394e99fbe9
Land #12568 , Fix exploit/windows/local/ms16_032_secondary_logon_handle_privesc
2020-01-30 11:57:56 +01:00
9da4555509
Move clean-up code to cleanup method ( #2 )
...
Move clean-up code to cleanup method
2020-01-29 17:11:07 +01:00
3491da7da0
Add a random sentinel to close channel when terminates ( #1 )
...
* Add a random sentinel to close channel when terminates
* Replace spaces with tabs to be consistent
* Remove unnecessary escaped quotes and use include? instead of regex
2020-01-25 23:30:49 +01:00
2414fda288
add initial check/metadata
2020-01-24 16:14:51 -06:00
0d8d17c63d
Land #12736 , Add support for PPID spoofing
2020-01-24 08:49:51 -06:00
355ddba6c9
Prefer exploit.rb's rand_text wrapper
2020-01-22 16:37:36 -06:00
ee5e9dc922
Land #12832 , DisablePayloadHandler replace strings with bools
...
Merge branch 'land-12832' into upstream-master
2020-01-16 12:10:34 -06:00
033a0d1868
Land #12782 , add the Plantronics LPE module
2020-01-15 11:17:41 -05:00
7b14442ab0
replace strings with bools
2020-01-14 20:47:27 -05:00
20cf419e18
Land #12797 , improve BlueKeep over remote networks
2020-01-12 17:15:29 -06:00
33dadefd53
move rdp_move_mouse to rdp library, add GROOMDELAY
2020-01-12 08:19:44 -06:00
b76f2a9e08
inject mouse move events, verbose groom progress/elapsed time, danger zone warnings
2020-01-06 23:42:01 -07:00
756879d3d6
Fix msftidy
2020-01-06 18:14:58 +01:00
f1ae217bb0
Single-core machines are safe from this exploit.
2020-01-06 05:21:51 +01:00
326fd26219
Check for nil response due to connection failure
2020-01-05 21:39:34 +00:00
c8fb76182c
Use PROGRAMDATA environment variable
2020-01-03 20:32:01 +00:00
b3e9d9aee9
Add Plantronics Hub SpokesUpdateService Privilege Escalation
2020-01-03 20:13:27 +00:00
ce991071e4
Land #12524 , update most python code with python 3 compatibility
2019-12-23 14:49:08 -06:00
894927d960
Land #12693 , add Comahawk privilege escalation
2019-12-18 15:40:51 -06:00
b36c191fc7
With feeling...
2019-12-18 14:33:13 -06:00
f9fbe96145
more bcoles suggestions
2019-12-18 14:25:43 -06:00
671f80896a
Update payload_inject.rb
2019-12-18 16:06:26 +01:00
664b196388
Update payload_inject.rb
2019-12-17 01:35:24 +01:00
64c1f557c6
add support for PPID spoofing to payload_inject
2019-12-17 01:19:45 +01:00
fde942bc37
Land #12517 , replace CheckScanner mixin with CheckModule, which works with anything
2019-12-16 17:40:10 -06:00
66dcbc5d99
Stupid typo...
2019-12-16 12:54:48 -06:00
06bcef3670
bcoles suggested chganges
2019-12-16 12:50:41 -06:00
5fc561e916
Land #12661 , more docs
2019-12-13 17:42:36 -05:00
6538a4188d
Space-suggested updates
2019-12-13 15:25:01 -06:00
6be4729a02
Land #12391 , Add shellcode_inject post module
...
Merge branch 'land-12391' into upstream-master
2019-12-12 15:20:51 -06:00
d7f1c9a4a9
Land #12696 , Add AKA references to several modules
2019-12-12 15:28:21 +00:00
0257861c4f
Remove debug statements and extra c/ruby libraries
2019-12-11 18:42:36 -06:00
b6ac86dc23
Update group_policy_startup.rb
2019-12-11 09:41:08 -07:00
942d1e3962
Trim exploit code and de-pasta-fy module
...
Better check for build number
2019-12-10 18:09:08 -06:00
f0ac300338
h00die review
...
Thanks h00die for the in depth review, as always.
2019-12-10 13:37:13 -07:00
3b2a54a599
add aka to some modules
2019-12-10 09:53:13 -05:00
8a9dd35793
First draft of windows comahawk priv esc
2019-12-09 19:09:15 -06:00
2931863a4e
bypassuac_silentcleanup: cleanup %WINDIR% env var before calling powershell payload
...
Fixes #12665
2019-12-05 15:08:50 +01:00
cc25a30d1a
Move dpendency to mixin and adjust print statements
2019-12-04 09:00:03 -06:00
faadf8e283
Land #12646 , ms04_007 reliability and stability updates
2019-12-03 20:22:37 -05:00
d65757faa4
further killbill fixes
2019-12-03 20:22:05 -05:00
0864a4840e
Fix requirements in payload inject
2019-12-03 15:58:37 -06:00
2a14332f20
First try at adding error handling and offloading methods to the
...
Post::Windows::Process mixin for resusability and deduplication
2019-12-03 14:11:50 -06:00
f56b262eec
Update modules
2019-12-03 10:36:34 -06:00
3e7857d146
Add reliability and stability notes to ms06_040_netapi
2019-12-03 06:32:02 +00:00
ba05e91d19
Add Reliability notes
2019-11-30 06:28:12 +00:00
a6723c12fb
Add stability notes to ms04_007_killbill
2019-11-30 06:16:41 +00:00
b22d2a1685
Update prints in DOUBLEPULSAR exploit check method
...
vprint_good should be print_warning, and most vprints should be print,
even if in check, since check is critical functionality.
2019-11-25 18:33:46 -06:00
ccff82f818
Land #12589 , restrict windows/local/persistence_service to working session types
2019-11-18 15:15:50 -06:00
73950eef50
Land #12516 , Add Windows Escalate UAC Protection Bypass
2019-11-18 14:25:07 -06:00
Christophe De La Fuente