 Spencer McIntyre
|
ffebf48242
|
Land #13830, Add QEMU/KVM target for CVE-2019-0708
|
2020-07-16 16:00:16 -04:00 |
|
|
bwatters
|
eb863048f0
|
Land #13741, CVE-2020-5741: Plex rce on Windows
Merge branch 'land-13741' into upstream-master
|
2020-07-16 10:20:50 -05:00 |
|
|
Stefan Pietsch
|
4c1b075679
|
Add QEMU/KVM target for CVE-2019-0708
|
2020-07-08 23:32:16 +02:00 |
|
|
h00die
|
456bf6b948
|
update escapes
|
2020-07-07 01:17:26 -04:00 |
|
|
h00die
|
89332d0056
|
native python for plex unpickle
|
2020-07-03 19:37:18 -04:00 |
|
|
Alan Foster
|
b841246536
|
Update autocheck to use prepend instead of include, add ForceExploit functionality
|
2020-06-30 11:40:46 +01:00 |
|
|
h00die
|
a99a3c2d75
|
working albumn_name length thanks to acammack
|
2020-06-30 00:28:57 -04:00 |
|
|
h00die
|
94cc286689
|
update docs and 401 handling code
|
2020-06-24 21:05:23 -04:00 |
|
|
gwillcox-r7
|
0dde85f562
|
Land #13739, Cisco AnyConnect Priv Esc via Path Traversal
|
2020-06-24 17:47:52 -05:00 |
|
|
gwillcox-r7
|
15de510623
|
Add in RuboCop and msftidy_docs.rb fixes
|
2020-06-24 17:19:21 -05:00 |
|
|
Christophe De La Fuente
|
5f64444d4f
|
Update module and documentation from code review
|
2020-06-24 23:34:26 +02:00 |
|
|
adfoster-r7
|
fceb96e659
|
Land #13608, update elog calls to be consistent across
|
2020-06-23 09:47:01 +01:00 |
|
|
Christophe De La Fuente
|
3997dbdade
|
Updates from code review
|
2020-06-22 16:06:09 +02:00 |
|
|
Adam Galway
|
1a2bf98222
|
creates standard elog & updates exisiting usages
|
2020-06-22 12:48:39 +01:00 |
|
|
h00die
|
533bed6b51
|
pre review updates
|
2020-06-22 06:30:44 -04:00 |
|
|
h00die
|
9defe33d9a
|
docs and working module
|
2020-06-20 00:06:46 -04:00 |
|
|
h00die
|
9f424a8cbb
|
cleanup getting through it
|
2020-06-19 22:59:19 -04:00 |
|
|
h00die
|
40e6551b8b
|
works with cmd payload calc
|
2020-06-19 21:16:55 -04:00 |
|
|
Christophe De La Fuente
|
2e33241a90
|
Update module and add documentation
|
2020-06-19 20:17:11 +02:00 |
|
|
Shelby Pace
|
db4006e9f6
|
Land #13607, add Cayin exploit modules
|
2020-06-18 10:33:49 -05:00 |
|
|
h00die
|
c2c931030f
|
review comments
|
2020-06-17 11:47:11 -04:00 |
|
|
Tod Beardsley
|
655a323467
|
Add CVE-2020-7356 for Cayin xPost
|
2020-06-17 09:57:29 -05:00 |
|
|
Christophe De La Fuente
|
681bd63f18
|
Add AnyConnect RCE exploit module
|
2020-06-17 14:41:22 +02:00 |
|
|
gwillcox-r7
|
135d90e1dc
|
Land #13628, Fix dead link in postgres_payload.rb
|
2020-06-16 09:30:51 -05:00 |
|
|
Shelby Pace
|
1cb57a7e79
|
Land #13444, add GOG Galaxy Client Privesc
|
2020-06-15 08:53:12 -05:00 |
|
|
Shelby Pace
|
21ccb229b2
|
rubocop changes
|
2020-06-15 08:48:51 -05:00 |
|
|
Shelby Pace
|
34366ea680
|
add notes, finish check
|
2020-06-15 08:36:32 -05:00 |
|
|
Alexandre ZANNI
|
2027b17b6e
|
postgres_payload: fix deadlink
Replace the original link (dead) by the cached version in web archive.
