 space-r7
|
175c428ff9
|
remove on_new_session logic
|
2022-08-02 13:41:23 -05:00 |
|
|
space-r7
|
ea1207d6e1
|
add authentication
|
2022-08-02 12:31:52 -05:00 |
|
|
Spencer McIntyre
|
a0058c03b7
|
Land #16837, MobileIron Core Log4Shell RCE Module
|
2022-08-02 13:25:52 -04:00 |
|
|
Grant Willcox
|
f0e62de46a
|
Add CVE-2022-35405 docs and module
|
2022-08-02 11:57:56 -05:00 |
|
|
Spencer McIntyre
|
207862a810
|
Update module metadata now that it's disclosed
|
2022-08-02 12:13:34 -04:00 |
|
|
Spencer McIntyre
|
ef8fe215e1
|
Finish up an exploit for the first bug
|
2022-08-02 12:13:28 -04:00 |
|
|
bwatters
|
d71350dfe6
|
Remove superfluous code and add extra check
|
2022-08-02 11:04:13 -05:00 |
|
|
Ron Bowes
|
d86e666e18
|
Change Platform to 'win'
|
2022-08-01 15:37:58 -07:00 |
|
|
Ron Bowes
|
c66f98bae6
|
Make lint happy
|
2022-08-01 10:03:35 -07:00 |
|
|
Ron Bowes
|
7ee0a78ffc
|
Change to using monotonic clock
|
2022-08-01 10:02:00 -07:00 |
|
|
Ron Bowes
|
e7edafbcfb
|
Throw errors in the rar-generator library rather than returning nil
|
2022-08-01 09:54:31 -07:00 |
|
|
Ron Bowes
|
110e9ddeee
|
Set stance
|
2022-08-01 09:47:58 -07:00 |
|
|
Jake Baines
|
b00cadfbeb
|
Initial commit of MobileIron Core Log4Shell exploitation (CVE-2021-44228)
|
2022-07-29 10:31:15 -07:00 |
|
|
Grant Willcox
|
7df60f71b6
|
Remove SCHELEVATOR echo statement as its not needed anymore
|
2022-07-28 11:02:59 -05:00 |
|
|
Ron Bowes
|
e76ef61452
|
Move a warning into the exploit function
|
2022-07-27 12:48:56 -07:00 |
|
|
Ron Bowes
|
f279e8d6ca
|
Split the CVE-2022-30333 unrar module into two different modules with a shared mixin to generate the file
|
2022-07-27 12:45:47 -07:00 |
|
|
Giacomo Casoni
|
76f6eda5a9
|
Using FileDropper Mixin
|
2022-07-27 19:32:50 +02:00 |
|
|
space-r7
|
d6d51eecb0
|
manually delete file
|
2022-07-27 08:50:00 -05:00 |
|
|
Ron Bowes
|
7a79b8cbc2
|
Some fixes for Christophe's review
|
2022-07-26 09:24:33 -07:00 |
|
|
Redouane NIBOUCHA
|
ae9932d921
|
Rubocop fixes, register_dir_for_cleanup instead of register_file_for_cleanup in upload_source
|
2022-07-25 21:31:20 +02:00 |
|
|
Grant Willcox
|
72b1dbfeee
|
Remove code that could cause check method to fail, fix up some documentation errors and add in scenario, and generally address some review comments
|
2022-07-25 13:05:04 -05:00 |
|
|
Nuri Çilengir
|
8b42e893b1
|
Update roxy_wi_exec.rb
|
2022-07-25 16:45:44 +00:00 |
|
|
space-r7
|
24ab27bdfe
|
add x86 arch and additional check for response
|
2022-07-25 11:16:26 -05:00 |
|
|
Nuri Çilengir
|
eca8af4e2a
|
Update roxy_wi_exec.rb
|
2022-07-25 16:13:14 +00:00 |
|
|
Nuri Çilengir
|
b16da0fe92
|
Update roxy_wi_exec.rb
|
2022-07-25 16:05:20 +00:00 |
