2ed3b771ed
Updated python exploit
2023-12-19 00:26:54 -05:00
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
5a6dc7f9a6
Initial commit of CVE-2023-43654
2023-10-12 09:27:26 -04:00
1058291af9
Land #18314 , Windows Error Reporting RCE (CVE-2023-36874)
2023-09-27 15:25:06 +02:00
be731f330e
Add error checking and randomize the report directory
2023-09-22 14:43:21 -05:00
b4a1bb8fa2
Add docs and support for shell sessions; update exe to work without runtime lib.
2023-09-19 17:50:18 -05:00
8b56dc0117
Land #18250 , CVE-2023-28252: Windows CLFS Driver Privilege Escalation
2023-09-14 10:18:29 +01:00
91e7af4370
Added check, some stealth, and cleaned code
2023-09-05 14:29:13 -05:00
ccba494e61
Exploit working, still needs to be cleaned up
2023-08-29 18:01:44 -05:00
c69e983b30
Add module to create directory structures and upload/run exploit
2023-08-25 15:41:25 -05:00
97dd22032c
Responded to comments, improved stability
2023-08-21 19:20:25 -04:00
bcfc892195
General code clean up
2023-08-04 14:27:14 -04:00
59e3760509
First attempt at CVE-2023-34634
2023-08-03 10:58:07 -05:00
416124705f
Working in metasploit
2023-07-28 03:43:37 -04:00
b15d595de2
Adjust files to be better shared
2023-07-14 12:47:04 -05:00
8edbf73b6f
first release exploit module
2023-07-08 09:48:17 +00:00
7ca7c6aee1
Slight efficiency improvements
2023-05-24 17:36:39 -05:00
9e8d1ed2ea
Add in Java class file, raw source code, and tidy up the module a bit
2023-05-24 13:17:48 -05:00
6d4ee0c071
Add exploit for CVE-2023-21768
2023-03-27 20:08:22 +02:00
34b1e66f90
tomcat 8 priv esc on ubuntu prebuilt so file
2023-02-04 18:17:41 -05:00
2b09af78e1
tomcat 8 priv esc on ubuntu
2023-02-04 18:17:41 -05:00
80dbbca020
Land #17371 , Lenovo Diagnostics Driver Privilege Escalation (CVE-2022-3699)
2023-02-03 13:43:04 +00:00
1f224fd2d3
Rapid7 compiled binary
2023-02-02 11:11:06 -05:00
690d22f759
Rapid7 compiled binary
2023-02-01 10:08:13 -05:00
2c72cc145a
updates to module
2023-01-31 20:05:33 -05:00
fa687d3614
argv instead of hardcoded payload path
2023-01-31 16:02:25 -05:00
8d58eb6279
cve-2022-1043
2023-01-31 16:02:25 -05:00
e99407fe26
Updated pre_compiled binary
2023-01-31 13:37:45 -05:00
4da94325f3
Rubocop
2023-01-19 13:52:58 -05:00
63d9445911
Fix for Win Server 2022 and 2019
2023-01-19 00:52:38 -05:00
2c2bfec4a0
Tested on Windows Build 19044, 19045 and 22000
2023-01-18 01:41:30 -05:00
0dbb0dc8c9
Fix margins for readability and delete file
2023-01-17 17:28:27 -05:00
be7ca91a8f
cve-2022-22942
2023-01-17 15:30:36 -05:00
145589f7a2
Add GetPteBaseW10
2023-01-12 01:15:23 -05:00
d6a5590c06
Land #17265 , Add Exploit for CVE-2020-25736
2022-12-13 18:49:56 +01:00
2fa7e7b2d5
Lenovo Diagnostics Driver Privilege Escaltion (CVE-2022-3699)
2022-12-12 21:53:53 -05:00
cf9e54909c
use 2021 helper name in objective-c code too
2022-12-12 15:55:36 -06:00
96da805014
Fix enumerating emails via ProxyShell
...
The ResolveNames endpoint used to gather emails addresses for targeting
only returns 100 at a time. This updates the module to check if the
search result contains all entries and when it does, it recurses into
itself with a refined search prefix. All results are returned to match
the original functionality instead of enumerating and halting once one
that's suitable for exploitation has been found.
2022-12-02 15:58:50 -05:00
29d57dde66
Consolidate into ProxyMaybeShell
2022-11-18 17:01:01 -05:00
fc7594dbc8
Add exploit for CVE-2022-41082 AKA ProxyNotShell
2022-11-18 17:00:27 -05:00
d8f2b50b07
add compiled exploit and source
2022-11-17 17:16:08 -06:00
ea486169b4
use erb template for objective-c code
2022-11-17 11:55:19 -06:00
27d4f45e09
add documentation and exploit file
2022-11-15 12:55:00 -06:00
e27dbd2787
Land #16794,Add exploit for CVE-2022-34918
...
Merge branch 'land-16794' into upstream-master
2022-09-27 16:37:52 -05:00
a41ec9388f
Land #16725 , Add ManageEngine ADAudit Plus and DataSecurity Plus Xnode enum modules, docs and mixin (CVE-2020–11532)
2022-09-01 08:46:36 -05:00
d6dabd4bfb
additional code review improvements for xnode auxiliary modules/lib/docs
2022-07-28 15:12:00 +03:00
78dae84871
Updates to the C source code (execl instead of execve, removal of some old comments)
2022-07-25 22:18:47 +02:00
37f1fdd47b
Add module docs, add Ubuntu 22.04 offsets, update check method
2022-07-22 03:30:03 +02:00
73db035e57
Add more offsets to the exploit, clean up the exploit C source, add check method
2022-07-21 01:22:20 +02:00
Jack Heysel