ed5f2bffa9
Land #9919 , add libuser roothelper privilege escalation exploit
2018-05-12 17:11:21 +08:00
a8660e4042
make the PASSWORD option required
2018-05-12 17:10:21 +08:00
2a211d99af
Nuke base_directory after all, FileDropper does not like our path
2018-05-06 22:58:06 -05:00
a9f9d61f1e
Use the target_directory, not base
2018-05-06 22:56:59 -05:00
cd48507aab
Use FileDropper, switch to earlier target directory
2018-05-06 22:56:36 -05:00
1f7b13bea8
Additional module cleanup
2018-05-06 22:50:13 -05:00
3d172df0c4
MD5 of TID and cleanup if statement
2018-05-06 22:24:36 -05:00
68f2e08400
Swap to positive logic
2018-05-06 22:22:47 -05:00
9712215e66
Add Bugtraq ID
2018-05-06 22:21:13 -05:00
5d57e9db34
Remove unnecessary RHOST definition
2018-05-06 22:20:51 -05:00
8141e949fc
Note the runtimes
2018-05-05 18:34:11 -05:00
e775a97ae2
Adds panos_readsessionvars exploit module
2018-05-05 15:41:17 -05:00
3aa7441e10
Update tested versions
2018-05-05 09:11:31 +00:00
79d8f5e86c
autofilter = false means skip, which is reverse of intuition
2018-04-26 17:20:55 -05:00
54aaf1f718
Land #9937 , enable autofilter on tp-link camera exploit
2018-04-26 16:08:09 -05:00
4789cdc596
enable autofilter on tp-link camera exploit
2018-04-26 14:56:39 -05:00
0fa0358993
Land #9853 , Update Linux sock_sendpage local exploit module
2018-04-26 14:30:51 -05:00
ef5272cdc6
Update tested versions
2018-04-23 20:28:24 +00:00
00583caadf
Add Libuser roothelper Privilege Escalation exploit
2018-04-23 17:49:11 +00:00
1c92134606
Land #9756 , Add lastore-daemon D-Bus Privilege Escalation exploit
...
Merge branch 'land-9756' into upstream-master
2018-04-20 15:45:37 -05:00
37a844bef0
Land # 9247, Add ASUS infosvr Auth Bypass Command Execution exploit
...
Merge branch 'land-9247' into upstream-master
2018-04-20 11:24:47 -05:00
fc7040099c
Update Linux sock_sendpage local exploit module
2018-04-10 11:15:42 +00:00
9bb6e72020
Add lastore-daemon D-Bus Privilege Escalation exploit
2018-03-24 23:16:42 +00:00
176fb13c84
Fix #9650 , missed code from TelnetEnable refactor
...
1. Functionality was added incrementally, and I missed an opportunity to
consolidate a few methods under @do_exploit.
2. The Capture mixin can raise RuntimeError for a number of different
reasons, not just a lack of root privileges.
tl;dr Fix my incompetence and laziness. :-)
I don't think EDB and friends usually get these updates. :(
2018-03-05 14:46:27 -06:00
6dbf9445c9
Add MAC address discovery
2018-03-02 19:18:30 -06:00
107512498c
Add check method
2018-03-02 19:16:37 -06:00
25f36fb926
Refactor code into new methods
2018-03-02 19:16:37 -06:00
109bc87ffb
Check for nil, EOFError, and zero-length response
2018-03-02 19:15:20 -06:00
bcdfebf93c
Add a vprint for creds we chose
2018-03-02 19:15:19 -06:00
4418a0de02
Enhance detection of telnetenabled vs. telnetd
2018-03-02 19:15:19 -06:00
fba30d47a2
Use default creds specific to protocol
2018-03-02 19:15:18 -06:00
1f40afea9c
Add automatic target for detection of TCP or UDP
2018-03-02 19:15:18 -06:00
a5e5b618fd
Add print statements I forgot
2018-03-02 19:15:17 -06:00
e87681f2c4
Add NETGEAR TelnetEnable
2018-03-02 19:15:17 -06:00
4b8a8fa2b1
Land #9441 , Create exploit for AsusWRT LAN RCE
...
Merge branch 'land-9441' into upstream-master
2018-02-22 10:40:45 -06:00
78822fd799
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-21 06:59:09 -06:00
285b329ee1
Land #9422 abrt race condition priv esc on linux
2018-02-11 11:58:39 -05:00
add7ae8fa1
Land #9536 , Add Ubuntu notes to documentation
2018-02-11 07:27:00 -06:00
321b78b0fe
Land #9408 , Add Juju-run Agent Privilege Escalation module (CVE-2017-9232)
2018-02-11 07:19:49 -06:00
4e5cbd68b9
Add Ubuntu notes to documentation
2018-02-11 06:52:36 +00:00
0d573e1434
Support shell sessions
2018-02-09 16:15:04 -05:00
45249d582d
Add partition check
2018-02-09 16:15:04 -05:00
0ba37f8104
Add glibc $ORIGIN Expansion Privilege Escalation exploit
2018-02-09 16:15:04 -05:00
cb1b59545b
Land #9469 linux local exploit for glibc ld audit
2018-02-09 14:00:42 -05:00
5b251ae672
Support shell sessions on Debian
2018-02-08 11:29:09 +00:00
b1d0529161
prefer 'shell' channels over 'exec' channels for ssh
...
If a command is not specified to CommandStream, request a "shell"
session rather than running exec. This allows targets that do not have a
true "shell" which supports exec to instead return a raw shell session.
2018-02-08 02:21:16 -06:00
d078ab8033
Use 'exit' CommandShellCleanupCommand
2018-02-06 13:36:36 +00:00
696817215b
Update tested versions
2018-02-05 04:48:52 +00:00
e158ccb20b
Support cleanup for meterpreter sessions
2018-02-04 04:38:53 +00:00
74ab02f27b
Support meterpreter sessions
2018-02-03 11:55:08 +00:00
Tim W