Spencer McIntyre
0ccb50ac02
Adjust how HostingCLR arguments are packed
2020-11-09 12:24:55 -05:00
b4rtik
ddd9af83b9
Update
2020-10-29 22:49:41 +01:00
b4rtik
9779bbef77
Fix parameter managing
...
Fix a problem running assemblies with Main signature (string[] args) and no passed parameters
2020-10-23 21:14:10 +02:00
Tim W
12c5f4f916
CVE-2019-1458 chrome sandbox escape initial commit
2020-10-15 10:57:46 -05:00
bwatters
e24a81919a
Land #13996 , Add module for CVE-2020-9801, CVE-2020-9850 and CVE-2020-9856,
...
RCE for Safari on macOS 10.15.3 (pwn2own2020)
Merge branch 'land-13996' into upstream-master
2020-10-01 09:46:39 -05:00
Shelby Pace
f0f4da2b1e
Land #14157 , Windows update orchestrator privesc
2020-09-25 16:07:27 -05:00
bwatters
7e68c42876
Rubocop, fix check method, clean up c code
2020-09-22 07:45:02 -05:00
bwatters
534e945cd0
First attempt at CVE-2020-1313
2020-09-18 15:39:12 -05:00
bwatters
a2edcda819
Rubocop on module and update error handling on exploit C code + recompile
2020-09-16 11:17:39 -05:00
bwatters
fe59099678
Clean up C code, add support for x86 targets
2020-09-16 11:17:39 -05:00
bwatters
a72769909b
Change exe to take destination and source files for copy
2020-09-16 11:17:39 -05:00
bwatters
17272209cc
First try at CVE-2020-1048, needs lots of work
2020-09-16 11:17:38 -05:00
bwatters
e592736833
Land #13992 , Add module for CVE-2020-9839, LPE for macOS <= 10.15.4
...
Merge branch 'land-13992' into upstream-master
2020-09-04 15:53:17 -05:00
Tim W
301754c648
remove CMakeLists.txt
2020-09-01 17:14:21 +08:00
Tim W
b0864e17cc
fix WebKit build
2020-08-27 20:06:02 +08:00
Tim W
33fa4d1424
dynamic offsets
2020-08-27 19:36:45 +08:00
Tim W
52fb91f2ba
move loader offsets to offset table
2020-08-27 19:36:45 +08:00
Tim W
a94389fb76
cleanup cvm_side
2020-08-27 19:36:45 +08:00
Tim W
6bd8fb14d0
fix offsets for 10.15.3 and 10.15.4
2020-08-27 19:36:45 +08:00
Tim W
c7d0a1b2a8
add offsets for 10.15.4
2020-08-27 19:36:45 +08:00
Tim W
0a1fb600a2
fix source versions and jscell headers
2020-08-27 19:36:45 +08:00
Tim W
53b2db78a0
getroot -> make writable
2020-08-18 16:18:38 +08:00
Tim W
e65e7e21f2
fix newlines and cleanup
2020-08-18 15:56:05 +08:00
Tim W
0e4fcd7379
CVE-2020-9839
2020-08-18 15:56:01 +08:00
h00die
cd41d9c3c9
Land #13911 , iphone 4 on ios 7.1.2 safari jit for root
2020-08-14 16:01:14 -04:00
Tim W
b5e465641b
CVE-2020-9850 external source
2020-08-14 16:10:40 +08:00
Tim W
0b513d6c51
remove debug logging from the kernel exploit
2020-07-30 18:10:26 +08:00
Tim W
79adcf7904
Add module for iOS 7.1.2
2020-07-27 15:05:31 +08:00
Jeffrey Martin
65039a5091
Merge upstream into 6.x
2020-07-15 09:58:07 -05:00
Spencer McIntyre
e8ce6cf2f3
Fix up some comments in the x64 block_api source code
2020-07-09 14:02:12 -04:00
Spencer McIntyre
1537d3f193
Update the block_api assembly source files
...
This changes the x86 version to the (10 bytes) larger variant that can
handle full 32-bit jumps which is necesary for maximum compatibility
within the framwork.
Additionally, numeric literals are expressed in hex for compatibility
with the keystone assembler allowing these files to be compatitble with
external tools.
2020-07-08 15:28:41 -04:00
gwillcox-r7
df1a9c7fdb
Add ZSH autocomplete features per @smcintyre-r7's request
2020-06-12 10:44:50 -05:00
gwillcox-r7
586971428a
Recompile everything so we don't have the messagebox calls
2020-06-11 00:18:45 -05:00
gwillcox-r7
93b28e662e
Change out template_dll solution files so that it generates the DLL with the correct name and in the correct location
2020-06-10 11:41:34 -05:00
gwillcox-r7
4a9c878132
Finally fix up the hanging issue via new template DLLs and associated code
2020-06-10 11:02:53 -05:00
gwillcox-r7
cb20eaf6f9
Finally fix the issue with the cleanup of the files within the exploit
2020-06-10 11:02:51 -05:00
gwillcox-r7
a5220d3155
One last time to add files cause I messed up last time
2020-06-10 11:02:51 -05:00
gwillcox-r7
06019585e8
Woops forgot source files last time, lets add those in
2020-06-10 11:02:50 -05:00
gwillcox-r7
dc060de7a9
Add initial upload of the source code
2020-06-10 11:02:48 -05:00
Spencer McIntyre
859f0c6f6a
Remove the RDLL header template file
2020-05-08 09:32:35 -04:00
Spencer McIntyre
5eff81296c
Update the README file with more documentation
2020-05-07 15:38:04 -04:00
Spencer McIntyre
4e8235923c
Create the structure for the RDLL Visual Studio structure
2020-05-07 12:20:52 -04:00
Spencer McIntyre
9769e04b6e
Land #13322 , CVE-2020-0668 Service tracing file junction overwrite
2020-05-07 09:47:20 -04:00
gwillcox-r7
a1275845ec
Land #13200 , CVE-2019-0808 LPE for Windows 7 x86 SP0 and SP1
2020-05-06 17:23:52 -05:00
gwillcox-r7
1c79674620
Recompile DLL and alter vcxproj file to automatically place generated DLL in right folder
2020-05-06 16:33:01 -05:00
gwillcox-r7
1325c28ebd
Fix typo in dllmain.cpp
2020-05-06 15:44:02 -05:00
gwillcox-r7
ea3bba96e2
Apply lots of review fixes to dllmain.cpp
2020-05-06 13:14:50 -05:00
bwatters-r7
a0213a13f0
Land #13279 , Some fix for rubocop verification
...
Merge branch 'land-13279' into upstream-master
2020-05-01 13:49:14 -05:00
Tim W
27147aa23b
add error checking to VirtualAlloc
2020-05-01 19:02:21 +08:00
Tim W
8e9a162b1b
fix
2020-04-30 18:05:00 +08:00