Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add module and documentation for Subrion CMS v4.2.1 RCE #18211

Merged
merged 23 commits into from
Aug 3, 2023
Merged

Add module and documentation for Subrion CMS v4.2.1 RCE #18211

merged 23 commits into from
Aug 3, 2023

Commits on Jul 21, 2023

  1. Add module and documentation for Subrion CMS v4.2.1 RCE

    @ismaildawoodjee
    ismaildawoodjee committed Jul 21, 2023
    Configuration menu
    Copy the full SHA
    4e16307 View commit details
    Browse the repository at this point in the history

Commits on Jul 24, 2023

  1. Add scenario for Ubuntu 20.04

    @ismaildawoodjee
    ismaildawoodjee committed Jul 24, 2023
    Configuration menu
    Copy the full SHA
    568849f View commit details
    Browse the repository at this point in the history

  2. Update modules/exploits/linux/http/subrion_cms_file_upload_rce.rb 

    Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
    @ismaildawoodjee @cdelafuente-r7
    ismaildawoodjee and cdelafuente-r7 committed Jul 24, 2023
    Configuration menu
    Copy the full SHA
    a709c4c View commit details
    Browse the repository at this point in the history

Commits on Jul 25, 2023

  1. Fix issues with msftidy_docs.rb

    @ismaildawoodjee
    ismaildawoodjee committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    3ce382d View commit details
    Browse the repository at this point in the history

  2. Merge branch 'subrion_cms_file_upload_rce' of github.com:ismaildawood… 

    …jee/metasploit-framework into subrion_cms_file_upload_rce
    @ismaildawoodjee
    ismaildawoodjee committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    e2a0405 View commit details
    Browse the repository at this point in the history

  3. Use full_uri instead of piecing together a full URI

    @ismaildawoodjee
    ismaildawoodjee committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    e9f53bd View commit details
    Browse the repository at this point in the history

  4. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    78c1f75 View commit details
    Browse the repository at this point in the history

  5. Put checks for website requests and change failure message

    @ismaildawoodjee
    ismaildawoodjee committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    671a90e View commit details
    Browse the repository at this point in the history

  6. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Jul 25, 2023
    Configuration menu
    Copy the full SHA
    867282b View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2023

  1. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Jul 26, 2023
    Configuration menu
    Copy the full SHA
    7ad7c40 View commit details
    Browse the repository at this point in the history

  2. Use full_uri for the payload URI

    @ismaildawoodjee
    ismaildawoodjee committed Jul 26, 2023
    Configuration menu
    Copy the full SHA
    b7b1137 View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2023

  1. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Jul 27, 2023
    Configuration menu
    Copy the full SHA
    f3e1fcc View commit details
    Browse the repository at this point in the history

Commits on Jul 28, 2023

  1. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Jul 28, 2023
    Configuration menu
    Copy the full SHA
    c4d089b View commit details
    Browse the repository at this point in the history

  2. Change parsing method for version number

    @ismaildawoodjee
    ismaildawoodjee committed Jul 28, 2023
    Configuration menu
    Copy the full SHA
    06db7da View commit details
    Browse the repository at this point in the history

  3. Use uri variable instead of hardcoding it 

    Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
    @ismaildawoodjee @cdelafuente-r7
    ismaildawoodjee and cdelafuente-r7 committed Jul 28, 2023
    Configuration menu
    Copy the full SHA
    207d00b View commit details
    Browse the repository at this point in the history

  4. Use uri variable instead of hardcoding it - 2nd instance 

    Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
    @ismaildawoodjee @cdelafuente-r7
    ismaildawoodjee and cdelafuente-r7 committed Jul 28, 2023
    Configuration menu
    Copy the full SHA
    aeb8cd3 View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2023

  1. Add additional installation instructions and scenarios

    @ismaildawoodjee
    ismaildawoodjee committed Jul 30, 2023
    Configuration menu
    Copy the full SHA
    154387f View commit details
    Browse the repository at this point in the history

Commits on Aug 1, 2023

  1. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Aug 1, 2023
    Configuration menu
    Copy the full SHA
    11fb61c View commit details
    Browse the repository at this point in the history

Commits on Aug 2, 2023

  1. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Aug 2, 2023
    Configuration menu
    Copy the full SHA
    888091d View commit details
    Browse the repository at this point in the history

  2. Move module and documentation from linux/http to multi/http

    @ismaildawoodjee
    ismaildawoodjee committed Aug 2, 2023
    Configuration menu
    Copy the full SHA
    19dcc2d View commit details
    Browse the repository at this point in the history

Commits on Aug 3, 2023

  1. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Aug 3, 2023
    Configuration menu
    Copy the full SHA
    1c075f6 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Aug 3, 2023
    Configuration menu
    Copy the full SHA
    31da1f8 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'rapid7:master' into subrion_cms_file_upload_rce

    @ismaildawoodjee
    ismaildawoodjee committed Aug 3, 2023
    Configuration menu
    Copy the full SHA
    74e886d View commit details
    Browse the repository at this point in the history