 Shelby Pace
|
8e4a33f2a2
|
Land #15223, move TokenMagic validation logic
|
2021-05-24 14:51:13 -05:00 |
|
|
bwatters
|
8e1391f098
|
Land #15216, Fix targeting for CVE-2021-21551
Merge branch 'land-15216' into upstream-master
|
2021-05-21 14:56:08 -05:00 |
|
|
bwatters
|
72375d1f67
|
Land #15024, Add RCE Exploit For CVE-2020-0796 (SMBGhost)
Merge branch 'land-15024' into upstream-master
|
2021-05-20 17:02:04 -05:00 |
|
|
Spencer McIntyre
|
a6f650a1a3
|
Add a clear warning about instability due to KPP
|
2021-05-20 17:28:14 -04:00 |
|
|
bwatters
|
a89fffade1
|
Update check method and move it to earlier in the module to prevent crashing
on windows 7 sp0 targets.
|
2021-05-19 15:58:40 -05:00 |
|
|
Spencer McIntyre
|
78d47b11f2
|
Add targeting for Windows 10 v21H1
|
2021-05-18 12:56:02 -04:00 |
|
|
William Vu
|
1f9a3d99bb
|
Add module doc
|
2021-05-17 13:58:03 -05:00 |
|
|
Grant Willcox
|
24352567e7
|
Add final touches to documentation for code highlights and minor fixes
|
2021-05-14 17:47:38 -05:00 |
|
|
Jack Heysel
|
c8b62a1ff9
|
Fixed check method nil check, update numberd list in docs, added wfsdelay warning when in dll mode
|
2021-05-14 17:47:31 -05:00 |
|
|
Jack Heysel
|
950bbad852
|
Removed nil script check, updated docs
|
2021-05-14 17:47:15 -05:00 |
|
|
Jack Heysel
|
eb4573164b
|
Addressed comments
|
2021-05-14 17:46:26 -05:00 |
|
|
Jack Heysel
|
d23df37b62
|
Responded to comments, refactored to remove duplicate code
|
2021-05-14 17:44:08 -05:00 |
|
|
Jack Heysel
|
fab3a9afc8
|
Added wfsdelay, updated docs
|
2021-05-14 17:44:07 -05:00 |
|
|
Jack Heysel
|
1eab94cc26
|
beta draft
|
2021-05-14 17:43:44 -05:00 |
|
|
Spencer McIntyre
|
d990e884af
|
Add and test even more targets
|
2021-05-13 17:27:58 -04:00 |
|
|
Spencer McIntyre
|
7d841a0f79
|
Add a target for Windows 7 x64
|
2021-05-13 14:24:15 -04:00 |
|
|
Spencer McIntyre
|
477749f77f
|
Refactor the code to be reusable and add docs
|
2021-05-12 16:36:17 -04:00 |
|
|
Pedro Ribeiro
|
62ba64375c
|
fix typos and add default rport
|
2021-04-23 17:38:06 +07:00 |
|
|
Pedro Ribeiro
|
8b3687b9e6
|
update privesc sploit
|
2021-04-23 16:38:25 +07:00 |
|
|
Spencer McIntyre
|
ba9674ca69
|
Search a wider range of the hal heap and remove an irrelevant sentence
|
2021-04-13 14:44:24 -04:00 |
|
|
Spencer McIntyre
|
63e438e992
|
Bump RubySMB and add a simple check method
|
2021-04-09 14:44:27 -04:00 |
|
|
Spencer McIntyre
|
dd9936ae84
|
Add SMBGhost RCE module docs
|
2021-04-09 14:15:11 -04:00 |
|
|
William Vu
|
4020813b42
|
Correct broken or redundant CVE references
|
2021-04-05 13:06:50 -05:00 |
|
|
Shelby Pace
|
71914a1ddb
|
Land #14813, additional dup scout bof targets
|
2021-04-01 13:03:57 -05:00 |
|
|
Spencer McIntyre
|
11f4946817
|
Tweak some ProxyLogon verbiage for clarity
|
2021-03-29 10:07:43 -04:00 |
|
|
RAMELLA Sébastien
|
02b240b22a
|
code review
|
2021-03-29 14:23:39 +04:00 |
|
|
bwatters
|
6505f9ccbd
|
Land #14830, Adding FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (CVE-2021-3378)
Merge branch 'land-14830' into upstream-master
|
2021-03-24 17:41:10 -05:00 |
|
|
bwatters
|
e2dfca86f9
|
Add warning for failures after rebooting to the documentation.
