 Brendan Coles
|
9c3368f325
|
Add Evince CBT File Command Injection module
|
2019-02-03 05:38:56 +00:00 |
|
|
William Vu
|
b7bc52d20b
|
Fix HTTP/SMB mixin order to restore SSL option
Mixin order matters. Mixins kinda suck.
|
2019-01-29 11:09:34 -06:00 |
|
|
Shelby Pace
|
2ae6142de7
|
Land #11243, Add ASan SUID Privesc
|
2019-01-22 15:50:53 -06:00 |
|
|
Brendan Coles
|
060d20694d
|
Attribution
|
2019-01-20 09:18:43 +00:00 |
|
|
Clément Notin
|
31a7b13c19
|
ms17_010_psexec: fix RHOST in "authenticating..." message
|
2019-01-16 11:23:21 +01:00 |
|
|
Brent Cook
|
1947bae45b
|
Land #11230, add JuicyPotato local privilege escalation
|
2019-01-15 21:20:25 -06:00 |
|
|
Wei Chen
|
27d6fffdad
|
Land #11125, Import/generate ysoserial Java serialization objects
|
2019-01-15 17:09:56 -06:00 |
|
|
h00die
|
a73fe9433b
|
land #11169 blueman priv esc on linux
|
2019-01-15 10:32:46 -05:00 |
|
|
bcoles
|
8c636f27d5
|
Update check method to confirm vulnerability
|
2019-01-15 11:31:31 +11:00 |
|
|
Wei Chen
|
47f8738f74
|
Add Imran Rashid to CVE-2018-11770 credit
|
2019-01-14 15:28:08 -06:00 |
|
|
Wei Chen
|
52ff0a8b75
|
Update exploits/linux/http/spark_unauth_rce as CVE-2018-11770
|
2019-01-14 15:10:29 -06:00 |
|
|
Brendan Coles
|
c6f4eda7f9
|
Add ASan SUID Executable Privilege Escalation module
|
2019-01-12 09:14:20 +00:00 |
|
|
phra
|
e69d509bdf
|
chore: update description and ranking
|
2019-01-12 04:32:21 +01:00 |
|
|
phra
|
3a865a0c05
|
feat: spawn as NT AUTHORITY\SYSTEM
|
2019-01-12 04:03:26 +01:00 |
|
|
William Vu
|
e9a8d5708a
|
Land #11234, @bcoles revisionism
|
2019-01-11 20:15:34 -06:00 |
|
|
phra
|
149f895329
|
feat: add LOGFILE support for debug
|
2019-01-11 18:21:54 +01:00 |
|
|
phra
|
dca99552e6
|
feat: pass payload length to the dll
|
2019-01-11 16:28:49 +01:00 |
|
|
phra
|
7653d64c4a
|
fix: improve exploit check
|
2019-01-11 15:38:57 +01:00 |
|
|
Brendan Coles
|
24f807490f
|
revisionism
|
2019-01-10 19:19:14 +00:00 |
|
|
Brent Cook
|
9f8bac59f7
|
Land #11215, success
|
2019-01-10 12:57:46 -06:00 |
|
|
sinn3r
|
74330f87dc
|
Land #11223 - ueb priv esc suggestion
ueb priv esc suggestion.
|
2019-01-10 10:35:28 -06:00 |
|
|
phra
|
dc2d3c5774
|
feat: add juicy potato post module, fixes #11229
|
2019-01-10 17:20:43 +01:00 |
|
|
Jacob Robles
|
2f939481e7
|
Land #11206, add coldfusion ckeditor file upload
|
2019-01-10 07:27:38 -06:00 |
|
|
Jacob Robles
|
b81f59e7b1
|
Fix targets and syntax changes
|
2019-01-10 06:39:45 -06:00 |
|
|
h00die
|
799a79b715
|
ueb priv esc suggestion
|
2019-01-09 20:28:53 -05:00 |
|
|
Jacob Robles
|
0c984fa232
|
Fix messages /successfuly/successfully
|
2019-01-09 06:32:22 -06:00 |
|
|
Jacob Robles
|
16b8cf7059
|
Land #11148, Adding Module MailCleaner RCE
|
2019-01-08 14:10:31 -06:00 |
|
|
Jacob Robles
|
a0acfa79d7
|
Target payloads
|
2019-01-08 13:27:26 -06:00 |
|
|
Qazeer
|
a63c057c3a
|
Integrate bcoles' comments (filename generation, conditional block improvement, etc.)
