 Alan Foster
|
b841246536
|
Update autocheck to use prepend instead of include, add ForceExploit functionality
|
2020-06-30 11:40:46 +01:00 |
|
|
gwillcox-r7
|
0dde85f562
|
Land #13739, Cisco AnyConnect Priv Esc via Path Traversal
|
2020-06-24 17:47:52 -05:00 |
|
|
gwillcox-r7
|
15de510623
|
Add in RuboCop and msftidy_docs.rb fixes
|
2020-06-24 17:19:21 -05:00 |
|
|
Christophe De La Fuente
|
5f64444d4f
|
Update module and documentation from code review
|
2020-06-24 23:34:26 +02:00 |
|
|
adfoster-r7
|
fceb96e659
|
Land #13608, update elog calls to be consistent across
|
2020-06-23 09:47:01 +01:00 |
|
|
Christophe De La Fuente
|
3997dbdade
|
Updates from code review
|
2020-06-22 16:06:09 +02:00 |
|
|
Adam Galway
|
1a2bf98222
|
creates standard elog & updates exisiting usages
|
2020-06-22 12:48:39 +01:00 |
|
|
Christophe De La Fuente
|
2e33241a90
|
Update module and add documentation
|
2020-06-19 20:17:11 +02:00 |
|
|
Shelby Pace
|
db4006e9f6
|
Land #13607, add Cayin exploit modules
|
2020-06-18 10:33:49 -05:00 |
|
|
h00die
|
c2c931030f
|
review comments
|
2020-06-17 11:47:11 -04:00 |
|
|
Tod Beardsley
|
655a323467
|
Add CVE-2020-7356 for Cayin xPost
|
2020-06-17 09:57:29 -05:00 |
|
|
Christophe De La Fuente
|
681bd63f18
|
Add AnyConnect RCE exploit module
|
2020-06-17 14:41:22 +02:00 |
|
|
gwillcox-r7
|
135d90e1dc
|
Land #13628, Fix dead link in postgres_payload.rb
|
2020-06-16 09:30:51 -05:00 |
|
|
Shelby Pace
|
1cb57a7e79
|
Land #13444, add GOG Galaxy Client Privesc
|
2020-06-15 08:53:12 -05:00 |
|
|
Shelby Pace
|
21ccb229b2
|
rubocop changes
|
2020-06-15 08:48:51 -05:00 |
|
|
Shelby Pace
|
34366ea680
|
add notes, finish check
|
2020-06-15 08:36:32 -05:00 |
|
|
Alexandre ZANNI
|
2027b17b6e
|
postgres_payload: fix deadlink
Replace the original link (dead) by the cached version in web archive.
|
2020-06-14 16:39:46 +02:00 |
|
|
Shelby Pace
|
f7f711674a
|
remove cmd target
|
2020-06-12 14:28:39 -05:00 |
|
|
gwillcox-r7
|
0bf5a1b5ec
|
Add in AutoCheck as per @wvu-r7's recommendation
|
2020-06-11 00:59:22 -05:00 |
|
|
gwillcox-r7
|
0eed09e8bd
|
The wisdom of le @wvu-r7 has shown that CheckCode(Reason) is the way to go. Lets use this :)
|
2020-06-11 00:55:39 -05:00 |
|
|
gwillcox-r7
|
6171c0b6fc
|
Redo some of the messages in the module so we get more feedback on where we are in exploitation process, and shorten wait time for job
|
2020-06-11 00:31:07 -05:00 |
|
|
gwillcox-r7
|
d716580ffa
|
Fix up the module to fix a Nil reference issue, and to prefer session.shell_command_token() over cmd_exec() due to weird errors in latter
|
2020-06-10 23:45:47 -05:00 |
|
|
gwillcox-r7
|
d71a92c121
|
Rubocop fully fleshed out version of the check method
|
2020-06-10 22:48:20 -05:00 |
|
|
gwillcox-r7
|
553c9bf032
|
Finally fleshed out a full version of the check method
|
2020-06-10 22:46:26 -05:00 |
|
|
Shelby Pace
|
1b57c7f68d
|
add dropper target
|
2020-06-10 22:01:06 -05:00 |
|
|
gwillcox-r7
|
5cd8abe3df
|
Initial attempts to add a check method
|
