 Grant Willcox
|
78d4ac8592
|
Update module reliability and also fix issues from bcoles's review
|
2022-04-20 19:04:27 -05:00 |
|
|
bwatters
|
d9a241defb
|
Fix overzealous source code edit and some version copy/pasta errors
|
2022-04-20 14:31:32 -05:00 |
|
|
Grant Willcox
|
b83a4b2a7a
|
Add in fixes to module and documentation from final review
|
2022-04-14 12:45:15 -05:00 |
|
|
bwatters
|
83f4473c2a
|
Correct Ubuntu target version
|
2022-04-14 12:01:38 -05:00 |
|
|
bwatters
|
03d01d2f72
|
Remove stray markup
|
2022-04-14 10:29:54 -05:00 |
|
|
bwatters
|
f32443b477
|
Update with debug source code and options, cleanup module code per gwillcox-r7
|
2022-04-14 10:25:55 -05:00 |
|
|
bwatters
|
147d6e1df7
|
Added docs, reverted strip_comments, rubocop'd
|
2022-04-12 21:14:11 -05:00 |
|
|
Spencer McIntyre
|
211626e7ce
|
Fix the check method, add docs
|
2022-03-31 09:01:08 -04:00 |
|
|
Brendan Coles
|
4cd021ce4b
|
Add exploit/android/adb/adb_server_exec documentation
|
2022-03-21 00:37:15 +00:00 |
|
|
bwatters
|
b4de9fa92a
|
Land #16344, Add module for CVE-2022-21999 and More Railgun Definitions
Merge branch 'land-16344' into upstream-master
|
2022-03-16 08:37:05 -05:00 |
|
|
space-r7
|
4a8707982a
|
fix module name in output
|
2022-03-14 09:35:56 -05:00 |
|
|
space-r7
|
c646d01671
|
add systems tested
|
2022-03-14 09:17:43 -05:00 |
|
|
space-r7
|
99664efed7
|
use full user name, add test output to docs
|
2022-03-14 09:15:36 -05:00 |
|
|
space-r7
|
07e6eef201
|
rename module, modify check
|
2022-03-10 17:02:58 -06:00 |
|
|
space-r7
|
b747e55dda
|
Land #16303, add Dirty Pipe exploit
|
2022-03-10 11:16:28 -06:00 |
|
|
space-r7
|
872b9c9a7c
|
modify docs to reflect changes, remove 'return'
|
2022-03-10 10:39:32 -06:00 |
|
|
Tim W
|
bcc9d01958
|
add documentation
|
2022-03-09 08:34:20 +00:00 |
|
|
adfoster-r7
|
22f88f9ab7
|
Add docs
|
2022-03-08 23:52:24 +00:00 |
|
|
Spencer McIntyre
|
42e0c027ab
|
Land #16248, Added Apache APISIX RCE module
|
2022-03-07 09:47:04 -05:00 |
|
|
red
|
23a09be333
|
Fix typo in document of cve_2021_4034
ContOS => CentOS
|
2022-03-05 23:58:31 +08:00 |
|
|
space-r7
|
f116f9e701
|
add docs
|
2022-03-04 15:54:58 -06:00 |
|
|
Spencer McIntyre
|
9ef50a2d23
|
Fixup typos
|
2022-03-04 12:34:14 -05:00 |
|
|
Heyder Andrade
|
4d5716d891
|
Updated documentation
|
2022-03-04 02:21:42 +01:00 |
|
|
bwatters
|
fb658fbb13
|
Land #16245, pfSense Authenticated File Write (CVE-2021-41282)
Merge branch 'land-16245' into upstream-master
|
2022-03-03 15:08:34 -06:00 |
|
|
Spencer McIntyre
|
6be3443680
|
Land #16103, LPE in polkit's pkexec (CVE-2021-4034)
|
2022-03-03 09:24:11 -05:00 |
|
|
Heyder Andrade
|
236efab669
|
Update documentation
Add referece to CVE-2022-24112
msftidy_docs
|
2022-03-03 02:20:56 +01:00 |
|
|
bwatters
|
e649fe3f69
|
Fix some markdown issues, update docs and add arch check for payloads
|
2022-03-02 16:30:52 -06:00 |