|
2019-01-06 22:50:46 +01:00 |
|
|
Qazeer
|
c03466d2f2
|
Fixed date format issue and added Bugtraq ID
|
2019-01-06 14:34:40 +01:00 |
|
|
Qazeer
|
4644ad8966
|
Add CVE-2018-15961 Adobe ColdFusion CKEditor unrestricted file upload
|
2019-01-06 04:55:20 +01:00 |
|
|
Shelby Pace
|
29e7c49332
|
Land #10444, add Consul rexec RCE module
|
2018-12-28 09:14:28 -06:00 |
|
|
Shelby Pace
|
fb8f06b2f5
|
Land #10443, add Consul service RCE module
|
2018-12-28 08:33:56 -06:00 |
|
|
Mehmet İnce
|
4e8ad22a7a
|
Adding CVE number
|
2018-12-26 13:15:36 +03:00 |
|
|
Mehmet İnce
|
fa542b9691
|
Adding platform and arch to top level
|
2018-12-25 15:56:25 +03:00 |
|
|
Quentin Kaiser
|
18c844623a
|
Remove extra spaces.
|
2018-12-24 13:48:07 +01:00 |
|
|
Quentin Kaiser
|
e10792f4e6
|
Remove extra space.
|
2018-12-24 13:30:03 +01:00 |
|
|
Brendan Coles
|
98dc59728e
|
Add blueman set_dhcp_handler D-Bus Privilege Escalation
|
2018-12-24 08:03:55 +00:00 |
|
|
Brent Cook
|
b9742802aa
|
Land #11137, Clean up linux/local/vmware_alsa_config exploit module
|
2018-12-21 17:04:11 -06:00 |
|
|
Jacob Robles
|
4bc871c499
|
Add CmdStager to erlang_cookie_rce
|
2018-12-21 07:33:37 -06:00 |
|
|
Quentin Kaiser
|
bf2de42077
|
Now supports all version of Consul.
|
2018-12-20 18:56:07 +01:00 |
|
|
Quentin Kaiser
|
2919b970cd
|
Implement execution checks with a timeout limit so we don't leave zombie checks running in background.
|
2018-12-20 18:41:35 +01:00 |
|
|
Quentin Kaiser
|
ba5c40db77
|
No need for CVE field.
|
2018-12-20 18:18:53 +01:00 |
|
|
Mehmet İnce
|
9481ad04f2
|
Adding support for ARCH_CMD and updating docs
|
2018-12-20 12:12:01 +03:00 |
|
|
Mehmet İnce
|
68ceb08957
|
Fixing minor issues such as err codes
|
2018-12-19 22:17:34 +03:00 |
|
|
Mehmet İnce
|
e5c8c18ded
|
Adding Mailcleaner exec
|
2018-12-19 17:35:40 +03:00 |
|
|
Jacob Robles
|
6921b79890
|
Land #11089, Erlang cookie rce exploit module
|
2018-12-19 08:02:40 -06:00 |
|
|
asoto-r7
|
60f3cfbb79
|
ysoserial: Cleaned up ysoserial payload in hp_imc_java_deserialize
|
2018-12-18 15:17:51 -06:00 |
|
|
Milton-Valencia
|
bb758f9a61
|
I didn't forget msftidy I swear
|
2018-12-18 14:55:12 -06:00 |
|
|
Milton-Valencia
|
8a2a605a99
|
added targets
|
2018-12-18 14:50:57 -06:00 |
|