GitHub PushEvent at 2014-12-01 18:17:11
Repository: metasploit-framework
Actor: jvazquez-r7
Payload: {"shas":[["9d848c8c3ba854c6ff0d8b0be34eb2c7a3009adc","479ddb435c3d6faa175fb0c3601b453e7806a752@floyd.ch","Adding tincd post-auth stack buffer overflow exploit module for several OS\n\nMinor changes to comments\n\nUpdated URLs\n\nAdded Fedora ROP, cleaned up\n\nFixing URLs again, typos\n\nAdded support for Archlinux (new target)\n\nAdded support for OpenSuse (new target)\n\nTincd is now a separate file, uses the TCP mixin/REX sockets.\n\nStarted ARM exploiting\n\nStyle changes, improvements according to egyp7's comments\n\nStyle changes according to sane rubocop messages\n\nRSA key length other than 256 supported. Different key lengths for client/server supported.\n\nDrop location for binary can be customized\n\nRefactoring: Replaced pop_inbuffer with slice\n\nRefactoring: fail_with is called, renamed method to send_recv to match other protocol classes,\nusing rand_text_alpha instead of hardcoded \\x90,\n\nFixed fail command usage\n\nVersion exploiting ARM with ASLR brute force\n\nCleaned up version with nicer program flow\n\nMore elegant solution for data too large for modulus\n\nMinor changes in comments only (comment about firewalld)\n\nCorrect usage of the TCP mixin\n\nFixes module option so that the path to drop the binary on the server is not validated against the local filesystem\n\nAdded comments\n\nMinor edits\n\nSpace removal at EOL according to msftidy","floyd",true],["3c1ce5072cd835c7d4714c1e57e0b49f0438a9d4","479ddb435c3d6faa175fb0c3601b453e7806a752@floyd.ch","Replaced camel case states with snail_case","floyd",true],["91aa5fa3cfd25b5f1f70a902b092c6ca4b60a0d2","479ddb435c3d6faa175fb0c3601b453e7806a752@floyd.ch","Some simple ruby convention changes that hopefully make ruby people happy","floyd",true],["9243cfdbb7fb3f57922727751810c6ad895a6494","479ddb435c3d6faa175fb0c3601b453e7806a752@floyd.ch","Minor fixes to ruby style things","floyd",true],["673e21cfaf8b2ea2c4ccb6fc9b4270a39700619d","d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","Rework meterpreter SSL & pass datastore to handle_connection()\n\nThis allows HandlerSSLCert to be used to pass a SSL certificate into the Meterpreter handler. The datastore has to be passed into handle_connection() for this to work, as SSL needs to be initialized on Session.new. This still doesn't pass the datastore into Meterpreter directly, but allows the Session::Meterpreter code to extract and pass down the :ssl_cert option if it was specified. This also fixes SSL certificate caching by expiring the cached cert from the class variables if the configuration has changed. A final change is to create a new SSL SessionID for each connection versus reusing the SSL context, which is incorrect and may lead to problems in the future (if not already).","HD Moore",true],["8becf417a7ba8584d1557207e2c4b751f5174526","d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","Qualify ::File to prevent a stacktrace","HD Moore",true],["7a3fb1212463f45f23dc0fee2b91079b179a659e","075c8ffbed6afcec2129e7d9562da32e81390288@rapid7.com","Add an OSX privilege escalation from Google's Project Zero.","Joe Vennix",true],["3a5de9970f2f4dadaa86679e23e387231f07bdbb","075c8ffbed6afcec2129e7d9562da32e81390288@rapid7.com","Update description, rename xnu_ver -> osx_ver.","Joe Vennix",true],["f8dc366f42b6a64120e45d8951be4ab276311a56","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","Add CVE-2014-7816 Directory Traversal for WildFly 8 Application","Roberto Soares Espreto",true],["d75ffc36da63348446dcb155326d1a701091691f","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","Changed the description of FILEPATH","Roberto Soares Espreto",true],["335d1ef287f1efc49fe1295125717cdd494ba75c","d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","Only cache auto-generated certificates","HD Moore",true],["c681654c1094436989b432d0e0537aece402ee44","91027b1826ab0fd8b23119d9aa45253c1fb884b2@rapid7.com","Land #4252 - Rework meterpreter SSL & pass datastore to handle_connection()","sinn3r",true],["d77c02fe433e988943035c38fe710e0735f9fb0f","15b648d3c5a437f4e03134d48f4db973e65d39ee@rapid7.com","Delete unnecessary metadata","jvazquez-r7",true],["84ce57322706d43a69826d7423883a5b238ff477","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","Deleted line 61 which returns the server status code.","Roberto Soares Espreto",true],["d7d1b72bce6022f4b899a80686eebaf79ee0dee8","15b648d3c5a437f4e03134d48f4db973e65d39ee@rapid7.com","Rename local_variables","jvazquez-r7",true],["b6306ef7a2038ea42f1eba3a29b148a625f72f26","15b648d3c5a437f4e03134d48f4db973e65d39ee@rapid7.com","Move C source to exploits folder","jvazquez-r7",true],["97ee975235abd13352819266c16d354e748f78f7","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","Deleted checking on line 48.","Roberto Soares Espreto",true],["f3957ea4283c1c7efd1336664f7db4aff7dfc01d","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","FILEPATH changed from false to true.","Roberto Soares Espreto",true],["ecbce679a823a6521c5b6271d2825b5cd461f58f","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","Remove timeout on line 59.","Roberto Soares Espreto",true],["e4b3ee28117cfc2077ca57ea1e69a8fb2684660a","afe3af2afcddc093936c282e9b25f84d49e7c4b4@gmail.com","Changed the module name.","Roberto Soares Espreto",true]],"size":35,"ref":"refs/heads/master","head":"394d132d33d1b87fd54bd1b73b21d7a8822e7095"}