 bwatters
|
e24a81919a
|
Land #13996, Add module for CVE-2020-9801, CVE-2020-9850 and CVE-2020-9856,
RCE for Safari on macOS 10.15.3 (pwn2own2020)
Merge branch 'land-13996' into upstream-master
|
2020-10-01 09:46:39 -05:00 |
|
|
Shelby Pace
|
f0f4da2b1e
|
Land #14157, Windows update orchestrator privesc
|
2020-09-25 16:07:27 -05:00 |
|
|
bwatters
|
7e68c42876
|
Rubocop, fix check method, clean up c code
|
2020-09-22 07:45:02 -05:00 |
|
|
bwatters
|
534e945cd0
|
First attempt at CVE-2020-1313
|
2020-09-18 15:39:12 -05:00 |
|
|
bwatters
|
a2edcda819
|
Rubocop on module and update error handling on exploit C code + recompile
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
fe59099678
|
Clean up C code, add support for x86 targets
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
a72769909b
|
Change exe to take destination and source files for copy
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
17272209cc
|
First try at CVE-2020-1048, needs lots of work
|
2020-09-16 11:17:38 -05:00 |
|
|
bwatters
|
e592736833
|
Land #13992, Add module for CVE-2020-9839, LPE for macOS <= 10.15.4
Merge branch 'land-13992' into upstream-master
|
2020-09-04 15:53:17 -05:00 |
|
|
Tim W
|
301754c648
|
remove CMakeLists.txt
|
2020-09-01 17:14:21 +08:00 |
|
|
Tim W
|
b0864e17cc
|
fix WebKit build
|
2020-08-27 20:06:02 +08:00 |
|
|
Tim W
|
33fa4d1424
|
dynamic offsets
|
2020-08-27 19:36:45 +08:00 |
|
|
Tim W
|
52fb91f2ba
|
move loader offsets to offset table
|
2020-08-27 19:36:45 +08:00 |
|
|
Tim W
|
a94389fb76
|
cleanup cvm_side
|
2020-08-27 19:36:45 +08:00 |
|
|
Tim W
|
6bd8fb14d0
|
fix offsets for 10.15.3 and 10.15.4
|
2020-08-27 19:36:45 +08:00 |
|
|
Tim W
|
c7d0a1b2a8
|
add offsets for 10.15.4
|
2020-08-27 19:36:45 +08:00 |
|
|
Tim W
|
0a1fb600a2
|
fix source versions and jscell headers
|
2020-08-27 19:36:45 +08:00 |
|
|
Tim W
|
53b2db78a0
|
getroot -> make writable
|
2020-08-18 16:18:38 +08:00 |
|
|
Tim W
|
e65e7e21f2
|
fix newlines and cleanup
|
2020-08-18 15:56:05 +08:00 |
|
|
Tim W
|
0e4fcd7379
|
CVE-2020-9839
|
2020-08-18 15:56:01 +08:00 |
|
|
Tim W
|
b5e465641b
|
CVE-2020-9850 external source
|
2020-08-14 16:10:40 +08:00 |
|
|
Tim W
|
0b513d6c51
|
remove debug logging from the kernel exploit
|
2020-07-30 18:10:26 +08:00 |
|
|
Tim W
|
79adcf7904
|
Add module for iOS 7.1.2
|
2020-07-27 15:05:31 +08:00 |
|
|
gwillcox-r7
|
586971428a
|
Recompile everything so we don't have the messagebox calls
|
2020-06-11 00:18:45 -05:00 |
|
|
gwillcox-r7
|
93b28e662e
|
Change out template_dll solution files so that it generates the DLL with the correct name and in the correct location
|
2020-06-10 11:41:34 -05:00 |
|
|
gwillcox-r7
|
4a9c878132
|
Finally fix up the hanging issue via new template DLLs and associated code
|
2020-06-10 11:02:53 -05:00 |
|
|
gwillcox-r7
|
cb20eaf6f9
|
Finally fix the issue with the cleanup of the files within the exploit
|
2020-06-10 11:02:51 -05:00 |
|
|
gwillcox-r7
|
a5220d3155
|
One last time to add files cause I messed up last time
|
2020-06-10 11:02:51 -05:00 |
|
|
gwillcox-r7
|
06019585e8
|
Woops forgot source files last time, lets add those in
|
2020-06-10 11:02:50 -05:00 |
|
|
gwillcox-r7
|
dc060de7a9
|
Add initial upload of the source code
|
2020-06-10 11:02:48 -05:00 |
|
|
gwillcox-r7
|
1c79674620
|
Recompile DLL and alter vcxproj file to automatically place generated DLL in right folder
|
2020-05-06 16:33:01 -05:00 |
|
|
gwillcox-r7
|
1325c28ebd
|
Fix typo in dllmain.cpp
|
2020-05-06 15:44:02 -05:00 |
|
|
gwillcox-r7
|
ea3bba96e2
|
Apply lots of review fixes to dllmain.cpp
|
2020-05-06 13:14:50 -05:00 |
|
|
Tim W
|
27147aa23b
|
add error checking to VirtualAlloc
|
2020-05-01 19:02:21 +08:00 |
|
|
Tim W
|
8e9a162b1b
|
fix
|
2020-04-30 18:05:00 +08:00 |
|
|
Tim W
|
8f12e005ea
|
check VirtualAlloc return value
|
2020-04-30 17:50:20 +08:00 |
|
|
Tim W
|
3ca0472b18
|
fix payload size
|
2020-04-30 17:47:41 +08:00 |
|
|
Tim W
|
5ed871a110
|
CVE-2019-0808
|
2020-04-30 17:19:46 +08:00 |
|
|
Spencer McIntyre
|
3392fa18d4
|
Add the x64 LPE exploit for CVE-2020-0796
|
2020-04-02 17:22:00 -04:00 |
|
|
Brent Cook
|
f59ec03c42
|
Land #12465, add Android Binder UAF (CVE-2019-2215)
|
2020-02-23 01:06:33 -08:00 |
|
|
bwatters-r7
|
7e05642a1b
|
Randomize container name
|
2019-12-12 07:48:01 -06:00 |
|
|
bwatters-r7
|
0257861c4f
|
Remove debug statements and extra c/ruby libraries
|
2019-12-11 18:42:36 -06:00 |
|
|
bwatters-r7
|
942d1e3962
|
Trim exploit code and de-pasta-fy module
Better check for build number
|
2019-12-10 18:09:08 -06:00 |
|
|
bwatters-r7
|
8a9dd35793
|
First draft of windows comahawk priv esc
|
2019-12-09 19:09:15 -06:00 |
|
|
Tim W
|
a5a3e28984
|
Initial commit of CVE-2019-2215 Android Binder Use-After-Free
|
2019-10-17 18:48:49 +08:00 |
|
|
Wei Chen
|
27bb166938
|
Land #12011, Add module for cve-2018-8453
|
2019-07-15 11:31:07 -05:00 |
|
|
Jacob Robles
|
5c0bbbbaa0
|
Land #12070, Add module for CVE-2019-0841
|
2019-07-15 09:32:47 -05:00 |
|
|
Shelby Pace
|
f7c252eef3
|
move source to external/source directory
|
2019-07-09 09:08:28 -05:00 |
|
|
Jacob Robles
|
a55aea33a9
|
Add cve-2018-8453 exploit module
|
2019-07-09 07:15:13 -05:00 |
|
|
Brent Cook
|
e50ab5cd13
|
Land #11726, add exploit for CVE-2019-8513, macOS TimeMachine cmd injection
|
2019-06-29 05:36:12 -05:00 |
|