 bwatters
|
2c1869f9df
|
Land #14907, Add exploit for CVE-2021-1732
Merge branch 'land-14907' into upstream-master
|
2021-03-18 14:29:59 -05:00 |
|
|
Spencer McIntyre
|
0bff88c0c0
|
Update the module metadata and add module docs
|
2021-03-16 10:40:34 -04:00 |
|
|
bwatters
|
ae5d31cb39
|
Land # 14776, Add Window Server 2012 SrClient DLL Hijacking local exploit module
Merge branch 'land-14776' into upstream-master
|
2021-03-15 14:34:35 -05:00 |
|
|
kalba-security
|
98c04eae6c
|
Remove TODO comment, update documentaton to include WAIT_FOR_TIWORKER option.
|
2021-03-15 07:51:12 -04:00 |
|
|
Alan Foster
|
9a92ac87a1
|
Ensure documentation files have md extension
|
2021-03-15 10:24:50 +00:00 |
|
|
Grant Willcox
|
8dce1acd64
|
Land #14794, dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-03-12 12:07:57 -06:00 |
|
|
Shelby Pace
|
fbd6f19d04
|
Land #14846, add HPE SIM unauth AMF deser rce
|
2021-03-08 16:50:49 -06:00 |
|
|
Grant Willcox
|
514d46bd4d
|
Rubocop module again and also update the documentation to reflect recent changes
|
2021-03-08 16:08:36 -06:00 |
|
|
Grant Willcox
|
59d7288773
|
RuboCop module and fix small spelling mistake in documentation
|
2021-03-04 18:48:19 -06:00 |
|
|
Grant Willcox
|
f193caa48e
|
Also make sure that the default option is to use Windows Powershell since this supports Meterpreter and is generally a lot more reliable
|
2021-03-04 18:40:21 -06:00 |
|
|
Grant Willcox
|
3ef8fcd996
|
Update module to fix an extra print statement and write documentation
|
2021-03-03 10:14:41 -06:00 |
|
|
Brendan Coles
|
3da8fce9cf
|
Add Microsoft Windows RRAS Service MIBEntryGet Overflow
|
2021-03-03 02:50:42 +00:00 |
|
|
Brendan Coles
|
743248d993
|
Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module
|
2021-02-25 20:53:30 +00:00 |
|
|
Brendan Coles
|
f89d67df19
|
dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-02-25 17:14:25 +00:00 |
|
|
kalba-security
|
68d4b197fa
|
Add SrClient DLL Hijacking local exploit module and docs
|
2021-02-18 13:50:28 -05:00 |
|
|
A Galway
|
f227e82600
|
Land #14730, OBM Local PrivEsc to SYSTEM
|
2021-02-15 10:24:34 +00:00 |
|
|
Spencer McIntyre
|
77cc799974
|
Fix a target version discrepancy in the CVE-2020-17132 docs
|
2021-02-11 18:04:03 -05:00 |
|
|
Christophe De La Fuente
|
88eaf97e79
|
Land #14607, Updates for Exchange ECP DLP Policy Exploit
|
2021-02-11 15:15:34 +01:00 |
|
|
Pedro Ribeiro
|
d884df96e2
|
fix msftidy docs
|
2021-02-09 14:37:35 +07:00 |
|
|
Pedro Ribeiro
|
90f8c1f7b9
|
add tested for 2019.11 too
|
2021-01-30 21:54:48 +07:00 |
|
|
Pedro Ribeiro
|
137664818d
|
add obm windows privesc sploit
|
2021-01-29 18:45:33 +07:00 |
|
|
JulienBedel
|
8f6dd43025
|
Add documentation
|
2021-01-18 12:02:46 +01:00 |
|
|
Christophe De La Fuente
|
c8819259ae
|
Land #14414, CVE-2020-1337 - patch bypass for CVE-2020-1048
|
2021-01-15 19:13:14 +01:00 |
|
|
Spencer McIntyre
|
7936ce8b5e
|
Update the documentation with additional information
|
2021-01-13 09:53:10 -05:00 |
|
|
bwatters
|
d8e68e6487
|
Specify you must be SYSTEM for dll removal in docs and removed unused variable in the module
|
2021-01-12 11:45:53 -06:00 |
|
|
Spencer McIntyre
|
33bd712e0a
|
Land #14585, Create module for CVE-2020-17136: Cloud Filter Arbitrary File Creation EoP
|
2021-01-11 17:16:40 -05:00 |
|
|
bwatters
|
50e115b414
|
Cleanup and edits per review from Christophe
Removed unused method from ps script
Cleaned up some code in the module
Added removal instructions to the documentation
|
2021-01-11 16:02:58 -06:00 |
|
|
Grant Willcox
|
3072391d00
|
Make second round of review edits to fix Spencer's comments
|
2021-01-08 12:50:52 -06:00 |
|
|
Grant Willcox
|
3e52debd8b
|
Update the exploit a bit more to remove excess options and also update the documentation accordingly.
