1. 08 May, 2018 4 commits
  2. 07 May, 2018 6 commits
  3. 06 May, 2018 5 commits
  4. 03 May, 2018 1 commit
  5. 28 Apr, 2018 1 commit
  6. 27 Feb, 2018 1 commit
  7. 24 Feb, 2018 1 commit
  8. 22 Feb, 2018 1 commit
  9. 05 Feb, 2018 1 commit
  10. 28 Jan, 2018 2 commits
  11. 14 Jan, 2018 2 commits
  12. 14 Nov, 2017 1 commit
  13. 10 Nov, 2017 1 commit
    • Rom-0 exploit - check error (#342) · f8f7d65e
      The HTTP HEAD method in general doesn't return the content of the body, unless it is a redirection page, so line `and len(response.text) > 500:` will never be true if second line of check `response = http_request(method="HEAD", url=url)` get a response.
      
      As result, devices seem no vulnerable when actually it is.
      
      Data:
      ```
      HEAD /rom-0 HTTP/1.1
      Host: 192.168.254.254
      Connection: keep-alive
      Accept-Encoding: gzip, deflate
      Accept: */*
      User-Agent: python-requests/2.18.4
      
      
      HTTP/1.1 200 OK
      Content-Type: application/octet-stream
      Date: Sat, 01 Jan 2000 00:18:54 GMT
      Last-Modified: Wed, 01 Jan 1930 00:18:54 GMT
      Content-Length: 16384
      Server: RomPager/4.07 UPnP/1.0
      EXT:
      ```
      
      My suggestion is just to check whether content type doesn't return "text/html" as value, so it correct this issue and keep the previous false positive fixed.
      
      `and "html" not in response.headers['Content-Type']:`
      or
      `and response.headers['Content-Type'] == "application/octet-stream":
      
      That'is it.
      Alex Hilgert authored
  14. 25 Oct, 2017 3 commits
  15. 24 Oct, 2017 1 commit
  16. 23 Oct, 2017 1 commit
  17. 21 Oct, 2017 2 commits
    • Refactor tests (#332) · bbbf7911
      * Move tests to tests/ directory
      * Remove unused `tox.ini` file
      * Add flake8 compliance
      * Add `lint` target to `tests` target in the Makefile
      Mariusz Kupidura authored
    • Refactor `payloads` API (#331) · 550bcf44
      
      
      * Refactor payloads.
      
      * Payloads handlers (#325)
      
      * Multiple payloads support
      
      * RHost for bind shell
      
      * Fixing payloads
      
      * Validating parameters
      
      * Architecture parameter
      
      * Fixing payloads
      
      * Fix pep
      
      * Fixing tests
      
      * Fixing ident
      
      * Payload handlers
      
      * Removing old payloads
      
      * Removing default target/port
      
      * Fixing payloads, refactoring
      
      * Fixing pep
      
      * Changing payloads names
      
      * Adding wget and echo options
      
      * Parameter validation
      
      * Removing testing modules
      
      * Refactor payload vol. 2
      
      * Remove `ArchitectureHeader`.
      
      * Put PayloadHandler mixins first in MRO.
      
      * Add `ExploitOptionsAggregator` metaclass to mixins.
      
      * Fix payload completion.
      
      * Remove validate_template from shell()
      
      * Fix tests.
      
      * Fix flake8 violations.
      
      * Adding validation
      
      * Adding support for generic payloads
      
      * Add meaningful error message.
      Mariusz Kupidura authored
  18. 14 Oct, 2017 1 commit
  19. 13 Oct, 2017 1 commit
  20. 08 Oct, 2017 3 commits
  21. 06 Oct, 2017 1 commit
    • Payloads (#322) · 1d37006f
      * Multiple payloads support
      
      * RHost for bind shell
      
      * Fixing payloads
      
      * Validating parameters
      
      * Architecture parameter
      
      * Fixing payloads
      
      * Fix pep
      
      * Fixing tests
      
      * Fixing ident
      Marcin Bury authored