bcoles
|
f715816068
|
Update modules/exploits/linux/local/yum_package_manager_persistence.rb
Co-Authored-By: aringo <ringo.aaron@gmail.com>
|
2019-04-20 17:47:29 -05:00 |
|
bcoles
|
0c22da8c6f
|
Update modules/exploits/linux/local/yum_package_manager_persistence.rb
Co-Authored-By: aringo <ringo.aaron@gmail.com>
|
2019-04-20 17:46:55 -05:00 |
|
bcoles
|
11d174a464
|
Update modules/exploits/linux/local/yum_package_manager_persistence.rb
PLUGIN
Co-Authored-By: aringo <ringo.aaron@gmail.com>
|
2019-04-20 17:46:35 -05:00 |
|
bcoles
|
1c0928206f
|
Update modules/exploits/linux/local/yum_package_manager_persistence.rb
PLUGIN
Co-Authored-By: aringo <ringo.aaron@gmail.com>
|
2019-04-20 17:46:20 -05:00 |
|
bcoles
|
ba03a0c9eb
|
Remove unused variable
|
2019-04-20 21:41:25 +10:00 |
|
Brendan Coles
|
e714f9028e
|
Add ABRT sosreport Privilege Escalation module
|
2019-04-20 11:48:52 +00:00 |
|
Brendan Coles
|
da9aba07af
|
Cleanup apport_abrt_chroot_priv_esc
|
2019-04-19 17:13:57 +00:00 |
|
Brent Cook
|
5ef5904296
|
Land #11747, updated test versions for abrt_raceabrt_priv_esc
|
2019-04-19 11:43:06 -05:00 |
|
h00die
|
072ac00acd
|
Land #11754 linux priv esc for SystemTap
|
2019-04-19 08:39:20 -04:00 |
|
bcoles
|
43c7b8bb63
|
Fix check
|
2019-04-19 12:54:30 +10:00 |
|
Brendan Coles
|
64ed136f09
|
Add SystemTap MODPROBE_OPTIONS Privilege Escalation module
|
2019-04-18 17:15:22 +00:00 |
|
Brendan Coles
|
754255a2fa
|
Fix file description and update tested versions
|
2019-04-18 15:35:37 +00:00 |
|
Brendan Coles
|
10871fa115
|
Update tested versions
|
2019-04-18 09:01:51 +00:00 |
|
William Vu
|
6326aa5dda
|
Clean up module and randomize username
|
2019-04-12 14:23:57 -05:00 |
|
William Vu
|
2ebee1226f
|
Land #11613, Cisco RV130 stack BOF exploit
|
2019-04-12 14:06:51 -05:00 |
|
Quentin Kaiser
|
5e189196de
|
Target consolidation.
|
2019-04-12 10:58:56 +02:00 |
|
Quentin Kaiser
|
dfb1ebb2e2
|
Remove Stance value as it is already defined by core/exploit/cmdstager/http.
|
2019-04-12 10:57:50 +02:00 |
|
William Vu
|
d72672feed
|
Land #11672, Zimbra XXE and SSRF exploit
|
2019-04-10 09:58:45 -05:00 |
|
Quentin Kaiser
|
3517a4e237
|
Adapt ranking and mention potential stability issue.
|
2019-04-09 11:31:15 +02:00 |
|
William Vu
|
e164c2350c
|
Properly encode command input with XML entities
REXML would make this less ghetto.
|
2019-04-03 19:10:27 -05:00 |
|
todb-r7
|
9e3984ea51
|
Remove duplicate CVE for Mailcleaner module
See #11304
|
2019-04-02 12:51:09 -05:00 |
|
Jacob Robles
|
3d662bd962
|
Fix words because words...
