Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open web analytics 1.7.3 remote code execution #17754

Merged
merged 46 commits into from
Mar 17, 2023
Merged

Open web analytics 1.7.3 remote code execution #17754

merged 46 commits into from
Mar 17, 2023

Commits on Mar 8, 2023

  1. Working module open web analytics 1.7.3 rce

    @Pflegusch
    Pflegusch committed Mar 8, 2023
    Configuration menu
    Copy the full SHA
    b37be28 View commit details
    Browse the repository at this point in the history

  2. Change DisclosureDate according to nvd.nist.gov

    @Pflegusch
    Pflegusch committed Mar 8, 2023
    Configuration menu
    Copy the full SHA
    76b05a7 View commit details
    Browse the repository at this point in the history

Commits on Mar 9, 2023

  1. remove LPORT, RPORT and SSL from DefaultOptions

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    7068d4c View commit details
    Browse the repository at this point in the history

  2. use fail_with in get_cache_content function

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    f0dbf54 View commit details
    Browse the repository at this point in the history

  3. make it work for https and http and remove the tmp self signed cert b… 

    …ypass
    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    d59175a View commit details
    Browse the repository at this point in the history

  4. Add the documentation for the module

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    7b0a54b View commit details
    Browse the repository at this point in the history

  5. Small changes to the open_web_analytics_rce documentation

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    3847c41 View commit details
    Browse the repository at this point in the history

  6. Use the same IP as in the example

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    ae7ca16 View commit details
    Browse the repository at this point in the history

  7. Fix the double slash in the shell url

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    14b5c08 View commit details
    Browse the repository at this point in the history

  8. fix typo: establish_connection

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    ee95eb2 View commit details
    Browse the repository at this point in the history

  9. Redirect is not necessary - replace with simple send_request_cgi request

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    94ceeb0 View commit details
    Browse the repository at this point in the history

  10. Use Rex::Version for version comparison

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    2de5371 View commit details
    Browse the repository at this point in the history

  11. Make installation path of owa configurable

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    614f4b6 View commit details
    Browse the repository at this point in the history

  12. Use single back ticks and 3 instead of 4 at the end

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    8518563 View commit details
    Browse the repository at this point in the history

  13. Remove get_proxy_protocol function

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    69839d1 View commit details
    Browse the repository at this point in the history

  14. Use rand_text_alphanumeric function

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    e66fd8f View commit details
    Browse the repository at this point in the history

  15. Rename establish_connection function

    @Pflegusch
    Pflegusch committed Mar 9, 2023
    Configuration menu
    Copy the full SHA
    38511f4 View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2023

  1. make use of full_uri and change regex

    @Pflegusch
    Pflegusch committed Mar 11, 2023
    Configuration menu
    Copy the full SHA
    3f7f28d View commit details
    Browse the repository at this point in the history

  2. Use metasploit payload instead of hardcoded one

    @Pflegusch
    Pflegusch committed Mar 11, 2023
    Configuration menu
    Copy the full SHA
    94e9504 View commit details
    Browse the repository at this point in the history

  3. Update example in docs for latest code changes

    @Pflegusch
    Pflegusch committed Mar 11, 2023
    Configuration menu
    Copy the full SHA
    ddd594a View commit details
    Browse the repository at this point in the history

Commits on Mar 14, 2023

  1. fix msftidy_docs.rb issues

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    3196a52 View commit details
    Browse the repository at this point in the history

  2. Remove directory datastore option and make username and password requ… 

    …ired
    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    cc4e455 View commit details
    Browse the repository at this point in the history

  3. Remove base64 requirement

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    3113149 View commit details
    Browse the repository at this point in the history

  4. use Failure::Unreachable and use unless instead of if/else

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    ac6e947 View commit details
    Browse the repository at this point in the history

  5. Use default values in option declaration instead of DefaultOptions

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    9e64f02 View commit details
    Browse the repository at this point in the history

  6. prepend AutoCheck

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    cfaad7f View commit details
    Browse the repository at this point in the history

  7. Add some more URL references

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    c0ee250 View commit details
    Browse the repository at this point in the history

  8. Add CONFIG_CHANGES to the side effects

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    2ce3aee View commit details
    Browse the repository at this point in the history

  9. remove fail_with in check_connection as suggested

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    dff139d View commit details
    Browse the repository at this point in the history

  10. check if res is not nil in addition to res.code

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    8db10af View commit details
    Browse the repository at this point in the history

  11. Use UnexptectedReply instead of Unknown

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    887551b View commit details
    Browse the repository at this point in the history

  12. Fix typos, update docs with advanced option SearchLimit, implement Se… 

    …archLimit into module
    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    e160e51 View commit details
    Browse the repository at this point in the history

  13. Check if cache_request is not nil

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    86f4a16 View commit details
    Browse the repository at this point in the history

  14. Use Failure::NotFound when no valid cache file is found

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    2310b0d View commit details
    Browse the repository at this point in the history

  15. Use Failure::UnexpectedReply when password cant be changed

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    897aaf9 View commit details
    Browse the repository at this point in the history

  16. Update Failure Codes and check for nil in the helper functions

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    d72d47e View commit details
    Browse the repository at this point in the history

  17. Fix line too long in open_web_analytics_rce docs

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    bb9e214 View commit details
    Browse the repository at this point in the history

  18. More detailed error message for failed regex match

    @Pflegusch
    Pflegusch committed Mar 14, 2023
    Configuration menu
    Copy the full SHA
    103def7 View commit details
    Browse the repository at this point in the history

Commits on Mar 15, 2023

  1. Remove malicious .php file at the end of the exploit

    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    0cbebc8 View commit details
    Browse the repository at this point in the history

  2. since file got deleted, one can not trigger the payload anymore by op… 

    …ening the php url
    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    ee0334d View commit details
    Browse the repository at this point in the history

  3. Update open_web_analytics_rce.md to work with latest code changes

    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    cea8aa8 View commit details
    Browse the repository at this point in the history

  4. Fix typo

    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    3bf60a5 View commit details
    Browse the repository at this point in the history

  5. Remove nvd url

    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    d06e2d9 View commit details
    Browse the repository at this point in the history

  6. Set timeout of 1s to make session available much quicker

    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    ac72c12 View commit details
    Browse the repository at this point in the history

  7. Remove unused variable res in check_connection

    @Pflegusch
    Pflegusch committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    027793c View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2023

  1. Add DefangedMode to warn the user

    @Pflegusch
    Pflegusch committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    3baa894 View commit details
    Browse the repository at this point in the history