 h00die
|
15bb690308
|
fix vulnerability spelling
|
2020-10-04 13:00:48 -04:00 |
|
|
bwatters
|
3aeeede4a6
|
Land #14187, Added CVE-2020-3433 module
Merge branch 'land-14187' into upstream-master
|
2020-09-29 13:41:33 -05:00 |
|
|
Shelby Pace
|
f0f4da2b1e
|
Land #14157, Windows update orchestrator privesc
|
2020-09-25 16:07:27 -05:00 |
|
|
Antoine GOICHOT
|
fef88f27eb
|
Added CVE-2020-3433 module
|
2020-09-25 23:04:58 +02:00 |
|
|
Shelby Pace
|
2111865acf
|
remove stray backtick
|
2020-09-25 16:04:46 -05:00 |
|
|
bwatters
|
2ed72007e0
|
Typos and cleanup
|
2020-09-25 12:27:55 -05:00 |
|
|
bwatters
|
6cf3c0491f
|
Add documentation
|
2020-09-22 12:16:29 -05:00 |
|
|
bwatters
|
198f3905ae
|
Logic errors and typos
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
ce8033714d
|
remove copy/pasta code and fix version check
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
c2e2a4fe2c
|
More Rubocop, add documentation, and typo fix
|
2020-09-16 11:17:39 -05:00 |
|
|
gwillcox-r7
|
593945ee61
|
Update module documentation with more detail r.e affected versions and the fact that the use of UNC paths could cause an issue if they are not typed in correctly. Also update the module documentation to use the output from recent tests to reflect recent changes. Shortern the module description and update its stability rating. Finally add in a reliability rating for the exploit module.
|
2020-09-10 11:32:45 -05:00 |
|
|
gwillcox-r7
|
7e1560ff26
|
Update documentation with the installation instructions I mentioned in the GitHub comments. Also RuboCop the exploit module code.
|
2020-09-10 11:32:18 -05:00 |
|
|
gwillcox-r7
|
d0fe87fbf6
|
Update documentation with some updated info about potentially bad situations the module could run into, and also include some new documentation on the new option we have added in to try to prevent this from happening
|
2020-09-10 11:32:18 -05:00 |
|
|
ide0x90
|
c4d463e921
|
Added option to generate standalone DLL.
|
2020-09-10 11:32:18 -05:00 |
|
|
ide0x90
|
53f3b70b33
|
Changed DLL so that it doesn't block the DNS service from stopping after the module executes.
Added OS check (>= Server 2003 is vulnerable so far).
Now cleans up dropped DLL and modified registry value.
|
2020-09-10 11:32:18 -05:00 |
|
|
ide0x90
|
7701ea1bc8
|
Compile DLL so that the DNS service doesn't crash when the module is run.
|
2020-09-10 11:32:18 -05:00 |
|
|
ide0x90
|
151fdb7ea5
|
Reduced exploit ranking and added check to see if session is elevated.
