40b0d02f39
make some adjustments
2019-08-29 19:49:37 +07:00
c88ce55013
Add github link
2019-08-28 11:08:35 +07:00
98efac5bfb
Add github link
2019-08-28 11:08:01 +07:00
7fd56f5fb3
Add Cisco UCS scpuser exploit
2019-08-28 11:00:08 +07:00
d6f47fd03a
s/Directory/Director
2019-08-28 10:58:41 +07:00
1aad95f7c4
Add exploit for Cisco UCS RCE
2019-08-28 10:55:49 +07:00
413cd7194d
Land #12064 , add Exim Local Privesc module
2019-08-23 12:23:53 -05:00
8aa00d97aa
Add new moved_from to moved module
2019-08-22 17:58:20 -05:00
901943c90f
Move Ubiquiti AirOS exploit from SSH to HTTP
2019-08-22 17:58:20 -05:00
ca82e6cd25
Add ktsuss suid Privilege Escalation module
2019-08-19 13:28:02 +00:00
32334c2386
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
70d5bd4eb3
add default payload, check login
2019-08-13 13:39:15 -05:00
286263c094
add quotes, platform
2019-08-13 11:18:31 -05:00
48333c5d4e
randomize parameter value
2019-08-13 11:14:10 -05:00
da98d3d376
finish documentation and module
2019-08-13 09:47:24 -05:00
71f4eadd18
module rework and some documentation
2019-08-12 15:22:22 -05:00
9fdee466ca
Update ptrace_sudo_token_priv_esc
2019-08-10 07:03:23 +00:00
76da9ea4fc
get shell with test data
2019-08-09 08:40:41 -05:00
46005eb933
Updated References
2019-08-09 14:08:47 +01:00
f317987e02
Land #12175 , hadoop_unauth_exec NoMethodError fix
2019-08-07 22:44:55 -05:00
b5fd9b4fed
Fix whitespace
2019-08-07 22:44:38 -05:00
6cf0ff0678
Fix #12156 , NoMethodError in hadoop exploit.
2019-08-08 10:06:40 +08:00
979681443c
add rudimentary check method
2019-08-06 14:48:37 +08:00
b35b4674d0
fix forking behaviour
2019-08-06 14:17:28 +08:00
f48d1b1231
add more links
2019-08-06 13:54:15 +08:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
5e64f8560a
Fix whitespace
2019-08-02 10:23:41 -05:00
8085ad3046
Set default payload based on chosen target.
2019-08-02 10:47:28 +02:00
610bed8fd9
&& is preferred over and.
2019-08-02 10:41:14 +02:00
bc3f87a950
add login and device id code
2019-07-31 16:31:22 -05:00
1faa1786c6
add test request
2019-07-29 10:28:07 -05:00
63de0051f4
Cosmetic changes
2019-07-28 21:38:54 -05:00
34c5277e4e
Deprecate module.
2019-07-27 10:49:59 +02:00
413da527ab
Module renaming.
2019-07-27 10:47:58 +02:00
18f7ae379b
Add support for RV110W and RV215W + check method to fingerprint devices.
2019-07-27 10:45:31 +02:00
e71b92aa60
We are not evil!
2019-07-21 09:33:18 +08:00
07f3c074d4
Add doc and enhance the module.
2019-07-20 00:17:57 +08:00
b258b8270e
fix #12104 , add CVE-2019-13272 PTRACE_TRACEME linux local exploit
2019-07-19 13:24:13 +08:00
395e4d2424
Update documentation. Register options by alphabetical order.
...
Change-Id: I46bb3701107a504dddbf030e0345d7adc83bafac
2019-07-18 10:45:44 +01:00
61d5be5981
add module skeleton and check
2019-07-17 15:51:11 -05:00
b6697f5016
Add redis rce module and data stuff.
...
To do:
1. Check env of system and compiler.
2. Add a compiled so file to be compatible with windows and mac.
3. Add doc.
2019-07-17 15:33:02 +08:00
e51138fa4b
Establish a tcp connection to check for the exim version.
2019-07-13 22:45:21 +01:00
764a4a0692
Improve check regex
2019-07-13 19:57:03 +01:00
e2a9907e99
Add SendExpectTimeout option
2019-07-13 19:55:12 +01:00
f465e43e34
Change tcp communication with meterpreter
2019-07-13 19:25:34 +01:00
60dbbb0455
Ensure temp files are deleted in every case
...
Change-Id: I53401e4bcce887048f433743a965421f93d699ba
2019-07-12 12:20:37 +01:00
642a71383d
Classic shell exploit now uses a bash script
...
Change-Id: I770cf9bcae5c5a265c19f2dc9e4a512e30705b6c
2019-07-11 17:01:23 +01:00
565e18cbe8
Add a few checks
...
Change-Id: Ieca129a54d2105bf646e6f848cb5ecec804c372f
2019-07-11 14:20:21 +01:00
435240ed41
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:24:48 +01:00
074c73236a
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:24:32 +01:00
Pedro Ribeiro