikidblib.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/smb.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/telnet.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/vnc.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/fakedns.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/tftp.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/dos/http/gzip_bomb_dos.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/dos/http/ibm_lotus_notes.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/dos/http/ibm_lotus_notes2.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/dos/http/webkitplus.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/dos/windows/browser/ms09_065_eot_integer.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/example.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/android_browser_file_theft.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/apple_safari_ftp_url_cookie_theft.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/android_browser_new_tab_cookie_theft.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/apple_safari_webarchive_uxss.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/browser_lanipleak.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/firefox_pdfjs_file_theft.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/flash_rosetta_jsonp_url_disclosure.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/samsung_browser_sop_bypass.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/http.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/http_basic.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/http_ntlm.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/http_ntlmrelay.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/socks4a.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/socks5.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/sip.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/postgresql.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/local_hwbridge.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/webkit_xslt_dropper.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/socks_unc.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/client/iec104/iec104.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/browser_info.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/drda.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/ftp.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/mssql.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/mysql.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/pop3.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/dns/spoofhelper.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/server/capture/printjob_capture.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update description following Actions removal Update modules/auxiliary/gather/browser_info.rb Update modules/auxiliary/gather/browser_info.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com> Update modules/auxiliary/gather/browser_info.rb Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

I renamed the queues as well.

Fixes #7403, a race condition where requeued packets are processed out of order leading to corrupt protocol negotiations.

…badattrval.md Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

And sort the list alphabetically.

…/post/windows.rb

default payload added

…ice_tracing Merge branch 'land-13585' into upstream-master

Merge branch 'land-13525' into upstream-master

Merge branch 'land-13589' into upstream-master

noncenz and others added 30 commits May 15, 2020 13:11

Fix regex key matching issue

e99420b

Land #13415, badchar-free encoded payload fix

b8ca608

proper pathing

d496554

Update to use lru_crawler for memcached 1.5.4+

94fe620

Use wsman identification request instead of sending a raw HTTP empty …

d022d12

…request and checking the status code

minor Fix to a comment

557de61

pihole dhcp exec

a8673e0

fix doc numbering

132a742

remove commented include

9851f27

Land #13445, Pi-Hole <= 4.4 root RCE CVE-2020-11108

c019c06

automatic module_metadata_base.json update

662ea8b

Land #13443, descriptions for auxiliary actions

690172e

automatic module_metadata_base.json update

b30a52a

Update the changes with some commentary

aac9173

I renamed the queues as well.

Add a dlog line when an incomplete packet is requeued

5bb109c

Land #13465, Prioritise incomplete packets in the dispatch loop

3b30b53

Fixes #7403, a race condition where requeued packets are processed out of order leading to corrupt protocol negotiations.

Update eyesofnetwork_autodiscovery_rce module and documentation

6d72fe4

Update documentation/modules/exploit/multi/misc/weblogic_deserialize_…

ddc549e

…badattrval.md Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update documentation/modules/exploit/multi/misc/weblogic_deserialize_…

3073479

…badattrval.md Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update documentation/modules/exploit/multi/misc/weblogic_deserialize_…

aea7eb9

…badattrval.md Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update documentation/modules/exploit/multi/misc/weblogic_deserialize_…

ec7ff5e

…badattrval.md Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update documentation/modules/exploit/multi/misc/weblogic_deserialize_…

67f4cc8

…badattrval.md Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb

32386e0

Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb

4ff4676

Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb

5857c80

Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb

c51a32e

Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb

d86e008

Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>

fix docs

df3e8f2

rubocop fixes

837f307

wvu and others added 29 commits June 8, 2020 22:22

Move Rex::Socket.source_address outside loop

3f56950

Land #13468, memcahed extractor now works with LRU

16425ba

automatic module_metadata_base.json update

2beada5

Land #13579, updates iis_internal_ip module info

9c6781a

automatic module_metadata_base.json update

9b10f28

Land #13566, Automatically select a payload on module use

7e98931

Land #13576, Deprecate the psexec_psh module

64669d1

automatic module_metadata_base.json update

3058e52

Require msf/core/post/windows/filesystem

8aae30e

And sort the list alphabetically.

Don't sort requires, since order matters here...

ec183d7

Land #13583, Require msf/core/post/windows/filesystem in lib/msf/core…

1bad53a

…/post/windows.rb

Update linuxki_rce.md

5483bd9

Update linuxki_rce.rb

14bb64c

default payload added

Update linuxki_rce.md

9e810cb

RuboCop autofix cve_2020_0668_service_tracing

9f53884

Add Doc

9d67ef6

Unf*ck the RuboCop Description formatting

e669d5d

Land #13537, add new module linuxki_rce (CVE-2020-7209)

797673f

automatic module_metadata_base.json update

67394f9

Fix edgecase in rubocop module description rule

6007e13

Land #13585, RuboCop autofix exploit/windows/local/cve_2020_0668_serv…

2881a41

…ice_tracing Merge branch 'land-13585' into upstream-master

Land #13525, Gather xshell and xftp passwords

39e6368

Merge branch 'land-13525' into upstream-master

Land #13589, Fix edge case in rubocop module description rule

e48a02c

Merge branch 'land-13589' into upstream-master

automatic module_metadata_base.json update

fa496b9

Merge remote-tracking branch 'upstream/master' into pr/13534

85b2964

Clean up module and documentation

b90acd3

Add Spencer's test results to module doc

6745b99

Land #13534, QNAP QTS and Photo Station LFI module

ba9313f

automatic module_metadata_base.json update

7614f01

XZVB12 merged commit 202c5dc into XZVB12:master Jun 10, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

UP #3

UP #3

XZVB12 commented Jun 10, 2020

UP #3

UP #3

Conversation

XZVB12 commented Jun 10, 2020

Verification