 bwatters-r7
|
117924e41a
|
Break out methods to prepare for shipping to libraries
|
2020-04-27 16:38:11 -05:00 |
|
|
William Vu
|
cefeb9ffde
|
Randomize dir in desktopcentral_deserialization
Also apply RuboCop.
|
2020-04-27 16:13:22 -05:00 |
|
|
bwatters-r7
|
a490fe3c1d
|
Cleanup before breakup
|
2020-04-27 16:07:45 -05:00 |
|
|
Christophe De La Fuente
|
af239303d2
|
Land #13257, .NET Deserialization Library Improvements
|
2020-04-27 13:05:38 +02:00 |
|
|
Shelby Pace
|
640eb77403
|
Land #13260, add docker wincred module
|
2020-04-24 10:02:38 -05:00 |
|
|
Shelby Pace
|
df8d6b7af1
|
add check for vulnerable path
|
2020-04-24 09:56:42 -05:00 |
|
|
bwatters-r7
|
38092d512e
|
The timeout needs to be very long
|
2020-04-23 17:56:51 -05:00 |
|
|
bwatters-r7
|
45eaa4c2f9
|
add injection with uso loader
|
2020-04-23 15:17:12 -05:00 |
|
|
bwatters-r7
|
e380c63158
|
Add md5 check on payload
|
2020-04-23 08:16:21 -05:00 |
|
|
bwatters-r7
|
1ad9b181a8
|
Overwrite successful, attempting trigger
|
2020-04-22 19:22:19 -05:00 |
|
|
bwatters-r7
|
1c757f90db
|
bcoles suggestions
|
2020-04-22 18:08:58 -05:00 |
|
|
bwatters-r7
|
0bbb822fe4
|
Working through mountpoint issues
|
2020-04-21 09:54:45 -05:00 |
|
|
William Vu
|
c5df5355ac
|
Update my module documentation to the new standard
Also update CheckModule to match current style and best practices.
|
2020-04-20 20:06:52 -05:00 |
|
|
bwatters-r7
|
ca148c772e
|
minor import changes searching for bug
|
2020-04-20 09:32:55 -05:00 |
|
|
bwatters-r7
|
a8bed1516b
|
Reverse it....
|
2020-04-17 16:41:00 -05:00 |
|
|
Alan Foster
|
f2c3fc5f00
|
Rubocop recently landed modules
|
2020-04-17 11:55:04 +01:00 |
|
|
gwillcox-r7
|
d759fbaed3
|
Land #13259, Miscellaneous fixes for @wvu's modules and documentation
|
2020-04-16 22:10:10 -05:00 |
|
|
Spencer McIntyre
|
62a000fe32
|
Land #13193, add updates to the trusted service path LPE
|
2020-04-16 11:41:02 -04:00 |
|
|
bwatters-r7
|
b79faae2bd
|
In AI we trust
|
2020-04-16 08:19:20 -05:00 |
|
|
bwatters-r7
|
1b5d75f00c
|
Alan updates, Rubocop complaints.