|
|
bwatters
|
06e897436c
|
Add Fedora results to docs and some minor final cleanup
|
2022-03-02 09:12:01 -06:00 |
|
|
bwatters
|
58aed837b2
|
Update docs and options
|
2022-03-01 14:48:48 -06:00 |
|
|
Heyder Andrade
|
a6d33ea98e
|
Add module documentation
|
2022-03-01 12:54:17 +01:00 |
|
|
bwatters
|
0081811c52
|
Land #16185, Firefox CVE-2020-26950 use after free browser exploit
Merge branch 'land-16185' into upstream-master
|
2022-02-28 14:38:23 -06:00 |
|
|
Jake Baines
|
65e16a1a72
|
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
|
2022-02-27 18:12:54 -08:00 |
|
|
Tim W
|
579811418f
|
update documentation with note about Firefox 82.0.1
|
2022-02-26 12:35:38 +00:00 |
|
|
bwatters
|
ecaf8b1ba9
|
Land #16204, Hikvision Unauthenticated RCE (CVE-2021-36260)
Merge branch 'land-16204' into upstream-master
|
2022-02-25 16:37:08 -06:00 |
|
|
bwatters
|
b69db83398
|
Land #16202, Add exploit for CVE-2022-21882 (Win32k LPE)
Merge branch 'land-16202' into upstream-master
|
2022-02-25 15:55:48 -06:00 |
|
|
Grant Willcox
|
217afa0f3b
|
Land #16190, Axis Camera App RCE (No CVE)
|
2022-02-25 11:35:03 -06:00 |
|
|
Jake Baines
|
d055a7d811
|
Altered some randomization, the json extracted by check, and fixed some wording
|
2022-02-24 18:48:21 -08:00 |
|
|
Spencer McIntyre
|
544f8e161a
|
Land #16164, Create Module For CVE-2021-42321
|
2022-02-24 11:36:12 -05:00 |
|
|
Jake Baines
|
e1616a520f
|
Fixed a couple of typos. Changed a CheckCode. Randomized the replaced tmp file name
|
2022-02-24 06:38:36 -08:00 |
|
|
Grant Willcox
|
fddd3f15c2
|
Fix up code so that it will not block on attempting to delete the configuration on the folder, just in case the configuration doesn't exist in the first place. Instead print a warning and continue.
|
2022-02-22 17:52:29 -06:00 |
|
|
Jake Baines
|
4cd3563bc7
|
Initial commit of exploit for CVE-2021-36260
|
2022-02-19 13:13:24 -08:00 |
|
|
bwatters
|
3ea032472d
|
Updated exploit with better check method, added OnSessionCmd option
to run a command when a session is bootstrapped, added more
documentation.
|
2022-02-18 16:30:47 -06:00 |
|
|
Spencer McIntyre
|
443bf1249a
|
Remove all the old CVE-2021-1732 data
|
2022-02-18 15:25:39 -05:00 |
|
|
Spencer McIntyre
|
bcd7cb1122
|
Writeup the module metadata and docs
|
2022-02-18 15:23:44 -05:00 |
|
|
Tim W
|
90a06a1cb9
|
fix docs
|
2022-02-16 08:37:01 +00:00 |
|
|
Tim W
|
fb53ca0ac2
|
actually add support for Windows
|
2022-02-16 08:33:24 +00:00 |
|
|
Tim W
|
841af2c6e1
|
add support for Windows
|
2022-02-16 08:30:07 +00:00 |
|
|
Tim W
|
11f2c5201d
|
add documentation
|
2022-02-16 08:19:25 +00:00 |
|
|
bwatters
|
1086926b2e
|
Land #16159, Add module for CVE-2021-3129
Merge branch 'land-16159' into upstream-master
|
2022-02-15 17:14:01 -06:00 |
|
|
Jake Baines
|
5ac3330802
|
Initial commit of Axis camera app install exploit
|
2022-02-14 17:54:18 -08:00 |
|