b5e88f24df
feedback from space
2022-03-09 06:06:53 +00:00
3b524360ed
Explicitly specify server/client versions, fix logger crash, and specify jtr format
2022-03-09 01:37:22 +00:00
ae0f1729c1
Update arch check
2022-03-08 18:21:34 -06:00
22f88f9ab7
Add docs
2022-03-08 23:52:24 +00:00
53772fa366
Gracefully handle relay host timeout, fix typos, and move SMBHashCapture location
2022-03-08 23:52:24 +00:00
bcb0850e07
Rename SMBHOST
2022-03-08 23:52:23 +00:00
144fc5eddf
Add smarter targetlist support
2022-03-08 23:52:23 +00:00
25265c7a7b
Linting
2022-03-08 23:52:23 +00:00
3e68e298a1
Add targets
2022-03-08 23:52:23 +00:00
e02021ee91
Fix database cred reporting and error handling
2022-03-08 23:52:23 +00:00
507b1dab2b
Apply PR feedback
2022-03-08 23:52:22 +00:00
b4fe2502aa
Update smb_relay to support smb 2 and smb3
2022-03-08 23:52:22 +00:00
fb7f2ba326
Fix arch check and on_session cd
2022-03-08 13:16:32 -06:00
a195c65121
change default suid binary from /usr/bin/sudo to /bin/passwd
2022-03-08 16:37:07 +00:00
300ab51079
feedback from jvoisin
2022-03-08 16:22:31 +00:00
0c7806222f
msftidy
2022-03-08 10:28:04 +00:00
a614f9c2aa
add a description and PrependFork
2022-03-08 10:17:06 +00:00
7ca6a28c05
embed payload inside exploit and add check method
2022-03-08 09:51:49 +00:00
5bd48d0a7d
initial commit of dirtypipe
2022-03-07 15:49:27 +00:00
42e0c027ab
Land #16248 , Added Apache APISIX RCE module
2022-03-07 09:47:04 -05:00
422f96fbbe
Fix a plugin name reference
...
The plugin is actually "batch-requests", change the reference to be more
clear.
2022-03-07 09:46:15 -05:00
e1079a587d
remove cache flush from shellcode, dont need it
2022-03-06 23:02:02 +00:00
aa87d5d387
add fixed definitions and exploit
2022-03-04 15:56:28 -06:00
d7c992f402
Need to use POST to check whether the batch request is enabled or not
2022-03-04 21:00:32 +01:00
9ef50a2d23
Fixup typos
2022-03-04 12:34:14 -05:00
83b2f5a128
Land #16268 , Update check comhijack
2022-03-04 09:59:49 -05:00
ad2fab6fee
Land #16153 , read full response on smtp send/recv
2022-03-04 01:24:46 +00:00
ca4ed9affe
Added logic to treat the two ways of execute command
...
If we have the API token we can execute command using the parameter
`filter_func` or `script`, and if there is an IP restriction
enabled by the plugin ip-restriction we can bypass this restiction if
the plugin batch-request is also enabled.
2022-03-04 02:13:09 +01:00
fb658fbb13
Land #16245 , pfSense Authenticated File Write (CVE-2021-41282)
...
Merge branch 'land-16245' into upstream-master
2022-03-03 15:08:34 -06:00
3f35524c61
Rubocop fixes
2022-03-03 13:02:55 -06:00
f0878f4d1a
Improve check method and add autocheck
2022-03-03 12:52:05 -06:00
6be3443680
Land #16103 , LPE in polkit's pkexec (CVE-2021-4034)
2022-03-03 09:24:11 -05:00
0463373756
Simplify finding pkexec
2022-03-03 09:19:45 -05:00
460584b079
Improved server header validation
2022-03-03 12:48:37 +01:00
a0afba45aa
Remove unnecessary stuffs
2022-03-03 02:00:51 +01:00
e649fe3f69
Fix some markdown issues, update docs and add arch check for payloads
2022-03-02 16:30:52 -06:00
0d8933d162
Removed else statements from check in favor of implicit return
2022-03-02 22:42:08 +01:00
41236232e2
WIP - add clean up function
2022-03-02 17:47:58 +01:00
06e897436c
Add Fedora results to docs and some minor final cleanup
2022-03-02 09:12:01 -06:00
7aa9547e05
WIP - improvements on the request body
2022-03-02 01:43:04 +01:00
58aed837b2
Update docs and options
2022-03-01 14:48:48 -06:00
0516badd8e
Change the way we cd after new session is created
2022-03-01 14:20:07 -06:00
abd03d592e
WIP - adding bypass the IP restriction (CVE-2022-24112)
2022-03-01 19:00:59 +01:00
ea2b29661f
Fix typo
2022-03-01 17:13:20 +01:00
0081811c52
Land #16185 , Firefox CVE-2020-26950 use after free browser exploit
...
Merge branch 'land-16185' into upstream-master
2022-02-28 14:38:23 -06:00
ad7bd6d623
Added Apache APISIX default API Token RCE module
...
Added module that laverage the default admin API token for Apache APISIX
to add malicious route which leads to the remote LUA code execution
through the script parameter added in the 2.x version.
2022-02-28 18:09:18 +01:00
65e16a1a72
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
2022-02-27 18:12:54 -08:00
579811418f
update documentation with note about Firefox 82.0.1
2022-02-26 12:35:38 +00:00
40bb5e2afa
correct return val for definition, add module
2022-02-25 18:13:49 -06:00
ecaf8b1ba9
Land #16204 , Hikvision Unauthenticated RCE (CVE-2021-36260)
...
Merge branch 'land-16204' into upstream-master
2022-02-25 16:37:08 -06:00
Tim W