|
2020-06-14 16:39:46 +02:00 |
|
|
Shelby Pace
|
f7f711674a
|
remove cmd target
|
2020-06-12 14:28:39 -05:00 |
|
|
gwillcox-r7
|
0bf5a1b5ec
|
Add in AutoCheck as per @wvu-r7's recommendation
|
2020-06-11 00:59:22 -05:00 |
|
|
gwillcox-r7
|
0eed09e8bd
|
The wisdom of le @wvu-r7 has shown that CheckCode(Reason) is the way to go. Lets use this :)
|
2020-06-11 00:55:39 -05:00 |
|
|
gwillcox-r7
|
6171c0b6fc
|
Redo some of the messages in the module so we get more feedback on where we are in exploitation process, and shorten wait time for job
|
2020-06-11 00:31:07 -05:00 |
|
|
gwillcox-r7
|
d716580ffa
|
Fix up the module to fix a Nil reference issue, and to prefer session.shell_command_token() over cmd_exec() due to weird errors in latter
|
2020-06-10 23:45:47 -05:00 |
|
|
gwillcox-r7
|
d71a92c121
|
Rubocop fully fleshed out version of the check method
|
2020-06-10 22:48:20 -05:00 |
|
|
gwillcox-r7
|
553c9bf032
|
Finally fleshed out a full version of the check method
|
2020-06-10 22:46:26 -05:00 |
|
|
Shelby Pace
|
1b57c7f68d
|
add dropper target
|
2020-06-10 22:01:06 -05:00 |
|
|
gwillcox-r7
|
5cd8abe3df
|
Initial attempts to add a check method
|
2020-06-10 20:37:20 -05:00 |
|
|
h00die
|
aec1f77b70
|
wip
|
2020-06-10 20:42:22 -04:00 |
|
|
gwillcox-r7
|
276eacccbc
|
Add AttackerKB assessment link
|
2020-06-10 11:02:57 -05:00 |
|
|
gwillcox-r7
|
f0388a4e39
|
Minor info update to trigger a rebuild and reword some stuff
|
2020-06-10 11:02:57 -05:00 |
|
|
gwillcox-r7
|
94b27ce582
|
Fix up DisclosureDate formatting
|
2020-06-10 11:02:56 -05:00 |
|
|
gwillcox-r7
|
e6b07556f7
|
Fix up Rubocop errors and some spacing fixes
|
2020-06-10 11:02:56 -05:00 |
|
|
gwillcox-r7
|
773e63f286
|
Fix a bug which would prevent allowing support for wow64 targets unless the WindowsCoreDeviceInfo.dll file already existed on the system
|
2020-06-10 11:02:56 -05:00 |
|
|
gwillcox-r7
|
7753c41fe0
|
Remove more duplicate code and further optimize some things
|
2020-06-10 11:02:55 -05:00 |
|
|
gwillcox-r7
|
2485153263
|
Remove some duplicate and redundant code
|
2020-06-10 11:02:55 -05:00 |
|
|
gwillcox-r7
|
f87ebb71dc
|
More updates to fix @wvu's suggestions
|
2020-06-10 11:02:55 -05:00 |
|
|
gwillcox-r7
|
b73da5979b
|
Apply some fixes from wvu's review
|
2020-06-10 11:02:54 -05:00 |
|
|
gwillcox-r7
|
60d9d0e2a7
|
Add note to user that they may have to clean up one of the DLLs as it may sometimes not be cleaned up.
|
2020-06-10 11:02:54 -05:00 |
|
|
gwillcox-r7
|
7711cecee9
|
Final tweaks to make this more reliable, should be good now
|
2020-06-10 11:02:53 -05:00 |
|
|
gwillcox-r7
|
4a9c878132
|
Finally fix up the hanging issue via new template DLLs and associated code
|
2020-06-10 11:02:53 -05:00 |
|