 surya
|
d1e3a104db
|
Merged branches
|
2021-10-08 02:55:39 +05:30 |
|
|
surya
|
4d4b51d158
|
=> Added .gitignore
=> Added Deobfuscated HTML Payload
=> Removed Extra Author Credits
=> Made SRVHOST AND SRVPORT MANDATORY
=> generate_uri replaced with builtin get_uri
|
2021-10-08 02:50:27 +05:30 |
|
|
adfoster-r7
|
28eab4d871
|
Add Meterpreter compatibility metadata
|
2021-10-06 13:54:51 +01:00 |
|
|
suryasaradhi
|
cbbb83073f
|
Added Authors
|
2021-10-05 21:03:45 +05:30 |
|
|
surya
|
48388133dd
|
Msftidy up code v2
|
2021-10-05 02:33:36 +05:30 |
|
|
surya
|
171f114ce2
|
Msftidy up code v1
|
2021-10-05 02:10:33 +05:30 |
|
|
surya
|
3461c7aef6
|
Added module for CVE-2021-40444
|
2021-10-05 01:44:34 +05:30 |
|
|
Spencer McIntyre
|
56cd43a8b8
|
Land #15624, Add module for CVE-2020-27955
|
2021-09-15 14:54:19 -04:00 |
|
|
Spencer McIntyre
|
1bd3a764a6
|
Fixup issues from testing
|
2021-09-14 16:32:25 -04:00 |
|
|
adfoster-r7
|
1499b1988e
|
Land #15609, Add Meterpreter compatibility commands
|
2021-09-13 15:21:03 +01:00 |
|
|
adfoster-r7
|
46718e3390
|
Run Rubocop layout rules on modules
|
2021-09-10 12:53:39 +01:00 |
|
|
adfoster-r7
|
059e39a6f0
|
Specify meterpreter compatibility command requirements
|
2021-09-08 22:59:25 +01:00 |
|
|
bwatters
|
a7d99ebbfc
|
Land # 15611, ProxyShell Improvements
Merge branch 'land-15611' into upstream-master
|
2021-09-07 11:47:13 -05:00 |
|
|
Jack Heysel
|
99352ad107
|
Move methods from lfs.rb, fix fail_with types
|
2021-09-03 16:17:35 -05:00 |
|
|
jheysel-r7
|
93aea73939
|
Update modules/exploits/windows/http/git_lfs_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-09-03 16:17:35 -05:00 |
|
|
Jack Heysel
|
5294c714aa
|
Fix spacing
|
2021-09-03 16:17:35 -05:00 |
|
|
Jack Heysel
|
f9c4c35431
|
Update the target_suitable? method
|
2021-09-03 16:17:35 -05:00 |
|
|
Jack Heysel
|
ba64dce5b7
|
Rubocop offenses
|
2021-09-03 16:17:30 -05:00 |
|
|
Jack Heysel
|
3c43bd409d
|
Added docs an Git User-Agent FP
|
2021-09-03 16:15:39 -05:00 |
|
|
Jack Heysel
|
514a37ef2f
|
Removed unecessary gem file + rubocop
|
2021-09-03 16:15:39 -05:00 |
|
|
Jack Heysel
|
21d99a74fb
|
beta commit
|
2021-09-03 16:15:38 -05:00 |
|
|
Alan Foster
|
134fef21c4
|
Improve validation rhosts validation
|
2021-09-02 13:00:01 +01:00 |
|
|
adfoster-r7
|
ded8200396
|
Land #15537, Add support for ruby 3
|
2021-09-01 10:30:54 +01:00 |
|
|
Spencer McIntyre
|
33da289a9c
|
Print stderr when it's not blank
|
2021-08-31 09:18:11 -04:00 |
|
|
Spencer McIntyre
|
95015f0c2b
|
Update the ProxyShell module docs
|
2021-08-27 17:50:28 -04:00 |
|
|
Spencer McIntyre
|
425dcf1f81
|
Cleanup and refactor the exploit logic
|
2021-08-27 17:26:40 -04:00 |
|
|
Spencer McIntyre
|
965dec43ae
|
Delete the draft email
|
2021-08-27 16:59:17 -04:00 |
|
|
Spencer McIntyre
|
0b3b0aab7d
|
Fix the UNC path conversion regex
|
2021-08-27 15:56:58 -04:00 |