|
2020-04-15 17:47:17 -05:00 |
|
|
bwatters-r7
|
2166ab04ac
|
First swipe at CVE-2019-15752
|
2020-04-15 16:52:45 -05:00 |
|
|
William Vu
|
e248e2ed43
|
Consolidate CmdStager flavors to symbols
As per the API. Strings are fine, but they're supposed to be symbols.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
6523dd81c9
|
Add comment clarifying build number
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
3aa95f98eb
|
Move RPORT back to where I prefer it
It was next to SSL before because I wanted to indicate the port was SSL.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
7cf7211b46
|
Refactor desktopcentral_deserialization check
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
5cf0f888ee
|
Remove notes-level version information
Not sure I like this. Don't want people ot copypasta it.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
02ba071b84
|
Punctuate check prints to match CheckCodes
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
1fdafc5104
|
"Correct" Windows platform in ManageEngine exploit
|
2020-04-15 15:47:50 -05:00 |
|
|
Spencer McIntyre
|
6ae3df69c6
|
Update the dnn_cookie_deserialization_rce for the new library
|
2020-04-15 15:13:42 -04:00 |
|
|
Spencer McIntyre
|
b37adbeeed
|
Update existing modules to use explicit parameters
|
2020-04-15 15:13:41 -04:00 |
|
|
h00die
|
c7069fbd69
|
remove writable from lib, fix check
|
2020-04-11 12:47:53 -04:00 |
|
|
h00die
|
a01d50de38
|
add windows writable? and update unqouted service path
|
2020-04-10 14:54:20 -04:00 |
|
|
h00die
|
f85e9f79c5
|
add url
|
2020-04-03 22:18:38 -04:00 |
|
|
h00die
|
6d8fc1dad6
|
unquoted service path updates
|
2020-04-03 22:00:15 -04:00 |
|
|
bwatters-r7
|
9474b5fda1
|
Land #13187, Add LPE Exploit For CVE-2020-0796 (AKA: SMBGhost) (take2)
Merge branch 'land-13187' into upstream-master
|
2020-04-03 11:25:48 -05:00 |
|
|
bwatters-r7
|
182bd67287
|
Land #13187, Add LPE Exploit For CVE-2020-0796 (AKA: SMBGhost)
Merge branch 'land-13187' into upstream-master
|
2020-04-03 11:19:50 -05:00 |
|
|
Spencer McIntyre
|
94f18cc67a
|
Add the AKA reference to CoronaBlue for accuracy
|
2020-04-03 11:01:43 -04:00 |
|
|
Spencer McIntyre
|
126b9e2172
|
Address PR comments for CVE-2020-0796
|
2020-04-03 08:56:53 -04:00 |
|
|
Spencer McIntyre
|
276475c308
|
Check compression in the check method for SMBGhost
|
2020-04-02 17:35:17 -04:00 |
|
|
Spencer McIntyre
|
3392fa18d4
|
Add the x64 LPE exploit for CVE-2020-0796
|
2020-04-02 17:22:00 -04:00 |
|
|
Adam Galway
|
e8d134fc56
|
Land #12096, DNN cookie desrialization exploit
|
2020-04-02 15:57:46 +01:00 |
|
|
bwatters-r7
|
beb53254c7
|
Land #13122, Add Exploit Module For CVE-2020-0646 (SharePoint Workflows XOML RCE)
Merge branch 'land-13122' into upstream-master
|
2020-03-25 11:24:15 -05:00 |
|
|
Spencer McIntyre
|
54edd201e4
|
Cleanup cmdstager options
|
2020-03-24 17:14:47 -04:00 |
|
|
Spencer McIntyre
|
a69f3eb946
|
Use the correct its instead of it's
|
2020-03-24 16:44:18 -04:00 |
|
|
Spencer McIntyre
|
a0cd00dac7
|
Cleanup module doc and comments for CVE-2020-0646
|
2020-03-24 10:15:58 -04:00 |
|
|
h00die
|
0b4c047411
|
doc cleanup
|
2020-03-24 08:47:21 -04:00 |
|
|
Spencer McIntyre
|
0832604131
|
Finish up the CVE-2020-0646 SharePoint RCE
|
2020-03-23 18:14:28 -04:00 |
|
|
Spencer McIntyre
|
6c24ed4c96
|
Initial SharePoint WorkFlows XOML RCE module
|
2020-03-20 17:57:54 -04:00 |
|
|
William Vu
|
ddefafab78
|
Revert "Patch serialVersionUID in the library"
This reverts commit eaf8554e69.
|
2020-03-13 17:36:40 -05:00 |
|
|
Spencer McIntyre
|
2a5c43302b
|
Land #13071, add ManageEngine Desktop Central RCE
|
2020-03-13 15:20:57 -04:00 |
|