87176f9d7f
Address Review Comments and add CVE-2021-25297 coverage
2023-02-07 14:18:06 -06:00
c5914d8c99
Insert randomized strings to fix exploit with plugin_output_len
2023-02-07 14:18:05 -06:00
990db5372f
Remove extra payload details, add config check
2023-02-07 14:18:05 -06:00
b042e71b2a
Make Module work for both target url parameters
2023-02-07 14:18:04 -06:00
b606d1ff6b
Add Documentation for Module
...
Fix CVE format
Add Documentation
2023-02-07 14:18:04 -06:00
5846d95b25
Create nagios_xi_configwizards_authenticated_rce.rb
...
Add initial module
2023-02-07 14:18:03 -06:00
676bb2af02
Fix a couple requests from the PR
2023-02-07 09:05:44 -08:00
588bddc950
Fix a couple requests from the PR
2023-02-07 09:05:16 -08:00
53c67653f5
Land #17527 , ManageEngine ServiceDesk Plus RCE (CVE-2022-47966)
...
Merge branch 'land-17527' into upstream-master
2023-02-06 17:37:31 -06:00
f7fb611bcc
Add documentation
2023-02-06 14:35:42 -08:00
89485703dc
Make rubocop happy
2023-02-06 14:23:55 -08:00
9b90343480
Check in the module
2023-02-06 14:21:42 -08:00
4a2dc0d6b0
Land #17598 , modules/exploits/unix/local Add Notes and resolve RuboCop violations
2023-02-06 13:59:19 +00:00
215cfa27b0
Land #17483 , add tomcat 8 priv esc on ubuntu (cve-2016-1240)
2023-02-06 13:53:25 +00:00
475813eb33
Properly labing ZDI vulnerability
2023-02-05 21:48:48 -05:00
59332da8ce
Randomized hard coded strings, modified cmd string, and updated references
2023-02-05 21:42:57 -05:00
ac9caa8894
Removed unnecessary CVE listing
2023-02-05 14:32:04 -05:00
7cff3cc2b0
Updated to include vulnerable versions of software
2023-02-05 13:20:52 -05:00
4b3125d14b
Add module to exploit Cisco RV34x Small Business Routers
2023-02-05 10:15:16 -05:00
a5a7d5dd10
correct cleanup and stabilization
2023-02-05 08:15:38 -05:00
adf5091c7a
modules/exploits/unix/local: Add Notes and resolve RuboCop violations
2023-02-05 15:45:30 +11:00
19b526d584
qubes_mirage_firewall_dos: Fix notes for SideEffects and Reliability
2023-02-05 12:04:59 +11:00
7e19141dfc
Standardize DS names and set OS platforms
...
Update SSM handler code to standardize datastore option names per
@zeroSteiner.
Update payload modules to reflect the OS targets against which they
are to execute.
2023-02-04 19:41:40 -05:00
561b42f105
use exploit retry function
2023-02-04 18:17:42 -05:00
aff14e8e46
tocat to tomcat
2023-02-04 18:17:42 -05:00
e30cae2e40
uncomment needed code
2023-02-04 18:17:42 -05:00
34b1e66f90
tomcat 8 priv esc on ubuntu prebuilt so file
2023-02-04 18:17:41 -05:00
2b09af78e1
tomcat 8 priv esc on ubuntu
2023-02-04 18:17:41 -05:00
687e82a9ed
Satisfy rubocop
2023-02-03 15:29:19 -05:00
f2e5e77e27
Fix bypassuac_injection_winsxs for x64
...
Tested on Windows 8.1, prior to these chagnes the bad railgun definition
would cause the session to crash.
2023-02-03 13:02:53 -05:00
80dbbca020
Land #17371 , Lenovo Diagnostics Driver Privilege Escalation (CVE-2022-3699)
2023-02-03 13:43:04 +00:00
6ab7e177f4
Land #17392 , add F5 Big-IP priv esc module
...
Add a privilege escalation module for F5 that uses
the unsecured MCP socket to create a new root account
2023-02-02 15:10:33 -05:00
99e31c561a
Land #17585 , mac dirty cow add session types
...
Sets missing session types during module initialization
2023-02-02 13:36:43 -05:00
f4ad778bd0
Added missing session types
2023-02-02 13:29:43 -05:00
cfb5a55880
Land #16946 , Add row indicator to show targets command
2023-02-02 17:26:53 +00:00
af2ef53462
Land #17415 , macOS dirty cow priv esc
2023-02-02 12:15:19 -05:00
d1e68e634a
Add row indicator to show targets command
2023-02-02 16:12:19 +00:00
952a4fe37a
Land #17581 , modules: Check datastore ForceExploit before checking if session is root
2023-02-02 10:19:07 +00:00
6f4a17230d
exploits/osx/local/vmware_fusion_lpe: Add notes
2023-02-02 18:46:08 +11:00
a83d070396
exploits/freebsd/local/ip6_setpktopt_uaf_priv_esc: Add Reliability notes
2023-02-02 18:45:43 +11:00
ef87a63bde
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
48a27ab555
Fix the remaining references to the old wiki site.
2023-02-01 21:25:06 -06:00
6870efc34a
Land #17426 , Update all references to old Wiki to point to new docs site
2023-02-01 23:49:20 +00:00
c90a6f9068
Land #17406 , veeam_credential_dump post module
...
Veeam Backup & Recovery and Veeam ONE Monitor credential
capture post module for versions 9.x and 11.x.
2023-02-01 17:29:05 -05:00
076ffbcc65
Merge branch 'mac_dirty_cow' of github.com:timwr/metasploit-framework into mac_dirty_cow
2023-02-01 16:57:36 -05:00
3c7cbf62e6
Updated default payload
2023-02-01 16:56:28 -05:00
595f34fc6f
Merge branch 'master' into mac_dirty_cow
2023-02-01 16:51:09 -05:00
4ba04df138
update http options
2023-02-01 15:12:39 -06:00
cf172d22c8
Get rid of #String.hash in favour of UnixCrypt
2023-02-01 11:02:04 -08:00
1094221468
Merge branch 'rapid7:master' into f5-createuser-privesc
2023-02-01 10:20:43 -08:00
Matthew Dunn