master
Add missing CVEs from VulnCheck
Update info -d markdown
#{rhost}:#{rport} -> #{Rex::Socket.to_authority(rhost, rport)}
Rubocop
Add in RuboCop fixes before final land
Add human-readable descriptions to CheckCode returns in auxiliary and post modules
Fix typos and add dig for safe navigation
lib and spec updates
Updates modules to remove non-printable chars
Adds sentinel notes to modules that are missing stability, reliability or side effects
Runs Rubocop to fix layout in modules
Update check setup methods on http scanners
Fix typos
fix(module): restrict audiobookshelf bypass confirmation to 200/500
azure_ad_login: add context to error message
Update module disclosure dates
Rubocopes cassandra_web_file_read module
Added Cisco ASA ASDM/HTTP brute force module
Added CSRF token support. Fixed an issue with HTTP Keep-Alive :eyes:
Add the peer prefix to messages
improve check routine to account for some responses containing a 200 response with 'Undefined SAML error', this is indicitive of a vulnerable system so we loop and check again. This matches teh run routine, and this 200 error is non determanistic so both the check and the run should match the same logic
move print statement
Update checkcode usage in aux modules
Fix elasticsearch traversal check support
Update rubocop target ruby version
Lint files
Improve auxiliary check code messages
Add a print statement indicating requests are ongoing
Update modules/auxiliary/scanner/http/gitlab_version.rb
WebDAV: MR feedback
Add GHSA and OSV reference type support
review comments
Reimplement password_spray into login modules
Add missing module notes for stability reliability and side effects
Address review: use framework SQLi library
Fix a misspelling
fix(module): distinguish no-response from not-gated in nextjs scanner
Fixed rubocop warnings in ntlm_info_enumeration module
AI review
Updates Python shebangs to Python 3
Fixes modules to now correctly use a hash with report note
add CVEs to modules
Parse the NTLM Type 1 message
style: rubocop auto-corrections + add Notes metadata
Update modules/auxiliary/scanner/http/rpyc_rce.py Renames `system` function to `remote_system`
Updated docs, fixed Notes
Align login scanner APIs
fix some review comments
vicidial sqli module docs update
Add suggestions
Ensure identify hashes helper is accessible to modules
fix spelling in aux modules
update modules for inclusion into wordpress updater
add edb references
Lint
Update modules/auxiliary/scanner/http/wp_ultimate_member_sorting_sqli.rb
Fix rubocop crash
wps_hide_login fixes and notes to other modules
Add authenticated RCE module for FreePBX filestore (CVE-2025-64328)