itaymmguardicore
|
9317d0a805
|
Merge pull request #179 from VakarisZ/Struts2_with_framework
Struts2 with framework
|
2018-08-29 15:05:09 +03:00 |
itaymmguardicore
|
aab8f9295e
|
Merge pull request #178 from VakarisZ/WebRCE_Framework
Added functions get_monkey_paths and run_backup_commands
|
2018-08-29 15:01:12 +03:00 |
Vakaris
|
8af2ab70e7
|
Removed unused import statement
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
2295f2c0ab
|
More pythonic and clean way to apply function to url_list
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
84fb96d0de
|
struts built_potential_url's now use map function to save code
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
b07e70855c
|
Refactored struts2 to overload get_exploit_config
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
071535fd01
|
Struts2 refactored to use default_exploit_host function
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
beb8dfed92
|
Struts2 refactored for framework fixes
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
8d7221eada
|
Struts2 core functions
|
2018-08-29 14:42:40 +03:00 |
Vakaris
|
87b0afae88
|
Minor changes in run_backup_commands
|
2018-08-29 14:41:02 +03:00 |
Vakaris
|
592dd27d91
|
Added functions get_monkey_paths and run_backup_commands
|
2018-08-28 20:51:25 +03:00 |
itaymmguardicore
|
dbbb3f143e
|
Merge pull request #172 from VakarisZ/WebRCE_Framework
Changed constructor to have default paths set to None for convienience
|
2018-08-26 11:11:30 +03:00 |
Vakaris
|
bd8423216b
|
Changed constructor to have default paths set to None for convienience
|
2018-08-23 18:35:30 +03:00 |
itaymmguardicore
|
685371a062
|
Merge pull request #168 from VakarisZ/Struts2_with_framework
Struts2 vulnerability with framework
|
2018-08-23 15:08:36 +03:00 |
Vakaris
|
3ff823ab04
|
Removed unused import statement
|
2018-08-23 15:06:58 +03:00 |
Vakaris
|
1c5c010028
|
More pythonic and clean way to apply function to url_list
|
2018-08-23 14:37:31 +03:00 |
Vakaris
|
ef4eadf64a
|
struts built_potential_url's now use map function to save code
|
2018-08-23 13:51:11 +03:00 |
itaymmguardicore
|
fc2929ed2e
|
Merge pull request #159 from VakarisZ/WebRCE_Framework
Web rce framework
|
2018-08-22 16:46:48 +03:00 |
Vakaris
|
df4b1268d1
|
Refactored struts2 to overload get_exploit_config
|
2018-08-22 16:08:38 +03:00 |
Vakaris
|
9ef44ef71f
|
Struts2 refactored to use default_exploit_host function
|
2018-08-22 16:07:59 +03:00 |
Vakaris
|
6cb058eb1d
|
Struts2 refactored for framework fixes
|
2018-08-22 16:07:39 +03:00 |
Vakaris
|
bbd4adf2ae
|
Struts2 core functions
|
2018-08-22 16:07:39 +03:00 |
Vakaris
|
3e7d7425e4
|
made get_exploit_config non-static for readability
|
2018-08-22 16:01:16 +03:00 |
Vakaris
|
e1b1236fb3
|
Comments and CR notes fixed
|
2018-08-22 13:41:17 +03:00 |
Vakaris
|
eae3f3440d
|
Refactored exploit_host and added get_exploit_config
|
2018-08-22 13:33:36 +03:00 |
Vakaris
|
911404ef68
|
Implemented default_exploit_host method that can implement whole framework's workflow according to some flags/params
|
2018-08-21 12:34:59 +03:00 |
Itay Mizeretz
|
203943bf27
|
Merge remote-tracking branch 'origin/master' into develop
|
2018-08-21 11:34:59 +03:00 |
itaymmguardicore
|
b56dec318e
|
Merge pull request #166 from guardicore/hotfix/fix-dep-security-vul
Hotfix/fix dep security vul
|
2018-08-20 14:43:29 +03:00 |
Vakaris
|
e3d286dbc0
|
Minor bugfix for error handling in new custom monkey destination paths feature
|
2018-08-18 13:14:05 +03:00 |
Vakaris
|
5565a80418
|
Web_RCE framework now supports custom monkey uploading paths( we don't always have permissions to uppload to C:\Windows)
|
2018-08-17 13:53:09 +03:00 |
Itay Mizeretz
|
6e7706f9bf
|
Fix bug which is now critical
|
2018-08-16 18:55:29 +03:00 |
Itay Mizeretz
|
5724d14583
|
Fix webpack lookup issue
|
2018-08-16 18:30:51 +03:00 |
Itay Mizeretz
|
422df7c71f
|
Replace deprecated modal component
|
2018-08-16 18:30:26 +03:00 |
Itay Mizeretz
|
a65721d0c5
|
Fix known bug necessary for building
|
2018-08-16 17:09:23 +03:00 |
Itay Mizeretz
|
b8dd37c5df
|
Temprarily comment out broken component
|
2018-08-16 17:08:34 +03:00 |
Itay Mizeretz
|
2a393d6ed5
|
Upgrade npm packages and make required modifications
|
2018-08-16 17:08:03 +03:00 |
Vakaris
|
b8bda692b9
|
Notes fixed v.2
|
2018-08-15 16:01:27 +03:00 |
Vakaris
|
0d45a44d6b
|
Final, tested framework fixes
|
2018-08-10 15:07:56 +03:00 |
Vakaris
|
5232d84e06
|
Almost all notes fixed, but nothing tested.
|
2018-08-09 16:52:15 +03:00 |
Vakaris
|
d1a29872c4
|
Fixed half of the notes and added a small tcp_port_to_service method in network/tools
no message
|
2018-08-09 12:13:44 +03:00 |
maor.rayzin
|
44ee74aaca
|
* Added a coverage for the force connection closing in the mssql fingerprinter.
(cherry picked from commit 782ced912d )
|
2018-08-08 16:48:51 +03:00 |
Vakaris
|
8e684a3fad
|
Bugfix: model.__init__ changed( I forgot to add the file to the branch) and server lock is not a singleton anymore
|
2018-08-07 17:44:31 +03:00 |
Vakaris
|
3f8d63c2d9
|
Timeout of joining set to 5 seconds. No use of waiting for another thread to stop. We can run our program while the thread stops
|
2018-08-04 13:01:19 +03:00 |
Vakaris
|
40957f865c
|
Struts2 compatability fix
|
2018-07-19 13:04:52 +03:00 |
Vakaris
|
68d949c655
|
Web RCE framework core files/changes
|
2018-07-19 12:33:44 +03:00 |
Daniel Goldberg
|
3e1edeac61
|
Merge pull request #156 from VakarisZ/dropper_samefile_fix
Dropper bug fix
|
2018-07-18 20:53:52 +03:00 |
Vakaris
|
d78e81db06
|
Changed to a better file comparison function
|
2018-07-18 20:48:15 +03:00 |
Vakaris
|
dfecc6d6ac
|
os.path.samefile does not work on windows. My code checks if files handlers are the same instead
|
2018-07-18 12:44:19 +03:00 |
Daniel Goldberg
|
ae4227731c
|
Merge pull request #155 from guardicore/bugfix/remove_ftp_server
Remove FTP server from infra
|
2018-07-18 10:50:31 +03:00 |
Daniel Goldberg
|
d853e02693
|
Remove FTP server from infra
New FTP server will come from pyftp
|
2018-07-17 13:08:08 +03:00 |