- 08 May, 2018 4 commits
-
-
lucyoa authored
-
lucyoa authored
-
* Adding travis * Fixing .travis.yml
Marcin Bury authored -
Marcin Bury authored
-
- 07 May, 2018 6 commits
-
-
Marcin Bury authored
-
Marcin Bury authored
-
Marcin Bury authored
-
Marcin Bury authored
-
Marcin Bury authored
-
DIR-300 B1 with firmware 2.02 may have '\nuser' after admin password.
Maccheroni authored
-
- 06 May, 2018 5 commits
-
-
Marcin Bury authored
-
Marcin Bury authored
-
Marcin Bury authored
-
Marcin Bury authored
-
* Bump v3.0.0 * Adding Slack invitation link
Marcin Bury authored
-
- 03 May, 2018 1 commit
-
-
lucyoa authored
-
- 28 Apr, 2018 1 commit
-
-
Marcin Bury authored
-
- 27 Feb, 2018 1 commit
-
-
Introduce `Exploit.validate_setup` method in order to check whether Exploit's setup is correct. In most case scanarios we will check if `Exploit.target` is not `None`. When exploit need custom validation logic please overwrite `validate_setup`.
Mariusz Kupidura authored
-
- 24 Feb, 2018 1 commit
-
-
Mariusz Kupidura authored
-
- 22 Feb, 2018 1 commit
-
-
Mariusz Kupidura authored
-
- 05 Feb, 2018 1 commit
-
-
LGTM
Mariusz Kupidura authored
-
- 28 Jan, 2018 2 commits
-
-
CentOS installation instructions were not complete
Pablo Hinojosa authored -
Add juniper defaults
Alexey Mozzhakov authored
-
- 14 Jan, 2018 2 commits
- 14 Nov, 2017 1 commit
-
-
* Router detected as vulnerable while its not #305 * Fixed typo error * Check status code instead of string
Alex Hilgert authored
-
- 10 Nov, 2017 1 commit
-
-
The HTTP HEAD method in general doesn't return the content of the body, unless it is a redirection page, so line `and len(response.text) > 500:` will never be true if second line of check `response = http_request(method="HEAD", url=url)` get a response. As result, devices seem no vulnerable when actually it is. Data: ``` HEAD /rom-0 HTTP/1.1 Host: 192.168.254.254 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: */* User-Agent: python-requests/2.18.4 HTTP/1.1 200 OK Content-Type: application/octet-stream Date: Sat, 01 Jan 2000 00:18:54 GMT Last-Modified: Wed, 01 Jan 1930 00:18:54 GMT Content-Length: 16384 Server: RomPager/4.07 UPnP/1.0 EXT: ``` My suggestion is just to check whether content type doesn't return "text/html" as value, so it correct this issue and keep the previous false positive fixed. `and "html" not in response.headers['Content-Type']:` or `and response.headers['Content-Type'] == "application/octet-stream": That'is it.
Alex Hilgert authored
-
- 25 Oct, 2017 3 commits
-
-
lucyoa authored
-
* Create multi_hedwig_cgi_exec.py * update to proper format * remove whitespace * remove u
Austin authored -
* Fixing payloads * Pep fixes
Marcin Bury authored
-
- 24 Oct, 2017 1 commit
-
-
fwkz authored
-
- 23 Oct, 2017 1 commit
-
-
* Adding timeouts * Adding exceptions * Fixing E741
Marcin Bury authored
-
- 21 Oct, 2017 2 commits
-
-
* Move tests to tests/ directory * Remove unused `tox.ini` file * Add flake8 compliance * Add `lint` target to `tests` target in the Makefile
Mariusz Kupidura authored -
* Refactor payloads. * Payloads handlers (#325) * Multiple payloads support * RHost for bind shell * Fixing payloads * Validating parameters * Architecture parameter * Fixing payloads * Fix pep * Fixing tests * Fixing ident * Payload handlers * Removing old payloads * Removing default target/port * Fixing payloads, refactoring * Fixing pep * Changing payloads names * Adding wget and echo options * Parameter validation * Removing testing modules * Refactor payload vol. 2 * Remove `ArchitectureHeader`. * Put PayloadHandler mixins first in MRO. * Add `ExploitOptionsAggregator` metaclass to mixins. * Fix payload completion. * Remove validate_template from shell() * Fix tests. * Fix flake8 violations. * Adding validation * Adding support for generic payloads * Add meaningful error message.
Mariusz Kupidura authored
-
- 14 Oct, 2017 1 commit
-
-
jabedude authored
-
- 13 Oct, 2017 1 commit
-
-
jabedude authored
-
- 08 Oct, 2017 3 commits
-
-
Mariusz Kupidura authored
-
Remove unnecessary `run_tests.sh` and `run_linter.sh` scripts, and move logic directly to Makefile. (#327)
Mariusz Kupidura authored -
Add base layer with installing requirements to shorten build time. Add .dockerignore to reduce amount of files to copy. Remove unnecessary `run_docker.sh` script.
Mariusz Kupidura authored
-
- 06 Oct, 2017 1 commit
-
-
* Multiple payloads support * RHost for bind shell * Fixing payloads * Validating parameters * Architecture parameter * Fixing payloads * Fix pep * Fixing tests * Fixing ident
Marcin Bury authored
-