|
|
Redouane NIBOUCHA
|
88d069a77d
|
Add option for compiling the exploit on the target
|
2022-07-25 01:08:53 +02:00 |
|
|
Niboucha Redouane
|
9d3a57c2c5
|
Update the check method
Co-authored-by: bcoles <bcoles@gmail.com>
|
2022-07-23 02:44:26 +02:00 |
|
|
Ron Bowes
|
b4d2294255
|
Use vprint instead of print for some status messages, and clean up some comments
|
2022-07-22 10:01:27 -07:00 |
|
|
Ron Bowes
|
d63912a1b8
|
Use better thread synchronization methods
|
2022-07-22 09:59:04 -07:00 |
|
|
Ron Bowes
|
fe99eb0d0a
|
Whoops, better lint - needed -A instead of -a
|
2022-07-22 09:52:37 -07:00 |
|
|
Ron Bowes
|
e6282c3ff8
|
Remove win_cmd
|
2022-07-22 09:49:33 -07:00 |
|
|
Ron Bowes
|
f3731191a1
|
Add timeouts for the reverse connections using IO.select()
|
2022-07-22 09:45:53 -07:00 |
|
|
Nuri Çilengir
|
bc0b27e1e2
|
Apply suggestions from code review
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-07-22 12:58:46 +00:00 |
|
|
Nuri Çilengir
|
fc3b08fb8b
|
Apply suggestions from code review
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-07-22 12:51:40 +00:00 |
|
|
Redouane NIBOUCHA
|
37f1fdd47b
|
Add module docs, add Ubuntu 22.04 offsets, update check method
|
2022-07-22 03:30:03 +02:00 |
|
|
space-r7
|
e0a5bfd7b3
|
remove opts used for debugging
|
2022-07-21 18:50:23 -05:00 |
|
|
space-r7
|
e1b0e871b3
|
add finished module and docs
|
2022-07-21 18:33:56 -05:00 |
|
|
Grant Willcox
|
e91beedc4a
|
Rubocop fixes
|
2022-07-21 17:01:56 -05:00 |
|
|
Ron Bowes
|
8c729e8414
|
Add Comm
|
2022-07-21 08:58:28 -07:00 |
|
|
Nuri Çilengir
|
ebe61b50a7
|
Fixed parameter quotes
|
2022-07-21 12:25:29 +00:00 |
|
|
Nuri Çilengir
|
d23c175f28
|
Added AutoCheck and CmdStager
|
2022-07-21 11:39:58 +00:00 |
|
|
Redouane NIBOUCHA
|
73db035e57
|
Add more offsets to the exploit, clean up the exploit C source, add check method
|
2022-07-21 01:22:20 +02:00 |
|
|
Ron Bowes
|
e316693bdc
|
Lint
|
2022-07-20 13:39:20 -07:00 |
|
|
Ron Bowes
|
09c1cf4308
|
Fix the CRC32 errors in the RAR file
|
2022-07-20 12:34:10 -07:00 |
|
|
Redouane NIBOUCHA
|
fe2e413426
|
Add exploit for CVE-2022-34918
|
2022-07-20 13:51:22 +02:00 |
|
|
space-r7
|
a5cb271b21
|
add initial module work
|
2022-07-19 17:25:57 -05:00 |
|
|
Ron Bowes
|
2974f55126
|
Better description and more random
|
2022-07-19 14:18:11 -07:00 |
|
|
Ron Bowes
|
3401752fa7
|
Check in the unrar module for cve-2022-30333
|
2022-07-19 14:05:15 -07:00 |
|
|
Grant Willcox
|
a7b379f292
|
Fix up check code segment that would never be reached due to if/else statement above
|
2022-07-19 16:03:44 -05:00 |
|
|
Grant Willcox
|
59ea337c6b
|
Fix up CVE format, add in Notes section
|
2022-07-19 15:58:11 -05:00 |
|