636c72965c
Land #19084 , Add CVE-2022-1373 and CVE-2022-2334 exploit chain
...
Merge branch 'land-19084' into upstream-master
2024-07-19 12:22:25 -05:00
1881d4e8b4
commit and sign binary
2024-07-19 12:07:59 -05:00
e9c511c979
Add documentation and some updates
2024-07-16 16:34:28 +02:00
1abc42a873
Add module
2024-07-09 18:34:27 +02:00
26a108aadc
Land #19046 , Apache Solr Backup Restore RCE [CVE-2023-50386]
2024-04-23 14:08:33 -04:00
afd4b8af2e
Remove x86 things, include AutoCheck
2024-04-19 22:49:40 +08:00
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
6268235cd3
Add CVE-2022-1373 and CVE-2022-2334 exploit chain
2024-04-13 18:10:45 +08:00
705cfb5016
Fix empty banner (never set) issue
2024-04-05 19:24:19 +03:00
7f62dd2143
Responded to comments
2024-04-04 13:39:22 -07:00
059cfd9a48
Reduced conf folder txt files
2024-04-02 11:40:00 -07:00
03fced404a
Apache Solr Backup Restore RCE
...
Writing file to disk working
working on linux
wip authentcaiton
Consolodated conf folders into one
Renamed conf1 to conf in msf data dir
Randomize the configuration name
Docs plus finishing touches
rubocop
Updated exploit file location
Removed unused external dir
Reduced conf folder
2024-04-02 11:33:52 -07:00
1ba704b1cb
Land #18398 , Update deprecated report_auth_info in various modules
2024-01-16 19:30:56 +00:00
fb26c93291
Land #18541 , Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
2023-12-20 20:04:21 +01:00
b86df4820c
Responded to comments from jvoisin
2023-12-19 13:50:09 -05:00
2ed3b771ed
Updated python exploit
2023-12-19 00:26:54 -05:00
e9ff2e55dc
Remove useless include of Report mixin in psnuffle.rb
2023-12-17 22:53:19 +05:30
a58f7f0558
Minor fixes to modules to use report_cred
2023-12-16 23:40:30 +05:30
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
7b74b758ad
Removed unnecessary files in zip backup
2023-12-11 18:23:22 -05:00
c0be4c2f72
working end to end unix confluence 7.18
2023-11-22 19:49:38 -05:00
e6e2106140
Auth bypass, auth, shell upload, working
2023-11-21 22:14:27 -05:00
b3b1595ef4
vmware aria ssh keys exploit
2023-10-16 13:06:17 -04:00
5a6dc7f9a6
Initial commit of CVE-2023-43654
2023-10-12 09:27:26 -04:00
1058291af9
Land #18314 , Windows Error Reporting RCE (CVE-2023-36874)
2023-09-27 15:25:06 +02:00
f5d5541e73
Update deprecated report_auth_info method call in various modules in data/exploits/psnuffle/
2023-09-25 02:51:08 +05:30
9f10f9402c
Update deprecated report_auth_info method call in data/exploits/psnuffle/smb.rb module
2023-09-25 02:06:48 +05:30
be731f330e
Add error checking and randomize the report directory
2023-09-22 14:43:21 -05:00
b4a1bb8fa2
Add docs and support for shell sessions; update exe to work without runtime lib.
2023-09-19 17:50:18 -05:00
8b56dc0117
Land #18250 , CVE-2023-28252: Windows CLFS Driver Privilege Escalation
2023-09-14 10:18:29 +01:00
91e7af4370
Added check, some stealth, and cleaned code
2023-09-05 14:29:13 -05:00
ccba494e61
Exploit working, still needs to be cleaned up
2023-08-29 18:01:44 -05:00
c69e983b30
Add module to create directory structures and upload/run exploit
2023-08-25 15:41:25 -05:00
97dd22032c
Responded to comments, improved stability
2023-08-21 19:20:25 -04:00
bcfc892195
General code clean up
2023-08-04 14:27:14 -04:00
59e3760509
First attempt at CVE-2023-34634
2023-08-03 10:58:07 -05:00
416124705f
Working in metasploit
2023-07-28 03:43:37 -04:00
b15d595de2
Adjust files to be better shared
2023-07-14 12:47:04 -05:00
8edbf73b6f
first release exploit module
2023-07-08 09:48:17 +00:00
7ca7c6aee1
Slight efficiency improvements
2023-05-24 17:36:39 -05:00
9e8d1ed2ea
Add in Java class file, raw source code, and tidy up the module a bit
2023-05-24 13:17:48 -05:00
6d4ee0c071
Add exploit for CVE-2023-21768
2023-03-27 20:08:22 +02:00
34b1e66f90
tomcat 8 priv esc on ubuntu prebuilt so file
2023-02-04 18:17:41 -05:00
2b09af78e1
tomcat 8 priv esc on ubuntu
2023-02-04 18:17:41 -05:00
80dbbca020
Land #17371 , Lenovo Diagnostics Driver Privilege Escalation (CVE-2022-3699)
2023-02-03 13:43:04 +00:00
1f224fd2d3
Rapid7 compiled binary
2023-02-02 11:11:06 -05:00
690d22f759
Rapid7 compiled binary
2023-02-01 10:08:13 -05:00
2c72cc145a
updates to module
2023-01-31 20:05:33 -05:00
fa687d3614
argv instead of hardcoded payload path
2023-01-31 16:02:25 -05:00
bwatters