Commit Graph

25113 Commits

Author SHA1 Message Date
Aaron Ringo 012c8a450f Feedback from PR work cont. changed loop, formatting errors, options 2018-11-08 22:08:11 -06:00
Aaron Ringo adb8be7f9f includes partially implemented feedback from PR 2018-11-08 22:08:11 -06:00
Brendan Coles 18bf58e547 Update modules/exploits/openbsd/local/xorg_x11_suid_server.rb
Co-Authored-By: aringo <ringo.aaron@gmail.com>
2018-11-08 22:08:11 -06:00
Brendan Coles 8c4eb5f741 Update modules/exploits/openbsd/local/xorg_x11_suid_server.rb
Co-Authored-By: aringo <ringo.aaron@gmail.com>
2018-11-08 22:08:11 -06:00
Brendan Coles 84b79e6787 Update modules/exploits/openbsd/local/xorg_x11_suid_server.rb
Co-Authored-By: aringo <ringo.aaron@gmail.com>
2018-11-08 22:08:11 -06:00
Aaron Ringo 7feb960d9b Initial add of Xorg SUID privesc 2018-11-08 22:08:11 -06:00
h00die 3c6f2157ae land #10895 fix vmware_http_login undefined variables 2018-11-07 08:45:51 -05:00
Aaron Ringo 9dd0f2a5ea modified to allow unix cmd for testing and other targets not supported, took out interpolation,notes section re-added
added notes section back in
2018-11-06 20:45:20 -06:00
Jeffrey Martin dd57b27652 Rename hash to generate_process_hash
In the interest of compatibility this uses a more descriptive name for
the process hash creation method instead of overriding ruby's hash method.
See https://docs.ruby-lang.org/en/2.0.0/Hash.html
2018-11-05 17:16:16 -06:00
h00die aff4ef0752 land #10912 moving polycom exploit to misc folder 2018-11-05 16:54:24 -05:00
Shelby Pace 0c38babb9e Land #10874, rm size restriction from pyld_inject 2018-11-05 15:16:40 -06:00
bwatters-r7 f185c06204 Land 10794, Add support for ms17_010_eternalblue_win8 ProcessName option
Merge branch 'land-10794' into upstream-master
2018-11-05 15:08:59 -06:00
bwatters-r7 7ca2311325 Land #10792, Add support for ms17_010_eternalblue ProcessName option
Merge branch 'land-10792' into upstream-master
2018-11-05 14:19:10 -06:00
bwatters-r7 1f0941101f shut up, msftidy 2018-11-05 14:13:33 -06:00
bwatters-r7 4f2ba46125 Stop some of the rubocop carnage 2018-11-05 14:11:24 -06:00
Wei Chen a32d8083f0 Land #10847 - Add blueimp's jQuery (Arbitrary) File Upload
CVE-2018-9206
2018-11-05 11:37:20 -06:00
Brent Cook cb229411bc Land #10888, Fix Net::SSH::CommandStream session open failure 2018-11-05 11:15:09 -06:00
bwatters-r7 5ec155fd44 Changed some options to advanced 2018-11-05 09:59:17 -06:00
Green-m 708d067e65 Land #10919, Add doc for ftp capture module.
And add a custom option banner for it.
2018-11-05 14:15:52 +08:00
l9c ff07289132 better style according to the review 2018-11-05 13:46:36 +08:00
h00die 04218cff39 ftp capture 2018-11-04 21:46:01 -05:00
Brendan Coles fdf45f269b Move polycom_hdx_auth_bypass to exploit/unix/misc/ 2018-11-04 06:14:26 +00:00
Brendan Coles c3080d69f2 Use writable? method for local modules 2018-11-04 05:28:32 +00:00
bwatters-r7 4ac9fe5c9f Land #10834, For real this time
Merge branch 'land-10834' into upstream-master
2018-11-02 14:35:00 -05:00
bwatters-r7 15cc699071 Land #10834, messagebox payload for x64
Merge branch 'land-10834' into upstream-master
2018-11-02 14:17:59 -05:00
Jacob Robles 6bc4b71ca3 Land #10873, Add notes to exploit modules 2018-11-02 14:11:11 -05:00
Spencer McIntyre 7faa775b55 Remove the now unnecessary DisableNops option 2018-11-02 14:57:41 -04:00
Jacob Robles 2d3403cdd2 Land #10901, Add modules for iOS images and texts 2018-11-02 13:46:58 -05:00
Brent Cook 86469cc5a0 Land #10836, Add Morris worm sendmail debug mode exploit 2018-11-02 11:17:33 -05:00
Brent Cook 1d81f3764f Land #10700, Add Morris worm fingerd exploit and VAX reverse shell 2018-11-02 11:16:46 -05:00
pasta 6752bdd536 space's purge 2018-11-02 11:27:53 -03:00
Shelby Pace 0d8c8da470 remove useless method wrappers, fix indentation 2018-11-02 08:01:15 -05:00
William Vu e9b3502f98 Fix Net::SSH::CommandStream session open failure
I suspected this might be a problem for libssh servers.
2018-11-02 01:08:05 -05:00
Shelby Pace 4a8c1ef8f4 changed where pwd was getting executed 2018-11-01 16:06:08 -05:00
Shelby Pace a1abebedd1 changed location of some code 2018-11-01 15:29:53 -05:00
Shelby Pace 2a2b1a47cc updated block size, title 2018-11-01 15:00:38 -05:00
Brendan Coles a80e571355 Update style 2018-11-01 07:26:12 +00:00
Brendan Coles ca16e93200 rescue => e 2018-11-01 07:24:28 +00:00
Brendan Coles ffecd189ee Report rhost, as ip is undefined 2018-11-01 07:23:44 +00:00
bwatters-r7 114a8127e8 Land #10858, bypassuac_eventvwr optimizations - reduce created processes and artifacts
Merge branch 'land-10858' into upstream-master
2018-10-31 16:44:32 -05:00
bwatters-r7 af7a7d586b Add validation check to make sure x64 remote host and a x86 session
cannot select an x64 target.
2018-10-31 16:31:52 -05:00
Shelby Pace 7e61ec53da downloading images by modifying block size 2018-10-31 14:36:45 -05:00
pasta a7bb211c20 add OptEnum to filter icon type 2018-10-30 20:30:49 -03:00
pasta 3fb047c0f1 29 rubocop's issues fixed 2018-10-30 19:47:28 -03:00
Shelby Pace b57b269df4 storing images 2018-10-30 15:43:25 -05:00
pasta c8740a1b0f deleted spaces at EOL 2018-10-30 15:09:39 -03:00
bwatters-r7 08ec8e1ef9 Land #10553, add x86/xor_dynamic and x64/xor_dynamic encoders
Merge branch 'land-10553' into upstream-master
2018-10-30 09:56:15 -05:00
Shelby Pace d1da7d84db added metadata and main function 2018-10-29 15:26:26 -05:00
pasta 4960e1b8c8 modification to accomplish the guideline and license changed to GPL 2018-10-29 14:11:21 -03:00
Elazar Broad 6fe7bb0bb6 Increase sleep time to 10 seconds
Increase the wait time before removing the registry key - allows the payload to spawn successfully on slow systems.
2018-10-29 12:55:03 -04:00