|
2019-04-01 17:21:23 -05:00 |
|
Jacob Robles
|
69062bb220
|
Syntax fixes
|
2019-04-01 17:05:42 -05:00 |
|
Aaron Ringo
|
28983df234
|
Addition of yum package manager module and documentation
|
2019-04-01 13:26:45 -05:00 |
|
Jacob Robles
|
c07b015734
|
File cleanup
|
2019-04-01 11:39:40 -05:00 |
|
Jacob Robles
|
51d1216953
|
Update module name
|
2019-04-01 07:48:26 -05:00 |
|
Jacob Robles
|
0873ba7ac1
|
Add Zimbra XXE to RCE module
|
2019-04-01 07:32:57 -05:00 |
|
Aaron Ringo
|
22c3fe35f7
|
Changed hook payload to redirect errors, to not show up on target screen
|
2019-03-31 12:09:40 -05:00 |
|
Aaron Ringo
|
299334ae7f
|
fixed bug where alphanumeric was never hit
|
2019-03-30 22:51:18 -05:00 |
|
Aaron Ringo
|
38bf99e729
|
Re-add of module after jacking up rebase, with new arches,conditional logic, documentation
|
2019-03-30 22:04:21 -05:00 |
|
Brent Cook
|
0a24266029
|
Land #11482, RV320 Unauthenticated RCE
|
2019-03-28 17:53:05 -05:00 |
|
Quentin Kaiser
|
e2101c7931
|
Fix module so it supports both ARCH_CMD and ARCH_ARMLE.
|
2019-03-28 19:50:26 +01:00 |
|
Quentin Kaiser
|
8ec5a124b4
|
Follow @bcoles recommendations for 'check' function.
|
2019-03-28 15:59:22 +01:00 |
|
Quentin Kaiser
|
cbcc2f2088
|
Moved to Cmdstager.
|
2019-03-28 11:03:01 +01:00 |
|
Quentin Kaiser
|
a9fcd13257
|
Removed unnecessary includes.
|
2019-03-28 10:53:07 +01:00 |
|
Quentin Kaiser
|
1a564a6f70
|
Uppercase words.
|
2019-03-28 10:49:10 +01:00 |
|
Quentin Kaiser
|
7794cc0234
|
No need for parenthesis.
|
2019-03-28 10:48:38 +01:00 |
|
Quentin Kaiser
|
fbaebc14be
|
Shrink to oneliner.
|
2019-03-28 10:45:17 +01:00 |
|
Quentin Kaiser
|
cef8dc2fa2
|
<< is preferred.
|
2019-03-28 10:42:33 +01:00 |
|
Quentin Kaiser
|
de6f49305c
|
Correct disclosure date format.
|
2019-03-27 14:22:37 +01:00 |
|
Quentin Kaiser
|
6fde3ea566
|
These files have nothing to do here.
|
2019-03-27 14:20:34 +01:00 |
|
Quentin Kaiser
|
ed7d9a10ac
|
Release of Awindinc SNMP exploit.
|
2019-03-27 14:13:36 +01:00 |
|
Quentin Kaiser
|
9baaedce4e
|
Indicate potential DoS in description. Define exploit stance explicitly.
|
2019-03-24 22:29:07 +01:00 |
|
Quentin Kaiser
|
5c048e7cd6
|
CISCO-SA not supported.
|
2019-03-24 22:20:31 +01:00 |
|
Quentin Kaiser
|
be73f56610
|
Only got researchers name, no email.
|
2019-03-24 17:50:31 +01:00 |
|
Quentin Kaiser
|
4451225da7
|
Add httpd service reloading.
|
2019-03-24 17:49:55 +01:00 |
|
bcoles
|
5e470a538d
|
return unless res
|
2019-03-23 19:38:14 +11:00 |
|
Brendan Coles
|
ccc8d9cdab
|
return unless res
|
2019-03-23 08:51:25 +00:00 |
|
Quentin Kaiser
|
5562af39d3
|
Use CmdStager instead of hardcoded wget command.
|
2019-03-22 20:10:29 +01:00 |
|
Quentin Kaiser
|
ef2c4310a4
|
Exploit for CVE-2019-1663 on Cisco RV130(W).
|
2019-03-22 17:34:12 +01:00 |
|