adfoster-r7
094d6ee36b
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
bcoles
a7d2145e8d
firefox_xpi_bootstrapped_addon: Add notes, description, references, docs
2022-09-05 02:23:37 +10:00
bwatters
0081811c52
Land #16185 , Firefox CVE-2020-26950 use after free browser exploit
...
Merge branch 'land-16185' into upstream-master
2022-02-28 14:38:23 -06:00
Tim W
579811418f
update documentation with note about Firefox 82.0.1
2022-02-26 12:35:38 +00:00
h00die
d5ba1afbec
fix URLs not resolving
...
fix URLs not resolving
add csv export to references
fix URLs not resolving
pdf not pd
missed a url change
remove extra recirectedfrom fields
remove extra file
fix ovftool url accidental replacement
2022-02-16 17:22:40 -06:00
Tim W
4e5cd8693d
add notes section to placate msftidy
2022-02-16 11:48:55 +00:00
Tim W
480c44e9cb
refactor DEBUG_EXPLOIT code into mixin
2022-02-16 11:38:04 +00:00
Tim W
35d122e16d
msftidy
2022-02-16 08:35:04 +00:00
Tim W
fb53ca0ac2
actually add support for Windows
2022-02-16 08:33:24 +00:00
adfoster-r7
4a9a15e638
Run Rubocop layout rules on modules
2021-08-27 17:19:43 +01:00
Alan Foster
100da2f1b1
Enforce Style/RedundantBegin for new modules
2021-05-13 04:01:03 +01:00
Tim W
360fee153f
use 2 space indentation
2021-04-30 22:32:05 +01:00
Tim W
27a9b797b1
location.reload() on failure
2021-04-30 22:31:50 +01:00
Grant Willcox
f267f0866c
Fix up documentation typos and improve JavaScript using comments from @timwr's review.
2021-04-30 10:54:09 -05:00
Grant Willcox
5541988d10
Upload working exploit and documentation for CVE-2021-21220
2021-04-27 13:23:35 -05:00
Grant Willcox
d155702356
Add in Notes section to chrome_simplifiedlowering_overflow.rb
2021-04-16 11:02:52 -05:00
Tim
c6464313d4
Update modules/exploits/multi/browser/chrome_simplifiedlowering_overflow.rb
...
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com >
2021-04-16 16:46:43 +01:00
Tim W
97425602e9
fix typo and docs in chrome_simplifiedlowering_overflow
2021-04-16 14:59:43 +01:00
Tim W
53b739277a
do location.reload() if exploit fails
2021-04-08 21:21:06 +01:00
Tim W
8019eda667
fix 0x2000 shellcode limit
2021-04-08 21:17:40 +01:00
Tim W
bd32f686bc
remove dataview allocation
2021-04-08 21:17:01 +01:00
Tim W
6b86f6c881
remove 0x150 shellcode limit
2021-04-08 21:06:15 +01:00
Tim W
c12f098c45
cosmetic fixes
2021-04-08 20:54:54 +01:00
rajvardhan agarwal
b1c5afc55b
fix rubocop warning
2021-04-06 18:46:07 +05:30
rajvardhan agarwal
c23a69dcaf
Make suggested changes
2021-04-06 18:43:26 +05:30
rajvardhan agarwal
1088557ce9
fix rubocop warning
2021-04-06 17:51:23 +05:30
rajvardhan agarwal
cb0319c849
fix rubocop warning
2021-04-06 17:41:05 +05:30
rajvardhan agarwal
c863c324ae
Add exploit for CVE-2020-16040
2021-04-06 17:25:27 +05:30
dwelch-r7
319f15d938
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
Alan Foster
b06c5c12aa
Rubocop recently landed modules continued
2021-02-25 14:13:40 +00:00
Alan Foster
5b3fde7735
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
dwelch-r7
49a6b1b257
Remove requires that sneaked in while the PR was up
2020-12-07 11:02:10 +00:00
dwelch-r7
1617b3ec9b
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
Grant Willcox
849dbeca5c
Fix up bad merge commit
2020-10-15 11:53:39 -05:00
Tim W
87104a7236
Update docs and make them msftidy_docs.rb compliant
2020-10-15 10:59:46 -05:00
Grant Willcox
f2899186e4
Add in first round of initial updates to fix review comments
2020-10-15 10:59:40 -05:00
Tim W
dcc322436b
Update documentation files and module description to more accurately describe what the cause of the LPE bug for CVE-2019-1458 is. also apply RuboCop edits.
2020-10-15 10:58:58 -05:00
Tim W
c38064b022
Apply rubocop edits and update documentation
2020-10-15 10:58:38 -05:00
Tim W
a3772d43d4
set InitialAutoRunScript to post/windows/manage/priv_migrate
2020-10-15 10:58:08 -05:00
Tim W
12c5f4f916
CVE-2019-1458 chrome sandbox escape initial commit
2020-10-15 10:57:46 -05:00
Alan Foster
30809787c4
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
William Vu
9840951f0d
Land #12574 , Chrome CVE-2019-5825 exploit
2020-03-05 13:44:40 -06:00
William Vu
87b8182131
Land #12384 , Chrome CVE-2018-17463 exploit
2020-03-05 13:44:27 -06:00
Tim W
9f55e4163f
add documentation
2020-03-04 21:31:14 +08:00
Tim W
7f6f7fea3e
add osx as a target
2020-03-04 13:37:19 +08:00
Tim
9f56867f6c
Apply suggestions from code review
...
Co-Authored-By: adamgalway-r7 <54621924+adamgalway-r7@users.noreply.github.com >
2020-03-04 11:55:33 +07:00
Tim W
196c354ede
chrome 80 jscreate rce
2020-02-29 18:41:04 +08:00
Brent Cook
8489bcdfd9
This fixes broken links to the community.rapid7.com blog
...
Performed mechanically with sed, spot-checked that the new blog can consume these links.
2020-02-18 09:06:11 -06:00
Tim W
3a89bef6c4
improve description
2020-02-15 10:37:15 +08:00
Tim W
d95391b7f4
minor refactor
2020-02-15 06:10:52 +08:00