Add butchered version of CVE-2015-1701 #5466

This module isn't using report_auth_info, so this comment is no longer needed.

…ached size

* Fixes bug with Pro Vuln Validation validation pushes

- The refactor left the module using run_batch even though the features of the code that made this desirable were removed (i.e., it was no longer doing one batch per community string). By now switching back to run_host, we can again take advantage of the built-in metasploit multithreading capabilities. - Also, added back in the display of the result.proof field. This aids in identifying false positives (which have a blank response) and is functionality worth keeping.

…n_confusion

…cess.

See rapid7#5480

It should not look like this: ``` meterpreter > ps -h Usage: ps [ options ] OPTIONS: -S Search string to filter by -h This help menu ``` It should not not look like this: ``` meterpreter > ps -h Use the command with no arguments to see all running processes. The following options can be used to filter those results: OPTIONS: -A <opt> Filters processes on architecture (x86 or x86_64) -S <opt> String to search for (converts to regex) -U <opt> Filters processes on the user using the supplied RegEx -h Help menu. -s Show only SYSTEM processes ```

Fix rapid7#5461. The RPC service is incorrectly using the wrong method to stop a job, this patch should fix that.

…rshell

There is no 11.2.202.404, mang.

tmtm/ruby-mysql@353d595 tmtm/ruby-mysql@7c984ea

…ed API

…ew cred API

See https://wpengine.com/unmasked/ for lots more, but this covers the gif at https://wpengine.com/unmasked/assets/images/commonkeyboardpatterns.gif

Default Windows payload to not include_send_uuid for compatibility.

When attempting to update cached payload sizes which utilize the Rex::Powershell functionality, the BRE block which appropriates initial code is called with the 'code' variable being a nil which results in: ``` lib/rex/powershell/script.rb:40:in `initialize': no implicit conversion of nil into String (TypeError) ``` This throws a conditional into the File.open call which presents an empty string instead of a nil. This still results in the rescue block having to catch the exception, but manages to keep the payload size updating script happy an retains consistent behavior.

…ead! msfpayload and msfencode are no longer in metasploit. Please use msfvenom instead. Resolves rapid7#4326

My fault for missing these.

@wchen-r7

Fixes rapid7#4326 Thanks @wchen-r7!

…h renderer)

…ash renderer

…ctory

…erer

… cred API

MSP-12813

…le Upload Vuln

…Read Vulnerability

* Updates MDM to 1.2.2, fixing an issue with AutomaticExploitation::Matches being deleted when module cache reset deletes module_details

MSP-12700 * Fixes issue with web_* data being loaded into memory unnecessarily

msf exploit(ms08_067_netap) > show targets Exploit targets: Id Name -- ---- 0 Automatic Targeting 1 Windows 2000 Universal 2 Windows XP SP0/SP1 Universal 3 Windows 2003 SP0 Universal 4 Windows XP SP2 English (AlwaysOn NX) [...] 62 Windows 2003 SP1 French (NX) 63 Windows 2003 SP2 English (NO NX) [...] 71 Windows 2003 SP2 French (NO NX) 72 Windows 2003 SP2 French (NX)

Empty lines removed at line 624 and line 721.

… take arguments Fixes rapid7#5531

Fix rapid7#5469 - The decryption method for post/windows/gather/credentials/razorsql is outdated

We no longer rely on the Fedora Project's documentation for setting up a PostgreSQL database. The comment doc here should reflect this change.

* Also fixes rapid7#5469

...formatting should be okay still

…support for RFB version 4 servers. Tested on 004.001

The ms14_064_ole_code_execution exploit's ranking is being lowered to GoodRanking because of these two reasons: 1. The vulnerable component isn't in Internet Explorer. And BES can't check it so the exploit still fires even if the target is patched. 2. Although rare, we've seen the exploit crashing IE, and since this is a memory curruption type of bug, it should not be in Excellent ranking anyway.

@espreto

Edited modules/exploits/multi/browser/adobe_flash_pixel_bender_bof.rb first landed in rapid7#5524, adobe_flash_pixel_bender_bof in flash renderer . Removed ASCII bullets since those rarely render correctly. Edited modules/exploits/unix/webapp/wp_frontend_editor_file_upload.rb first landed in rapid7#5252, @espreto's module for WordPress Front-end Editor File Upload Vuln . Fixed up some language usage, camel-cased "WordPress."

Fix rapid7#5565

… API

… the new cred API

…elnet

…ew cred API

…or MS14-064

See rapid7#4525

…to use the new cred API

… MS08-067

….txt

…s deprecated

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add butchered version of CVE-2015-1701 #5466

Add butchered version of CVE-2015-1701 #5466

Commits on May 29, 2015

Commits on Jun 1, 2015

Commits on Jun 2, 2015

Commits on Jun 3, 2015

Commits on Jun 4, 2015

Commits on Jun 5, 2015

Commits on Jun 6, 2015

Commits on Jun 7, 2015

Commits on Jun 8, 2015

Commits on Jun 9, 2015

Commits on Jun 10, 2015

Commits on Jun 11, 2015

Commits on Jun 12, 2015

Commits on Jun 13, 2015

Commits on Jun 15, 2015

Commits on Jun 16, 2015

Commits on Jun 17, 2015

Commits on Jun 18, 2015

Commits on Jun 19, 2015

Commits on Jun 21, 2015