2020-06-10 20:37:20 -05:00 |
|
|
h00die
|
aec1f77b70
|
wip
|
2020-06-10 20:42:22 -04:00 |
|
|
gwillcox-r7
|
276eacccbc
|
Add AttackerKB assessment link
|
2020-06-10 11:02:57 -05:00 |
|
|
gwillcox-r7
|
f0388a4e39
|
Minor info update to trigger a rebuild and reword some stuff
|
2020-06-10 11:02:57 -05:00 |
|
|
gwillcox-r7
|
94b27ce582
|
Fix up DisclosureDate formatting
|
2020-06-10 11:02:56 -05:00 |
|
|
gwillcox-r7
|
e6b07556f7
|
Fix up Rubocop errors and some spacing fixes
|
2020-06-10 11:02:56 -05:00 |
|
|
gwillcox-r7
|
773e63f286
|
Fix a bug which would prevent allowing support for wow64 targets unless the WindowsCoreDeviceInfo.dll file already existed on the system
|
2020-06-10 11:02:56 -05:00 |
|
|
gwillcox-r7
|
7753c41fe0
|
Remove more duplicate code and further optimize some things
|
2020-06-10 11:02:55 -05:00 |
|
|
gwillcox-r7
|
2485153263
|
Remove some duplicate and redundant code
|
2020-06-10 11:02:55 -05:00 |
|
|
gwillcox-r7
|
f87ebb71dc
|
More updates to fix @wvu's suggestions
|
2020-06-10 11:02:55 -05:00 |
|
|
gwillcox-r7
|
b73da5979b
|
Apply some fixes from wvu's review
|
2020-06-10 11:02:54 -05:00 |
|
|
gwillcox-r7
|
60d9d0e2a7
|
Add note to user that they may have to clean up one of the DLLs as it may sometimes not be cleaned up.
|
2020-06-10 11:02:54 -05:00 |
|
|
gwillcox-r7
|
7711cecee9
|
Final tweaks to make this more reliable, should be good now
|
2020-06-10 11:02:53 -05:00 |
|
|
gwillcox-r7
|
4a9c878132
|
Finally fix up the hanging issue via new template DLLs and associated code
|
2020-06-10 11:02:53 -05:00 |
|
|
gwillcox-r7
|
2c4f9d34ad
|
Rubocop module again
|
2020-06-10 11:02:52 -05:00 |
|
|
gwillcox-r7
|
24a5774ff2
|
Fix spelling mistake in DLL name
|
2020-06-10 11:02:52 -05:00 |
|
|
gwillcox-r7
|
cb20eaf6f9
|
Finally fix the issue with the cleanup of the files within the exploit
|
2020-06-10 11:02:51 -05:00 |
|
|
gwillcox-r7
|
401feb3e53
|
Change code so that we automatically exit Notepad upon DLL completing its work. Should help tidy things up more
|
2020-06-10 11:02:50 -05:00 |
|
|
gwillcox-r7
|
cf17b2065c
|
Updated module with some output corrections, recompiled DLLs
|
2020-06-10 11:02:50 -05:00 |
|
|
gwillcox-r7
|
ae2b40bf99
|
Update the output of the module to be more correct. Also upload updated DLLs
|
2020-06-10 11:02:49 -05:00 |
|
|
gwillcox-r7
|
77791b6120
|
Update modules description with a simple explanation of what is going on. Add links to explain USODLLLoader code.
|
2020-06-10 11:02:49 -05:00 |
|
|
gwillcox-r7
|
fb10178701
|
Add in BITS configurable wait timer and Windows 10 specific target check
|
2020-06-10 11:02:48 -05:00 |
|
|
gwillcox-r7
|
1607b8c342
|
Add initial files for CVE-2020-0787
|
2020-06-10 11:02:35 -05:00 |
|
|
bwatters-r7
|
e48a02ce82
|
Land #13589, Fix edge case in rubocop module description rule
Merge branch 'land-13589' into upstream-master
|
2020-06-10 07:55:13 -05:00 |
|
|
Alan Foster
|
6007e13379
|
Fix edgecase in rubocop module description rule
|
2020-06-10 12:11:49 +01:00 |
|