4e6176d9ca
Finish exploit CVE-2022-22965
2022-04-07 15:22:18 +02:00
94e0eec249
Land #16082 , Add ShadowMitmDispatcher to the smb_shadow module
2022-04-06 11:45:59 +02:00
d60754ea37
Land #16401 , add CVE-2022-22616 to osx_gatekeeper_bypass
2022-04-06 07:57:32 +01:00
8495bff61c
Merge master and update the smb_shadow module
...
Add comments detailing the technique used to attack SMBv3. Remove some
comments that are no longer needed. Fix Gemfile.lock conflict.
2022-04-06 07:06:45 +09:00
4c8c32b3ff
set file header to Contents dir, check safari vers
2022-04-05 10:16:59 -05:00
e800dcb597
Add in documentation file
2022-04-04 12:05:28 -05:00
7e010cbde2
Merge master and update smb_shadow + dispatcher
...
The smb_shadow module can confirm the server smb version supported with
the ConfirmServerDialect option. The shadow_mitm_dispatcher closes each
stream before opening a new one to prevent leaking file descriptors.
2022-04-02 10:39:02 +09:00
0505dff7e3
add option in verification steps
2022-04-01 18:03:49 -05:00
e9e1e26def
add support for CVE-2022-22616, update docs
2022-04-01 17:50:33 -05:00
211626e7ce
Fix the check method, add docs
2022-03-31 09:01:08 -04:00
4cd021ce4b
Add exploit/android/adb/adb_server_exec documentation
2022-03-21 00:37:15 +00:00
b4de9fa92a
Land #16344 , Add module for CVE-2022-21999 and More Railgun Definitions
...
Merge branch 'land-16344' into upstream-master
2022-03-16 08:37:05 -05:00
4a8707982a
fix module name in output
2022-03-14 09:35:56 -05:00
c646d01671
add systems tested
2022-03-14 09:17:43 -05:00
99664efed7
use full user name, add test output to docs
2022-03-14 09:15:36 -05:00
07e6eef201
rename module, modify check
2022-03-10 17:02:58 -06:00
b747e55dda
Land #16303 , add Dirty Pipe exploit
2022-03-10 11:16:28 -06:00
872b9c9a7c
modify docs to reflect changes, remove 'return'
2022-03-10 10:39:32 -06:00
bcc9d01958
add documentation
2022-03-09 08:34:20 +00:00
22f88f9ab7
Add docs
2022-03-08 23:52:24 +00:00
42e0c027ab
Land #16248 , Added Apache APISIX RCE module
2022-03-07 09:47:04 -05:00
23a09be333
Fix typo in document of cve_2021_4034
...
ContOS => CentOS
2022-03-05 23:58:31 +08:00
f116f9e701
add docs
2022-03-04 15:54:58 -06:00
9ef50a2d23
Fixup typos
2022-03-04 12:34:14 -05:00
4d5716d891
Updated documentation
2022-03-04 02:21:42 +01:00
fb658fbb13
Land #16245 , pfSense Authenticated File Write (CVE-2021-41282)
...
Merge branch 'land-16245' into upstream-master
2022-03-03 15:08:34 -06:00
6be3443680
Land #16103 , LPE in polkit's pkexec (CVE-2021-4034)
2022-03-03 09:24:11 -05:00
236efab669
Update documentation
...
Add referece to CVE-2022-24112
msftidy_docs
2022-03-03 02:20:56 +01:00
e649fe3f69
Fix some markdown issues, update docs and add arch check for payloads
2022-03-02 16:30:52 -06:00
06e897436c
Add Fedora results to docs and some minor final cleanup
2022-03-02 09:12:01 -06:00
58aed837b2
Update docs and options
2022-03-01 14:48:48 -06:00
a6d33ea98e
Add module documentation
2022-03-01 12:54:17 +01:00
0081811c52
Land #16185 , Firefox CVE-2020-26950 use after free browser exploit
...
Merge branch 'land-16185' into upstream-master
2022-02-28 14:38:23 -06:00
65e16a1a72
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
2022-02-27 18:12:54 -08:00
579811418f
update documentation with note about Firefox 82.0.1
2022-02-26 12:35:38 +00:00
ecaf8b1ba9
Land #16204 , Hikvision Unauthenticated RCE (CVE-2021-36260)
...
Merge branch 'land-16204' into upstream-master
2022-02-25 16:37:08 -06:00
b69db83398
Land #16202 , Add exploit for CVE-2022-21882 (Win32k LPE)
...
Merge branch 'land-16202' into upstream-master
2022-02-25 15:55:48 -06:00
217afa0f3b
Land #16190 , Axis Camera App RCE (No CVE)
2022-02-25 11:35:03 -06:00
d055a7d811
Altered some randomization, the json extracted by check, and fixed some wording
2022-02-24 18:48:21 -08:00
544f8e161a
Land #16164 , Create Module For CVE-2021-42321
2022-02-24 11:36:12 -05:00
e1616a520f
Fixed a couple of typos. Changed a CheckCode. Randomized the replaced tmp file name
2022-02-24 06:38:36 -08:00
fddd3f15c2
Fix up code so that it will not block on attempting to delete the configuration on the folder, just in case the configuration doesn't exist in the first place. Instead print a warning and continue.
2022-02-22 17:52:29 -06:00
4cd3563bc7
Initial commit of exploit for CVE-2021-36260
2022-02-19 13:13:24 -08:00
3ea032472d
Updated exploit with better check method, added OnSessionCmd option
...
to run a command when a session is bootstrapped, added more
documentation.
2022-02-18 16:30:47 -06:00
443bf1249a
Remove all the old CVE-2021-1732 data
2022-02-18 15:25:39 -05:00
bcd7cb1122
Writeup the module metadata and docs
2022-02-18 15:23:44 -05:00
90a06a1cb9
fix docs
2022-02-16 08:37:01 +00:00
fb53ca0ac2
actually add support for Windows
2022-02-16 08:33:24 +00:00
841af2c6e1
add support for Windows
2022-02-16 08:30:07 +00:00
11f2c5201d
add documentation
2022-02-16 08:19:25 +00:00
vleminator