|
|
Spencer McIntyre
|
5e32ca9f56
|
Improve error checks and dont use whoami
|
2021-08-27 15:52:34 -04:00 |
|
|
Spencer McIntyre
|
c4cf99795e
|
Remove the requirement on knowing an email address
|
2021-08-27 15:34:51 -04:00 |
|
|
Spencer McIntyre
|
845c01f27f
|
Store the enumerated mailbox email addresses
|
2021-08-27 15:07:13 -04:00 |
|
|
Spencer McIntyre
|
6c01a0dbea
|
Work off of the system mailbox
|
2021-08-27 14:32:26 -04:00 |
|
|
adfoster-r7
|
4a9a15e638
|
Run Rubocop layout rules on modules
|
2021-08-27 17:19:43 +01:00 |
|
|
Spencer McIntyre
|
d5fdcb8fcb
|
Add the plumbing to enumerate email addresses
|
2021-08-27 11:44:27 -04:00 |
|
|
Grant Willcox
|
7cf2e66085
|
Fix up regex to properly match results and not include the 'version' part of the string, which was causing Rex::Version to return incorrect results and therefore make the 'check' method fail
|
2021-08-26 17:41:41 -05:00 |
|
|
Grant Willcox
|
415b46d9a7
|
Fix Rubocop errors
|
2021-08-26 16:52:58 -05:00 |
|
|
Dimitrie-Toma Furdui
|
63aaa8f438
|
fixed version check for docker_credential_wincred
|
2021-08-26 16:33:45 -05:00 |
|
|
Spencer McIntyre
|
674628e600
|
Land #15384, Improve Windows RDLL injection
|
2021-08-26 12:11:44 -04:00 |
|
|
Grant Willcox
|
be9a7bc9b9
|
Fix up error in alpc_taskscheduler.rb where it expected a DLL but we passed it shellcode instead
|
2021-08-26 09:27:21 -05:00 |
|
|
Grant Willcox
|
7652a2240e
|
Add in missing import for modules/exploits/windows/local/ntapphelpcachecontrol.rb to prevent crashes due to execute_dll not being defined
|
2021-08-25 18:19:58 -05:00 |
|
|
Grant Willcox
|
5a80e9678c
|
Address Spencer's comments and remove changes that don't directly use the DLL injection library API change
|
2021-08-24 16:34:01 -05:00 |
|
|
sjanusz
|
8e00c5a188
|
Add default payload option to targets
|
2021-08-20 16:38:22 +01:00 |
|
|
William Vu
|
31796c6236
|
Land #15561, ProxyShell exploit
|
2021-08-19 10:31:02 -05:00 |
|
|
William Vu
|
0a06730802
|
Update contributors
|
2021-08-19 10:30:21 -05:00 |
|
|
Spencer McIntyre
|
84f8c44e69
|
Write to the targeted backend server
|
2021-08-18 12:34:40 -04:00 |
|
|
Spencer McIntyre
|
75e63992d6
|
Write an exploit for ProxyShell
|
2021-08-18 10:50:34 -04:00 |
|
|
Jack Heysel
|
5aa56b303a
|
Land #15539, Fix cve_2018_8453_win32k_priv_esc
Fixes the check method for the above module, prior
to this change the module was not running against 1703.
|
2021-08-13 11:01:58 -04:00 |
|
|
Grant Willcox
|
85ef49a79c
|
Land #15535, Update psexec module to use SMBSHARE option name for consistency
|
2021-08-11 17:41:38 -05:00 |
|
|
Grant Willcox
|
5fdf990f24
|
Land #15519, Lexmark Universal Print Driver Local Privilege Escalation
|
2021-08-11 15:03:53 -05:00 |
|
|
Grant Willcox
|
7b25bd366f
|
Update documentation and fix a few typos so that it reflects latest changes
|
2021-08-11 12:25:36 -05:00 |
|