747d328bcb
Land #18786 , Fix option collision in service_persistence
2024-02-14 17:25:15 +01:00
29524fa7f8
Fix option collision in service_persistence
...
The option `SHELLPATH` collide with `cmd/unix/reverse_netcat`,
resulting in abnormal backdoors. This commit rename it to BACKDOOR_PATH
2024-02-03 23:18:45 +08:00
cf2f76e6a2
cve-2024-21626 review
2024-02-02 16:27:02 -05:00
1c73cf938f
cve-2024-21626
2024-02-01 15:28:04 -05:00
904e34434e
Land #18626 , SaltStack Minion Deployer
...
This PR adds an exploit module which allows for
a user who has compromised a host acting as a
SaltStack Master to deploy payloads to the Minions
attached to that Master.
2024-01-23 11:58:38 -05:00
a8d46b3e7a
Land #18627 , Ansible: post gather module, payload deployer, and file reader
2024-01-17 15:26:25 +01:00
e711c9ea43
ansible review
2024-01-10 17:16:57 -05:00
2cfcb74303
saltstack review
2024-01-10 17:09:02 -05:00
e9296d1add
saltstack review
2024-01-10 17:04:03 -05:00
80e9f1b97d
saltstack salt-master review
2024-01-06 06:38:59 -05:00
11c12fcb6d
review comments
2023-12-23 13:23:34 -05:00
a5698f6aa6
review comments
2023-12-23 12:18:06 -05:00
fb26c93291
Land #18541 , Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
2023-12-20 20:04:21 +01:00
065abf6b92
Rubocop, doc scenario update
2023-12-19 12:30:02 -05:00
4e61596e7a
Check Build ID before running exploit
2023-12-19 12:15:35 -05:00
549ee43df9
Update docs description minor comments
2023-12-19 00:32:21 -05:00
02302439a0
saltstack salt minion deployer
2023-12-16 10:13:46 -05:00
c911ec1413
ansible collection
2023-12-16 07:16:26 -05:00
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
eca611aaac
review
2023-12-05 16:18:39 -05:00
22242732d9
working cve-2022-0492
2023-11-28 15:25:53 -05:00
b171b5e77c
working cve-2022-0492
2023-11-28 15:16:18 -05:00
4ae62a431b
not-working docker escape
2023-11-28 13:44:08 -05:00
557a15a115
spelling fixes on docs
2023-10-10 14:46:18 -04:00
e692e927dc
review fixes
2023-05-05 16:43:47 -04:00
95562e04aa
sudoedit work
2023-05-02 18:39:59 -04:00
d454b2e195
cve-2023-22809
2023-04-25 20:54:48 -04:00
9c9eac28a7
Land #17874 , VMware Workspace One Access mr_me Hekate LPE
...
Merge branch 'land-17874' into upstream-master
2023-04-18 19:29:39 -05:00
37130e5a3d
move asan docs
2023-04-16 10:19:43 -04:00
30cf40a4f1
VMware Workspace One Acces LPE
2023-04-12 15:36:17 -04:00
ec7347cd49
Land #17509 , tomcat 7 priv esc on rhel based systems (cve-2016-5425)
2023-03-14 10:16:18 +00:00
a5a7d5dd10
correct cleanup and stabilization
2023-02-05 08:15:38 -05:00
561b42f105
use exploit retry function
2023-02-04 18:17:42 -05:00
6aa6f5176b
touch up verbiage and stuff
2023-02-04 18:17:42 -05:00
2b09af78e1
tomcat 8 priv esc on ubuntu
2023-02-04 18:17:41 -05:00
6ab7e177f4
Land #17392 , add F5 Big-IP priv esc module
...
Add a privilege escalation module for F5 that uses
the unsecured MCP socket to create a new root account
2023-02-02 15:10:33 -05:00
6870efc34a
Land #17426 , Update all references to old Wiki to point to new docs site
2023-02-01 23:49:20 +00:00
cf172d22c8
Get rid of #String.hash in favour of UnixCrypt
2023-02-01 11:02:04 -08:00
1094221468
Merge branch 'rapid7:master' into f5-createuser-privesc
2023-02-01 10:20:43 -08:00
638a1c519d
Update documentation/modules/exploit/linux/local/f5_create_user.md
...
Better demo exploit
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-02-01 10:14:25 -08:00
5a374533af
cve-2022-1043
2023-01-31 16:02:25 -05:00
8d58eb6279
cve-2022-1043
2023-01-31 16:02:25 -05:00
62d43a6e96
use exploit retry function
2023-01-28 07:44:53 -05:00
6043d0ffba
Update all links from Wiki site to new docs site.
2023-01-27 09:58:53 -06:00
633c58a0ff
tomcat on rhel priv esc
2023-01-19 15:28:10 -05:00
be7ca91a8f
cve-2022-22942
2023-01-17 15:30:36 -05:00
2ec77e6d95
Merge branch 'master' into f5-createuser-privesc
2022-12-15 13:11:26 -08:00
e7e2849f6d
Land #17183 , Zimbra fixes
2022-12-06 15:38:37 +01:00
6877304bac
exploit for cve-2021-22015 vcenter priv esc
2022-11-20 11:29:49 -05:00
Christophe De La Fuente