|
2020-09-10 11:32:18 -05:00 |
|
|
ide0x90
|
d1e9039af4
|
Initial module and documentation for Microsoft Windows DNS ServerLevelPluginDll abuse
|
2020-09-10 11:31:51 -05:00 |
|
|
gwillcox-r7
|
0dde85f562
|
Land #13739, Cisco AnyConnect Priv Esc via Path Traversal
|
2020-06-24 17:47:52 -05:00 |
|
|
gwillcox-r7
|
15de510623
|
Add in RuboCop and msftidy_docs.rb fixes
|
2020-06-24 17:19:21 -05:00 |
|
|
Christophe De La Fuente
|
5f64444d4f
|
Update module and documentation from code review
|
2020-06-24 23:34:26 +02:00 |
|
|
Christophe De La Fuente
|
3997dbdade
|
Updates from code review
|
2020-06-22 16:06:09 +02:00 |
|
|
Christophe De La Fuente
|
2e33241a90
|
Update module and add documentation
|
2020-06-19 20:17:11 +02:00 |
|
|
Shelby Pace
|
1cb57a7e79
|
Land #13444, add GOG Galaxy Client Privesc
|
2020-06-15 08:53:12 -05:00 |
|
|
Shelby Pace
|
801ef062a1
|
modify docs for new output
|
2020-06-15 08:42:27 -05:00 |
|
|
gwillcox-r7
|
d0ff2b116a
|
Add in some changes to the documentation to conform to linting standards
|
2020-06-10 23:22:43 -05:00 |
|
|
gwillcox-r7
|
9db73454aa
|
Update documentation to better describe the versions tested
|
2020-06-10 18:52:49 -05:00 |
|
|
gwillcox-r7
|
542581a377
|
Update documentation to reflect recent changes to the exploit
|
2020-06-10 12:22:00 -05:00 |
|
|
gwillcox-r7
|
d6b5a1009d
|
Add in Windows 10 v1803 x64 exploit documentation
|
2020-06-10 11:02:53 -05:00 |
|
|
gwillcox-r7
|
477418539b
|
Upload documentation
|
2020-06-10 11:02:51 -05:00 |
|
|
Joe Testa
|
5508bda29e
|
Moved module into exploit/windows/local. Added documentation.
|
2020-05-18 17:09:10 -04:00 |
|
|
bwatters-r7
|
9b40554ec6
|
Land #13370, Add Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
Merge branch 'land-13370' into upstream-master
|
2020-05-12 13:20:27 -05:00 |
|
|
Spencer McIntyre
|
b4e2599921
|
Remove trailing whitespace to fix build failures
|
2020-05-07 09:59:34 -04:00 |
|
|
Spencer McIntyre
|
9769e04b6e
|
Land #13322, CVE-2020-0668 Service tracing file junction overwrite
|
2020-05-07 09:47:20 -04:00 |
|
|
Spencer McIntyre
|
26d4cb7a47
|
Tweak the service tracking checks and update docs markdown
|
2020-05-07 09:46:19 -04:00 |
|
|
bwatters-r7
|
a5fe498610
|
Update ARCH handling, suggested changes, and last-minute fixes
|
2020-05-06 15:36:53 -05:00 |
|
|
Brendan Coles
|
bf16307d7f
|
Add Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
|
2020-05-06 14:09:46 +00:00 |
|
|
gwillcox-r7
|
02bc959d1b
|
Documentation alignment to 72 character width as is standard
|
2020-05-05 21:01:52 -05:00 |
|
|
Tim W
|
bcf9449b29
|
add basic check method
|
2020-05-01 19:02:21 +08:00 |
|
|
bwatters-r7
|
01f1cfd188
|
Update documentation with note about prior windows versions
|
2020-04-30 09:37:52 -05:00 |
|
|
Tim W
|
8e9a162b1b
|
fix
|
2020-04-30 18:05:00 +08:00 |
|
|
Tim W
|
ea22e34b9c
|
fix description
|
2020-04-30 17:51:28 +08:00 |
|
|
Tim W
|
109f0a01f7
|
add windows 7 sp1 scenario
|
2020-04-30 17:19:54 +08:00 |
|
|
Tim W
|
ff0704b316
|
code review from grant <3
|
2020-04-30 17:19:54 +08:00 |
|
|
Tim W
|
7560f7de8c
|
remove changes to other files
|
2020-04-30 17:19:54 +08:00 |
|
|
Tim W
|
f05b50f54e
|
add documentation for CVE-2019-0808
|
2020-04-30 17:19:53 +08:00 |
|
|
bwatters-r7
|
191044cdad
|
Final fixes and documentation
|
2020-04-29 10:18:22 -05:00 |
|
|
Shelby Pace
|
640eb77403
|
Land #13260, add docker wincred module
|
2020-04-24 10:02:38 -05:00 |
|
|
Shelby Pace
|
24eeba09e8
|
typo
|
2020-04-24 10:01:31 -05:00 |
|
|
bwatters-r7
|
1c757f90db
|
bcoles suggestions
|
2020-04-22 18:08:58 -05:00 |
|