7ca7c6aee1
Slight efficiency improvements
2023-05-24 17:36:39 -05:00
e80987ea59
First round of updates from review
2023-05-24 13:17:49 -05:00
e78cf054b8
Add in EITW notes
2023-05-24 13:17:49 -05:00
84961e6e09
Add in documentation
2023-05-24 13:17:49 -05:00
9e8d1ed2ea
Add in Java class file, raw source code, and tidy up the module a bit
2023-05-24 13:17:48 -05:00
155319d479
Save work
2023-05-24 13:17:48 -05:00
3faf96aa9d
Check return code on target server responses
2023-05-24 13:17:48 -05:00
5ded2adfb5
Add in code initial code to start supporting JNDI loading of remote classes, currently a bit broken though
2023-05-24 13:17:47 -05:00
d00d339de5
Initial copy with JNDI connection back to LDAP server.
2023-05-24 13:17:47 -05:00
1c57019096
Merge branch 'master' into vsftpd_232
2023-05-24 10:58:22 -04:00
0aee634d67
Put authors on separate lines
2023-05-24 10:48:31 -04:00
240fd65d0c
module, not exploit
2023-05-24 16:30:38 +02:00
623657b072
Logontype changed to OptEnum + better meterpreter session requirement check
2023-05-24 16:28:56 +02:00
3a685849a8
add update_token bridge + make_token module
2023-05-24 10:33:52 +02:00
b327809450
Changes regarding auxiliary modules
...
Changed back some modifications of includes and functions definitions that were related to exploit modules.
2023-05-24 09:28:41 +02:00
e542c50154
Merge branch 'rapid7:master' into dolibarr_16_contact_dump
2023-05-24 09:26:03 +02:00
9e38ed4459
Land #17929 , Linux sudoedit LPE (CVE-2023-22809)
...
Linux sudoedit priv esc (CVE-2023-22809)
2023-05-23 09:30:18 -04:00
120dc877ad
Pr/collab/17430 ( #41 )
...
* Prevent using post modules with the session
It doesn't work reliably because of winpty and how the output is
mangled.
* Set the limit correctly
* Fix Linux PTY downgrade issues
* Remove filtering
The filtering implementation is incomplete and unnecessary.
Filtering is unnecessary because Linux sessions execute a stub on
session start up that uses a combiantion of stty and a fifo to emulate a
PTY-less session. Windows sessions do not need filtering because they
have been explictly marked as being incompatible with the Post API which
is confused by the extra characters.
The filtering implementation is incomplete because it does not account for
echo fragments that are split across lines. It also does not account for
all of the ANSI escape codes.
* Add module docs for enum_ssm
2023-05-22 17:11:16 -04:00
0205bb36d3
change ranking to GreatRanking as stability is CRASH_SERVICE_RESTARTS
2023-05-22 20:09:11 +01:00
6b101b5a4d
make rubocop happy
2023-05-22 18:03:58 +01:00
60f6574bf3
Land #17965 , add module for AD CS cert management
2023-05-22 09:50:53 -05:00
e3823691a1
Add module for AD CS template CRUD operations
2023-05-22 10:28:58 -04:00
f1468a83ed
Added forgotten end
2023-05-21 13:40:52 -04:00
7a9f13c960
Added option to remove sudoers check
2023-05-21 12:18:32 -04:00
4b3d6b59cc
Replaced fail_with with raised error
2023-05-21 12:10:18 -04:00
dc11d818aa
Corrected failwith statement
2023-05-21 00:37:00 -04:00
33e59a291e
Added check for user
2023-05-21 00:26:18 -04:00
e0e214e241
Merge branch 'master' into useradd
2023-05-20 18:21:18 -04:00
ed026e52eb
Fixed echo option so sudo would work
2023-05-20 18:14:46 -04:00
fffc7f514d
Fixed issue with description
2023-05-19 15:24:53 -04:00
c42905fe92
Updated description
2023-05-19 13:45:45 -04:00
d07f2ed633
Set default method to sudo
2023-05-19 13:45:11 -04:00
b077167d73
Redesigned to not use exectuable at all
2023-05-19 13:34:12 -04:00
a8fd4e7aba
Renamed to adduser for consistency
2023-05-19 13:31:55 -04:00
f464401dde
Land #17782 , Add fetch payloads
...
Add http wget cmd based fetch payload for Linux and Windows
2023-05-18 12:18:27 -04:00
548a2d7ab4
Add fetch payloads for Windows and Linux x64
2023-05-18 10:47:29 -05:00
6c88e85d02
Land #17993 , add invscout RPM privesc
2023-05-17 18:56:42 -05:00
21273648a4
Fixed response using double quotes
2023-05-17 12:39:02 -04:00
6882a7cc60
Shortened payload to be readable
2023-05-17 12:05:40 -04:00
ab0b8b8274
Ran msftidy on module
2023-05-17 11:48:09 -04:00
775173381c
Made progress show in dots rather than status
2023-05-17 11:44:37 -04:00
9c888da5cb
Reverted from threading as payload finally works
2023-05-17 11:43:50 -04:00
49e7c2459f
Fixed payload to properly function
2023-05-17 11:40:29 -04:00
9a732a881b
Improve module description
...
Co-authored-by: bcoles <bcoles@gmail.com >
2023-05-17 08:09:25 -04:00
789646dd65
Use better failwith lines
...
Co-authored-by: bcoles <bcoles@gmail.com >
2023-05-17 08:08:59 -04:00
0bc1fdf51d
Add invscout RPM Privilege Escalation
2023-05-17 20:17:55 +10:00
6a846c2c94
Added stub since stopping doesnt exist
2023-05-17 00:44:18 -04:00
f15c9a0bbb
Added cmd useradd payload
2023-05-16 23:16:54 -04:00
2ca5ca1f63
stronger grep
2023-05-16 16:18:14 -04:00
713ec6ae76
Merge branch 'master' into feature/aws_ssm_sessions
2023-05-16 14:39:37 -04:00
Grant Willcox