Commit Graph

10 Commits

Author SHA1 Message Date
wvu 03c99660db Update pam_username_bof.rb 2023-08-09 00:22:57 -05:00
William Vu c5d47532b0 Clarify sending username where password expected 2020-12-07 01:55:18 -06:00
William Vu d1f307324b Refactor exploit to use improved CheckModule
And add AutoCheck.
2020-12-07 01:35:13 -06:00
William Vu 4da3e37328 Remove unchanged offset 2020-12-07 01:35:13 -06:00
William Vu 4afb4562d9 Print on failure 2020-12-07 01:35:13 -06:00
William Vu 88f0fab6f4 Don't hardcode a stack address for the payload 2020-12-07 01:35:13 -06:00
William Vu 6b45552bda Swap target priority 2020-12-07 01:35:13 -06:00
William Vu bed3f9b41c Note VMware Player support
Thanks to @bcoles for testing.
2020-12-07 01:35:13 -06:00
William Vu 1cfcb9b351 Clarify Solaris version
Hat tip @bcoles.
2020-12-07 01:35:13 -06:00
William Vu d6c64865ea Add Solaris SunSSH PAM parse_user_name() exploit
CVE-2020-14871
2020-12-07 01:35:13 -06:00