C4ssandre
494e3d113e
Adding new and more granular error codes.
2020-09-28 23:10:46 +00:00
Shelby Pace
f0f4da2b1e
Land #14157 , Windows update orchestrator privesc
2020-09-25 16:07:27 -05:00
bwatters
7e68c42876
Rubocop, fix check method, clean up c code
2020-09-22 07:45:02 -05:00
bwatters
534e945cd0
First attempt at CVE-2020-1313
2020-09-18 15:39:12 -05:00
bwatters
a2edcda819
Rubocop on module and update error handling on exploit C code + recompile
2020-09-16 11:17:39 -05:00
bwatters
fe59099678
Clean up C code, add support for x86 targets
2020-09-16 11:17:39 -05:00
bwatters
a72769909b
Change exe to take destination and source files for copy
2020-09-16 11:17:39 -05:00
bwatters
17272209cc
First try at CVE-2020-1048, needs lots of work
2020-09-16 11:17:38 -05:00
bwatters
e592736833
Land #13992 , Add module for CVE-2020-9839, LPE for macOS <= 10.15.4
...
Merge branch 'land-13992' into upstream-master
2020-09-04 15:53:17 -05:00
Tim W
301754c648
remove CMakeLists.txt
2020-09-01 17:14:21 +08:00
C4ssandre
1b68a41c9a
Formatting code by removing whitespaces.
2020-08-28 17:34:49 +02:00
C4ssandre
995d6a7fc9
Changing all printf and wprintf to dprintf macro, defined in pch.h
2020-08-28 15:27:23 +02:00
Tim W
b0864e17cc
fix WebKit build
2020-08-27 20:06:02 +08:00
Tim W
33fa4d1424
dynamic offsets
2020-08-27 19:36:45 +08:00
Tim W
52fb91f2ba
move loader offsets to offset table
2020-08-27 19:36:45 +08:00
Tim W
a94389fb76
cleanup cvm_side
2020-08-27 19:36:45 +08:00
Tim W
6bd8fb14d0
fix offsets for 10.15.3 and 10.15.4
2020-08-27 19:36:45 +08:00
Tim W
c7d0a1b2a8
add offsets for 10.15.4
2020-08-27 19:36:45 +08:00
Tim W
0a1fb600a2
fix source versions and jscell headers
2020-08-27 19:36:45 +08:00
C4ssandre
3336040f2d
Adding a new privilege escalation exploit for windows.
...
New files and folders:
- metasploit-framework/modules/exploits/windows/local/bits_ntlm_token_impersonation.rb
- metasploit-framework/data/exploits/drunkpotato/
- metasploit-framework/external/source/exploits/drunkpotato/
2020-08-25 14:27:41 +02:00
Tim W
53b2db78a0
getroot -> make writable
2020-08-18 16:18:38 +08:00
Tim W
e65e7e21f2
fix newlines and cleanup
2020-08-18 15:56:05 +08:00
Tim W
0e4fcd7379
CVE-2020-9839
2020-08-18 15:56:01 +08:00
Tim W
b5e465641b
CVE-2020-9850 external source
2020-08-14 16:10:40 +08:00
Tim W
0b513d6c51
remove debug logging from the kernel exploit
2020-07-30 18:10:26 +08:00
Tim W
79adcf7904
Add module for iOS 7.1.2
2020-07-27 15:05:31 +08:00
gwillcox-r7
586971428a
Recompile everything so we don't have the messagebox calls
2020-06-11 00:18:45 -05:00
gwillcox-r7
93b28e662e
Change out template_dll solution files so that it generates the DLL with the correct name and in the correct location
2020-06-10 11:41:34 -05:00
gwillcox-r7
4a9c878132
Finally fix up the hanging issue via new template DLLs and associated code
2020-06-10 11:02:53 -05:00
gwillcox-r7
cb20eaf6f9
Finally fix the issue with the cleanup of the files within the exploit
2020-06-10 11:02:51 -05:00
gwillcox-r7
a5220d3155
One last time to add files cause I messed up last time
2020-06-10 11:02:51 -05:00
gwillcox-r7
06019585e8
Woops forgot source files last time, lets add those in
2020-06-10 11:02:50 -05:00
gwillcox-r7
dc060de7a9
Add initial upload of the source code
2020-06-10 11:02:48 -05:00
gwillcox-r7
1c79674620
Recompile DLL and alter vcxproj file to automatically place generated DLL in right folder
2020-05-06 16:33:01 -05:00
gwillcox-r7
1325c28ebd
Fix typo in dllmain.cpp
2020-05-06 15:44:02 -05:00
gwillcox-r7
ea3bba96e2
Apply lots of review fixes to dllmain.cpp
2020-05-06 13:14:50 -05:00
Tim W
27147aa23b
add error checking to VirtualAlloc
2020-05-01 19:02:21 +08:00
Tim W
8e9a162b1b
fix
2020-04-30 18:05:00 +08:00
Tim W
8f12e005ea
check VirtualAlloc return value
2020-04-30 17:50:20 +08:00
Tim W
3ca0472b18
fix payload size
2020-04-30 17:47:41 +08:00
Tim W
5ed871a110
CVE-2019-0808
2020-04-30 17:19:46 +08:00
Spencer McIntyre
3392fa18d4
Add the x64 LPE exploit for CVE-2020-0796
2020-04-02 17:22:00 -04:00
Brent Cook
f59ec03c42
Land #12465 , add Android Binder UAF (CVE-2019-2215)
2020-02-23 01:06:33 -08:00
bwatters-r7
7e05642a1b
Randomize container name
2019-12-12 07:48:01 -06:00
bwatters-r7
0257861c4f
Remove debug statements and extra c/ruby libraries
2019-12-11 18:42:36 -06:00
bwatters-r7
942d1e3962
Trim exploit code and de-pasta-fy module
...
Better check for build number
2019-12-10 18:09:08 -06:00
bwatters-r7
8a9dd35793
First draft of windows comahawk priv esc
2019-12-09 19:09:15 -06:00
Tim W
a5a3e28984
Initial commit of CVE-2019-2215 Android Binder Use-After-Free
2019-10-17 18:48:49 +08:00
Wei Chen
27bb166938
Land #12011 , Add module for cve-2018-8453
2019-07-15 11:31:07 -05:00
Jacob Robles
5c0bbbbaa0
Land #12070 , Add module for CVE-2019-0841
2019-07-15 09:32:47 -05:00