William Vu
50f89321a0
Land #11419 , systemd user service persistence
2019-03-06 01:39:58 -06:00
William Vu
31ba073009
Add per-target SHELLPATH defaults
2019-03-06 00:07:17 -06:00
William Vu
c539951311
Clean up method
2019-03-05 23:17:34 -06:00
terrorbyte
24fa3a367d
Added directory creation to all the paths from systemd.unit(5)
2019-02-25 23:40:30 -06:00
terrorbyte
f6a402c999
Fix tabs in the previous commit and fix style issues.
2019-02-25 21:24:13 -06:00
terrorbyte
449307c7df
Additional style fixes
2019-02-20 15:33:33 -06:00
terrorbyte
364460a787
Fixed heredoc and advanced options casing.
2019-02-20 14:42:56 -06:00
terrorbyte
99ae0d125f
Added systemd lower privlege service persistence
...
Update the module to support systemd --user as a target for the
service_persistence module. This creates a file in a set of "supported"
local directories and triggers the systemctl calls with --user. The unit
files in question can be seen documented in systemd.unit(5)
2019-02-15 15:04:03 -06:00
Wei Chen
a380bb6df1
Land #11239 , Add check for writable and nosuid WritableDir
2019-02-08 19:14:54 -06:00
Shelby Pace
2ae6142de7
Land #11243 , Add ASan SUID Privesc
2019-01-22 15:50:53 -06:00
Brendan Coles
060d20694d
Attribution
2019-01-20 09:18:43 +00:00
h00die
a73fe9433b
land #11169 blueman priv esc on linux
2019-01-15 10:32:46 -05:00
bcoles
8c636f27d5
Update check method to confirm vulnerability
2019-01-15 11:31:31 +11:00
Brendan Coles
c6f4eda7f9
Add ASan SUID Executable Privilege Escalation module
2019-01-12 09:14:20 +00:00
Brendan Coles
fe6956d7f7
Use mixins
2019-01-11 22:46:58 +00:00
Brendan Coles
20fd6b6134
Add check for writable and nosuid WritableDir
2019-01-11 22:41:14 +00:00
Brendan Coles
24f807490f
revisionism
2019-01-10 19:19:14 +00:00
Brendan Coles
98dc59728e
Add blueman set_dhcp_handler D-Bus Privilege Escalation
2018-12-24 08:03:55 +00:00
Brent Cook
b9742802aa
Land #11137 , Clean up linux/local/vmware_alsa_config exploit module
2018-12-21 17:04:11 -06:00
Brent Cook
fc2d217c0a
Land #11135 , strip comments from source code before uploading it to the target
2018-12-17 21:23:29 -06:00
Brendan Coles
d973a58052
Clean up linux/local/vmware_alsa_config
2018-12-17 08:01:34 +00:00
Brendan Coles
fcb512878c
Add strip_comments method to Linux local exploits
2018-12-16 14:11:54 +00:00
Brendan Coles
b8e134b95d
Update version check
2018-12-15 05:39:50 +00:00
Brendan Coles
68d451711b
Fix bpf_priv_esc module
2018-12-12 17:23:12 +00:00
Brent Cook
bc6356a2cd
Land #11090 , update code and style for exploit/linux/local/glibc_origin_expansion_priv_esc
2018-12-10 09:59:03 -06:00
Brendan Coles
237d3c86c4
Code cleanup and update style
2018-12-09 07:26:51 +00:00
Brendan Coles
a9c0a5d53d
Use ::File::binread for exploit_data file read
2018-12-09 04:09:56 +00:00
Brendan Coles
d8ab6a552b
Add lkrg_installed? checks
2018-12-08 13:37:12 +00:00
Brendan Coles
275c043cfd
Add kernel_config checks
2018-12-07 03:28:17 +00:00
h00die
e3e7285288
Land #9946 a UEB local priv escalation
2018-11-27 21:19:34 -05:00
h00die
38a99ac90a
ueb privesc updates
2018-11-27 21:18:05 -05:00
h00die
4af5ab3089
ueb privesc updates
2018-11-27 21:14:05 -05:00
Brendan Coles
180876d8fc
Add check for SMAP
2018-11-27 23:24:02 +00:00
Brent Cook
66cae6240f
Land #10994 , Added exploit for CVE-2018-18955
2018-11-27 16:12:05 -06:00
Brendan Coles
398987e94a
::File.binread
2018-11-27 18:58:05 +00:00
Brendan Coles
45ca248568
chmod
2018-11-27 18:39:03 +00:00
Brendan Coles
aae86241ef
Update version check
2018-11-27 18:13:29 +00:00
Brendan Coles
01ed57cbb3
Remove check for nosuid
2018-11-25 01:53:07 +00:00
Brendan Coles
ff23a006b7
cleanup
2018-11-25 00:16:39 +00:00
Brendan Coles
eb17c45000
Add Linux Nested User Namespace idmap Limit Local Privilege Escalation module
2018-11-20 14:10:28 +00:00
Brendan Coles
40bc44d2b6
Add ForceExploit to Linux local modules
2018-11-11 09:37:56 +00:00
Brendan Coles
c3080d69f2
Use writable? method for local modules
2018-11-04 05:28:32 +00:00
Brendan Coles
8826932f72
Fix syntax errors
2018-10-10 14:39:07 +00:00
Brendan Coles
15cfeb37ea
CamelCase
2018-10-10 14:35:34 +00:00
Brendan Coles
7a048afd14
Make WritableDir an advanced option
2018-10-10 14:12:29 +00:00
Brendan Coles
fe7ce02dfd
Update tested versions
2018-10-04 21:13:21 +00:00
Brent Cook
6126a627cc
Land #10570 , AKA Metadata Refactor
2018-09-17 22:29:20 -05:00
William Vu
4c036e70c1
Fix http://seclists.org links to https://
...
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
Erin Bleiweiss
eb17d9b198
Refactor AKA references for modules
2018-08-31 16:56:05 -05:00
Shelby Pace
6ec8522786
Land #10482 , Add Network Manager VPNC Privesc
2018-08-30 10:46:54 -05:00