cgranleese-r7
f6faa5598b
Fixes modules to now correctly use a hash with report note
2025-05-22 10:59:50 +01:00
sfewer-r7
db85c0259d
add in a build of the gadget for 12.2.1.4.0, needed as the serialVersionUID changes for classes in the coherence.jar file
2025-04-02 15:28:29 +01:00
sfewer-r7
acafd884b5
add in the initial exploit for CVE-2021-35587, only tested on 12.2.1.4.0 so far.
2025-04-01 12:56:38 +01:00
bwatters-r7
ec67435de9
Rebase and squash for CVE-2024-30085
2025-03-20 09:03:28 -05:00
jheysel-r7
5374c7b362
Merge pull request #19676 from h00die/needrestart
...
Ubuntu needrestart LPE (CVE-2024-48990)
2025-01-09 17:02:54 -08:00
h00die
e41f5ad577
needrestart exploit updates
2024-11-27 15:41:23 -05:00
h00die
d778f5469b
needrestart improvements
2024-11-26 18:22:48 -05:00
h00die
d4bd00d48e
needrestart improvements
2024-11-25 16:38:18 -05:00
h00die
7fd82b89df
offload files to data
2024-11-22 15:57:18 -05:00
Jack Heysel
7a5bc60aab
Windows Access Mode Mismatch LPE in ks.sys [CVE-2024-35250]
2024-11-05 15:31:44 -08:00
Brendan
dbc020a745
Merge pull request #19441 from Takahiro-Yoko/cve_2023_0386_priv_esc
...
Land #19441 , Add module: Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386
2024-09-26 14:07:17 -05:00
bwatters-r7
3e6572abde
Update binary
2024-09-26 13:45:44 -05:00
Takah1ro
e89e573160
Update exploit binary
2024-09-24 19:36:39 +09:00
Takah1ro
755830024c
Update exploit binary and remove unnecessary
2024-09-24 08:37:20 +09:00
Takah1ro
dd932844b6
Remove unused variables
2024-09-09 08:15:08 +09:00
Takah1ro
8366252ba2
Not call payload directory
2024-09-07 12:28:40 +09:00
Takah1ro
692531bb87
Call payload directory
2024-09-07 12:16:04 +09:00
Takah1ro
2b63f8bb88
Rename exploit
2024-09-07 10:29:41 +09:00
Takah1ro
fd7321dd3f
Strip_comments
2024-09-06 22:58:31 +09:00
Takah1ro
72a9164024
Update pre-compiled binary
2024-09-06 22:29:09 +09:00
Takah1ro
3d20dd6ddf
Add module:
...
Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386
2024-09-05 22:54:55 +09:00
Jack Heysel
7bfd814297
Removed memory polling
2024-08-30 12:52:18 -07:00
Jack Heysel
b011b67f80
Responded to comments
2024-08-29 22:25:20 -07:00
Jack Heysel
6689614d8f
Responded to comments
2024-08-22 13:06:29 -07:00
Jack Heysel
31348dac33
Windows LPE CVE-2024-30088
2024-08-21 23:16:37 -07:00
bwatters
636c72965c
Land #19084 , Add CVE-2022-1373 and CVE-2022-2334 exploit chain
...
Merge branch 'land-19084' into upstream-master
2024-07-19 12:22:25 -05:00
bwatters
1881d4e8b4
commit and sign binary
2024-07-19 12:07:59 -05:00
Christophe De La Fuente
e9c511c979
Add documentation and some updates
2024-07-16 16:34:28 +02:00
Christophe De La Fuente
1abc42a873
Add module
2024-07-09 18:34:27 +02:00
Zach Goldman
26a108aadc
Land #19046 , Apache Solr Backup Restore RCE [CVE-2023-50386]
2024-04-23 14:08:33 -04:00
Imran E. Dawoodjee
afd4b8af2e
Remove x86 things, include AutoCheck
2024-04-19 22:49:40 +08:00
fanqiaojun
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
Imran E. Dawoodjee
6268235cd3
Add CVE-2022-1373 and CVE-2022-2334 exploit chain
2024-04-13 18:10:45 +08:00
Noam Rathaus
705cfb5016
Fix empty banner (never set) issue
2024-04-05 19:24:19 +03:00
Jack Heysel
7f62dd2143
Responded to comments
2024-04-04 13:39:22 -07:00
Jack Heysel
059cfd9a48
Reduced conf folder txt files
2024-04-02 11:40:00 -07:00
Jack Heysel
03fced404a
Apache Solr Backup Restore RCE
...
Writing file to disk working
working on linux
wip authentcaiton
Consolodated conf folders into one
Renamed conf1 to conf in msf data dir
Randomize the configuration name
Docs plus finishing touches
rubocop
Updated exploit file location
Removed unused external dir
Reduced conf folder
2024-04-02 11:33:52 -07:00
adfoster-r7
1ba704b1cb
Land #18398 , Update deprecated report_auth_info in various modules
2024-01-16 19:30:56 +00:00
Christophe De La Fuente
fb26c93291
Land #18541 , Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
2023-12-20 20:04:21 +01:00
Jack Heysel
b86df4820c
Responded to comments from jvoisin
2023-12-19 13:50:09 -05:00
Jack Heysel
2ed3b771ed
Updated python exploit
2023-12-19 00:26:54 -05:00
Gaurav Jain
e9ff2e55dc
Remove useless include of Report mixin in psnuffle.rb
2023-12-17 22:53:19 +05:30
Gaurav Jain
a58f7f0558
Minor fixes to modules to use report_cred
2023-12-16 23:40:30 +05:30
Jack Heysel
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
Jack Heysel
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
Jack Heysel
7b74b758ad
Removed unnecessary files in zip backup
2023-12-11 18:23:22 -05:00
Jack Heysel
c0be4c2f72
working end to end unix confluence 7.18
2023-11-22 19:49:38 -05:00
Jack Heysel
e6e2106140
Auth bypass, auth, shell upload, working
2023-11-21 22:14:27 -05:00
h00die
b3b1595ef4
vmware aria ssh keys exploit
2023-10-16 13:06:17 -04:00
Spencer McIntyre
5a6dc7f9a6
Initial commit of CVE-2023-43654
2023-10-12 09:27:26 -04:00