|
2021-03-24 17:32:08 -05:00 |
|
|
Christophe De La Fuente
|
2dcd0fad04
|
Land #14860, Auxiliary/Exploit Scanner/Gather/RCE for Exchange ProxyLogon (CVE-2021-26855)
|
2021-03-23 13:10:15 +01:00 |
|
|
RAMELLA Sébastien
|
37b0552803
|
last code review before land
|
2021-03-22 23:20:40 +04:00 |
|
|
William Vu
|
d4d9001c84
|
Fix typos
|
2021-03-22 14:16:45 -05:00 |
|
|
Spencer McIntyre
|
8605fe4529
|
Use POST for the check method and write the module docs
|
2021-03-22 15:04:21 -04:00 |
|
|
RAMELLA Sébastien
|
c543b44fc2
|
fix: CmdStagerFlavor, add: Powershell target, ...
|
2021-03-21 22:47:27 +04:00 |
|
|
RAMELLA Sébastien
|
f5c807590c
|
a last round of review + rubocop
|
2021-03-20 01:23:43 +04:00 |
|
|
RAMELLA Sébastien
|
6e34a80693
|
fix. OAB + code review
|
2021-03-19 10:19:57 +04:00 |
|
|
bwatters
|
2c1869f9df
|
Land #14907, Add exploit for CVE-2021-1732
Merge branch 'land-14907' into upstream-master
|
2021-03-18 14:29:59 -05:00 |
|
|
Spencer McIntyre
|
0bff88c0c0
|
Update the module metadata and add module docs
|
2021-03-16 10:40:34 -04:00 |
|
|
bwatters
|
ae5d31cb39
|
Land # 14776, Add Window Server 2012 SrClient DLL Hijacking local exploit module
Merge branch 'land-14776' into upstream-master
|
2021-03-15 14:34:35 -05:00 |
|
|
kalba-security
|
98c04eae6c
|
Remove TODO comment, update documentaton to include WAIT_FOR_TIWORKER option.
|
2021-03-15 07:51:12 -04:00 |
|
|
Alan Foster
|
9a92ac87a1
|
Ensure documentation files have md extension
|
2021-03-15 10:24:50 +00:00 |
|
|
RAMELLA Sébastien
|
59955f0a32
|
add. timeout and fix. CmdStagerFLavor
|
2021-03-15 01:10:56 +04:00 |
|
|
RAMELLA Sébastien
|
dcf2b69d6d
|
add. exploitation module doc and some changes
|
2021-03-14 22:49:41 +04:00 |
|
|
Grant Willcox
|
8dce1acd64
|
Land #14794, dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-03-12 12:07:57 -06:00 |
|
|
Shelby Pace
|
fbd6f19d04
|
Land #14846, add HPE SIM unauth AMF deser rce
|
2021-03-08 16:50:49 -06:00 |
|
|
Grant Willcox
|
514d46bd4d
|
Rubocop module again and also update the documentation to reflect recent changes
|
2021-03-08 16:08:36 -06:00 |
|
|
Berkan
|
8b149a2c9b
|
Fixed line numbers of verification steps
|
2021-03-06 22:50:12 +03:00 |
|
|
Grant Willcox
|
59d7288773
|
RuboCop module and fix small spelling mistake in documentation
|
2021-03-04 18:48:19 -06:00 |
|
|
Grant Willcox
|
f193caa48e
|
Also make sure that the default option is to use Windows Powershell since this supports Meterpreter and is generally a lot more reliable
|
2021-03-04 18:40:21 -06:00 |
|
|
Grant Willcox
|
3ef8fcd996
|
Update module to fix an extra print statement and write documentation
|
2021-03-03 10:14:41 -06:00 |
|
|
Brendan Coles
|
3da8fce9cf
|
Add Microsoft Windows RRAS Service MIBEntryGet Overflow
|
2021-03-03 02:50:42 +00:00 |
|