|
2021-01-06 12:16:06 -06:00 |
|
|
Christophe De La Fuente
|
17c393f101
|
Land #14046, Adding juicypotato-like privilege escalation exploit for windows
|
2021-01-06 16:02:05 +01:00 |
|
|
Grant Willcox
|
863417fca7
|
Second round of updates and some rubocop changes to conform to standards.
|
2021-01-06 01:30:40 -06:00 |
|
|
Grant Willcox
|
81ee149ea2
|
Add check code support to module and update the documentation accordingly, plus rework the module description
|
2021-01-06 01:06:08 -06:00 |
|
|
bwatters
|
d2ca5d331d
|
Add documentation
|
2020-12-22 14:14:20 -06:00 |
|
|
C4ssandre
|
57c57a398d
|
Adding new check to filter out Windows 7 and Windows XP. Indeed, lab experiments has shown that BITS does not attempt to connect to WinRM port, making those systems not vulnerable.
|
2020-12-19 02:51:48 +01:00 |
|
|
Tim W
|
a30cdfc892
|
Fix #14254, Add CVE-2020-1054, win32k DrawIconEx OOB Write LPE
|
2020-12-14 14:54:54 +00:00 |
|
|
C4ssandre
|
e02451fe13
|
Fixing mistake in doc.
|
2020-12-11 04:53:37 -05:00 |
|
|
C4ssandre
|
9c9e8929af
|
Adding a scenario.
|
2020-12-11 04:50:53 -05:00 |
|
|
C4ssandre
|
53a12a7984
|
Updating doc.
|
2020-12-11 03:53:25 -05:00 |
|
|
Brendan Coles
|
a9e231ad0a
|
Use CVE-2020-5752 path traversal bypass for CVE-2019-3999
|
2020-12-10 12:14:47 +00:00 |
|
|
C4ssandre
|
c005492ee9
|
Updating doc.
|
2020-12-10 00:58:53 -05:00 |
|
|
Tim W
|
fb9b1c5de4
|
Land #14409, add weak services technique to the service permissions LPE
|
2020-12-09 17:16:53 +00:00 |
|
|
Spencer McIntyre
|
6d7c6c054a
|
Update the module docs with more details for the registry technique
|
2020-12-08 17:39:34 -05:00 |
|
|
C4ssandre
|
c86f93b9c0
|
Updating list of tested machines.
|
2020-12-07 21:38:42 -05:00 |
|
|
Shelby Pace
|
8e1cab0131
|
Land #14339, add flexdotnetcms rce
|
2020-12-07 14:28:01 -06:00 |
|
|
C4ssandre
|
f901e91d70
|
Fixing markdown content and formatting issues. Markdown is not yet complete and will need additional modification when other changes will be brought to ruby module and C dll.
|
2020-11-30 14:12:57 +00:00 |
|
|
Spencer McIntyre
|
1031b12c57
|
Land #14206, Rockwell FactoryTalk CVE-2020-12027 RCE
|
2020-11-20 08:49:39 -05:00 |
|
|
Spencer McIntyre
|
cbc5899edf
|
Add module docs for the Service Permissions LPE module
|
2020-11-19 14:17:20 -05:00 |
|
|
Pedro Ribeiro
|
e7196256d4
|
Update rockwell_factorytalk_rce.md
|
2020-11-19 17:53:25 +07:00 |
|
|
William Vu
|
20a90557bf
|
Update module doc
|
2020-11-18 15:08:12 -06:00 |
|
|
kalba-security
|
0a9589166f
|
Add CVE ID
|
2020-11-05 06:55:37 -05:00 |
|