Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Drupal SA-CORE-2019-003 (CVE-2019-6340) #11481

Merged
merged 22 commits into from
Mar 6, 2019
Merged

Add Drupal SA-CORE-2019-003 (CVE-2019-6340) #11481

merged 22 commits into from
Mar 6, 2019

Commits on Feb 25, 2019

  1. Add new exploit for Drupal SA-CORE-2019-003

    @rotemreiss
    rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    e93dffb View commit details
    Browse the repository at this point in the history

  2. Update ranking

    @rotemreiss
    rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    eabd0b4 View commit details
    Browse the repository at this point in the history

  3. Update modules/exploits/unix/webapp/drupal_sa_core_2019_003.rb 

    Co-Authored-By: rotemreiss <reiss.r@gmail.com>
    @bcoles @rotemreiss
    bcoles and rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    d279e09 View commit details
    Browse the repository at this point in the history

  4. Update modules/exploits/unix/webapp/drupal_sa_core_2019_003.rb 

    Co-Authored-By: rotemreiss <reiss.r@gmail.com>
    @bcoles @rotemreiss
    bcoles and rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    8912c1a View commit details
    Browse the repository at this point in the history

  5. Update modules/exploits/unix/webapp/drupal_sa_core_2019_003.rb 

    Co-Authored-By: rotemreiss <reiss.r@gmail.com>
    @bcoles @rotemreiss
    bcoles and rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    9249f2a View commit details
    Browse the repository at this point in the history

  6. Feedback from PR fixes

    @rotemreiss
    rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    54ce49c View commit details
    Browse the repository at this point in the history

  7. Code smells and documentation

    @rotemreiss
    rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    edf7c41 View commit details
    Browse the repository at this point in the history

  8. Code improvements and fixes

    @rotemreiss
    rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    a6148f7 View commit details
    Browse the repository at this point in the history

  9. Add documentation in .md file

    @rotemreiss
    rotemreiss committed Feb 25, 2019
    Configuration menu
    Copy the full SHA
    af1f2eb View commit details
    Browse the repository at this point in the history

Commits on Feb 26, 2019

  1. Remove custom imp. in favor of library change 

    Remove custom full_uri implementation in favor of a library change in rapid7#11485 which adds vhost support in the full_uri method.
    @rotemreiss
    rotemreiss committed Feb 26, 2019
    Configuration menu
    Copy the full SHA
    2c2e1f0 View commit details
    Browse the repository at this point in the history

Commits on Mar 5, 2019

  1. Merge remote-tracking branch 'upstream/master' into pr/11481

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    a8a4805 View commit details
    Browse the repository at this point in the history

  2. Add UNRELIABLE_SESSION Reliability constant

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    d70439f View commit details
    Browse the repository at this point in the history

  3. Refactor module and address review comments

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    ea7c589 View commit details
    Browse the repository at this point in the history

  4. Rewrite module doc

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    92a9c71 View commit details
    Browse the repository at this point in the history

  5. Update drupal_drupalgeddon2

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    d30bfe2 View commit details
    Browse the repository at this point in the history

  6. Fix inline code in module doc

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    3ac7987 View commit details
    Browse the repository at this point in the history

  7. Make HTTP method configurable and prefer POST

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    72bb49a View commit details
    Browse the repository at this point in the history

  8. Sneak in a change to libssh_auth_bypass

    @wvu
    wvu committed Mar 5, 2019
    Configuration menu
    Copy the full SHA
    c7f12b2 View commit details
    Browse the repository at this point in the history

Commits on Mar 6, 2019

  1. Add drupal_patch method to Drupal mixin

    @wvu
    wvu committed Mar 6, 2019
    Configuration menu
    Copy the full SHA
    b2aa065 View commit details
    Browse the repository at this point in the history

  2. Refactor check methods once again

    @wvu
    wvu committed Mar 6, 2019
    Configuration menu
    Copy the full SHA
    84376c3 View commit details
    Browse the repository at this point in the history

  3. Move print_line for DUMP_OUTPUT

    @wvu
    wvu committed Mar 6, 2019
    Configuration menu
    Copy the full SHA
    2f76ad4 View commit details
    Browse the repository at this point in the history

  4. Add friendly default payloads

    @wvu
    wvu committed Mar 6, 2019
    Configuration menu
    Copy the full SHA
    0de69e7 View commit details
    Browse the repository at this point in the history