36b29fb458
Add vulnerable environment setup guide to module documentation
...
Step-by-step minikube-based setup for deploying a vulnerable
che-machine-exec instance for module verification.
2026-02-19 11:27:27 +00:00
c225256956
Add meterpreter scenario and redact IPs in documentation
2025-12-31 15:37:46 +00:00
475846ea2a
Add Eclipse Che machine-exec unauthenticated RCE (CVE-2025-12548)
...
This module exploits an unauthenticated RCE vulnerability in the
Eclipse Che machine-exec service. The service accepts WebSocket
connections without authentication on port 3333, allowing command
execution via JSON-RPC.
Affects Red Hat OpenShift DevSpaces environments.
2025-12-30 21:14:55 +00:00
d40a35acdb
the version logic changes, update the docs
2025-12-19 15:48:07 +00:00
a4dba96712
add in the HPE OneView exploit
2025-12-19 15:30:53 +00:00
795c38c524
Combine the 7.x and 6.x targets together, as Linux payloads work on 7.x also, so this target is Unix and Linux. This leaves the 8.x target Unix only due to IMA appraisal.
2025-11-28 10:12:02 +00:00
014312873c
get both unix and linux payloads working on 6.x. Add a note to the docs about setting a gateway.
2025-11-27 20:28:44 +00:00
f5e8aa83be
add in exploit support for FortiWeb versions 6.x which are vulnerable, but no longer under support from the vendor.
2025-11-27 12:43:19 +00:00
e998b91aee
Merge pull request #20717 from sfewer-r7/fortiweb-exploit-rce
...
Add exploit module for Fortinet FortiWeb (CVE-2025-64446 + CVE-2025-58034)
2025-11-25 14:14:31 -06:00
fa03ac8b66
on 7.4.8 the command nohup is not available. we must execute our payload in a new session, so we use a python stub to essentially call setsid. This has been tested to work on both 8.0.1 and 7.4.8. Teh payload cmd/unix/reverse_python isnot working as it previously was, so I am removing from the list of confirmed paylaods. The other two, cmd/unix/reverse_bash and cmd/unix/reverse_openssl work fine on both versions
2025-11-25 11:25:41 +00:00
4b2798f357
Correct vulnerable version information
2025-11-24 17:10:51 +00:00
ce926fd3d1
Update vulnerable IGEL OS version to < 11.09.310
2025-11-24 11:57:18 +00:00
933fb7bdf1
Add clean-up information
2025-11-24 11:43:46 +00:00
002795c5be
Update module information in documentation
2025-11-24 11:24:23 +00:00
b13137886a
Add IGEL OS and vulnerability summary to documentation
2025-11-21 13:09:28 +00:00
aff76622fa
add in the unauth RCE exploit module for CVE-2025-64446 + CVE-2025-58034
2025-11-21 12:22:25 +00:00
c6db0d4285
Move IGEL OS persistence module to linux/persistence
2025-11-17 18:42:28 +00:00
c37f7872a3
Add documentation for IGEL OS modules
2025-11-17 16:33:15 +00:00
b646e0e044
docs editing for consistency
2025-11-07 15:42:27 -05:00
fb02ec4554
remove 4 space indents in options
2025-11-07 15:42:27 -05:00
caa2873a14
more adjustments
2025-11-07 15:42:27 -05:00
d8c73f6684
replace bold options with h3
2025-11-07 15:42:23 -05:00
110cb837aa
Merge pull request #20672 from h00die-gr3y/centreon_auth_rce
...
Centreon authenticated command injection leading to RCE via broker engine "reload" parameter [CVE-2025-5946]
2025-11-05 16:29:29 +01:00
408eceb2d9
small update documentation
2025-11-03 10:27:44 +00:00
85b4233345
updated module based on review comments and added documentation
2025-11-03 10:21:31 +00:00
13dc61e2e8
Merge pull request #20523 from h00die/modern_persistence_upstart
...
update upstart to persistence mixin
2025-10-31 12:28:59 +01:00
676a2ed4b1
Add Rootkit Privilege Escalation Signal Hunter
2025-10-31 17:22:19 +11:00
c0b3f40b3e
upstart review
2025-10-27 19:45:38 -04:00
52b7f1ff25
Deprecate exploit/linux/local/diamorphine_rootkit_signal_priv_esc
2025-10-24 17:05:10 +11:00
55583bd2c8
review for sysv persistence
2025-10-14 19:30:06 -04:00
058e858e82
update systemvinit to persistence mixin
2025-10-13 13:42:41 -04:00
91c0adb17f
Merge pull request #20585 from vognik/CVE_2025_60787
...
Add MotionEye Authenticated RCE (CVE-2025-60787)
2025-10-09 13:50:25 -05:00
267a26b763
code review changes from smcintyre-r7@
2025-10-09 21:51:31 +04:00
79ff667d5e
Land #20538 , adds systemd override persistence module
...
persistence: systemd service override
2025-09-26 15:57:31 +02:00
6c5522cdba
Update documentation/modules/exploit/linux/persistence/init_systemd_override.md
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2025-09-18 16:25:54 -04:00
15f4abd1b2
update yum to persistence module
2025-09-18 15:36:44 -04:00
c718a965d7
Merge pull request #20508 from h00die/modern_persistence_cron
...
update cron to persistence mixin
2025-09-18 12:04:00 +02:00
dc8d67538c
Land #20536 , adds docker image persistence module
...
docker image persistence module
2025-09-17 09:56:16 +02:00
81ce0f8868
Merge pull request #20521 from h00die/modern_persistence_systemd
...
update systemd to persistence mixin
2025-09-16 14:56:26 -07:00
02e35f7e92
Merge pull request #20520 from h00die/modern_persistence_openrc
...
update openrc to persistence mixin
2025-09-15 15:54:31 -07:00
ebe0234ddb
Update documentation/modules/exploit/linux/persistence/init_openrc.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2025-09-15 16:30:17 -04:00
1ec10ec877
Merge pull request #20510 from h00die/modern_persistence_rc_local
...
update rc_local to persistence mixin
2025-09-15 14:47:48 -05:00
b45a3caaa5
Merge pull request #20509 from h00die/modern_persistence_motd
...
update motd to persistence mixin
2025-09-12 16:18:08 -07:00
403d02698b
systemd service override persistence
2025-09-11 17:29:13 -04:00
985af001d2
Merge pull request #20497 from h00die/modern_persistence_autostart
...
update autostart to persistence mixin
2025-09-11 18:58:32 +02:00
00115457f7
Update documentation/modules/exploit/linux/persistence/init_upstart.md
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-09-11 12:00:28 -04:00
5c52151a06
Update documentation/modules/exploit/linux/persistence/init_upstart.md
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-09-11 12:00:22 -04:00
80c5e41650
Merge pull request #20495 from h00die/modern_persistence_apt
...
update apt_package_manager to persistence mixin
2025-09-11 10:49:08 +02:00
2bf5264aff
docker image persistence module
2025-09-10 13:45:22 -04:00
1314f5d0bb
Merge pull request #20455 from Chocapikk/aitemi_m300_time_rce
...
Add unauthenticated RCE on Shenzhen Aitemi M300 MT02 (CVE-2025-34152)
2025-09-10 10:12:41 +02:00
gregd