 Shelby Pace
|
c647d0ba52
|
made suggested change to write_payload
|
2019-07-09 10:46:46 -05:00 |
|
|
Shelby Pace
|
096857d1ad
|
swap check codes
|
2019-07-09 10:01:49 -05:00 |
|
|
Jacob Robles
|
a55aea33a9
|
Add cve-2018-8453 exploit module
|
2019-07-09 07:15:13 -05:00 |
|
|
Shelby Pace
|
ccdb7ba262
|
remove unused variable
|
2019-07-08 12:57:47 -05:00 |
|
|
Shelby Pace
|
f0f1a41ba5
|
add documentation and module
|
2019-07-08 12:49:22 -05:00 |
|
|
Patrick Webster
|
163e85bad9
|
fail Spaces at EOL is effing stupid unless the line is exponentiall^y long.
|
2019-07-08 11:36:49 +10:00 |
|
|
Patrick Webster
|
a9ecef74fd
|
Guessing build fail must be this.
|
2019-07-08 09:30:52 +10:00 |
|
|
Patrick Webster
|
5a035aaf7c
|
Owch fix syntax.
|
2019-07-08 09:18:39 +10:00 |
|
|
yaumn
|
df46faf71f
|
Finish documentation. Exploit is stable.
|
2019-07-07 23:58:29 +01:00 |
|
|
Patrick Webster
|
691c606c53
|
Also some bare POSTs work.
|
2019-07-08 05:13:38 +10:00 |
|
|
Patrick Webster
|
a9791fad74
|
Added Lavarel PHP exploit module with fixes.
|
2019-07-08 00:50:13 +10:00 |
|
|
yaumn
|
7b2a1b67ed
|
Add a documentation file
|
2019-07-07 00:25:54 +01:00 |
|
|
yaumn
|
a5843e48a9
|
Basic reverse shell does not disconnect anymore
|
2019-07-06 00:53:33 +01:00 |
|
|
Guillaume Andre
|
4c2cacd7d6
|
Add meterpreter support
|
2019-07-05 16:53:39 +01:00 |
|
|
yaumn
|
2c8ad0e357
|
First tests with meterpreter sockets
|
2019-07-05 01:04:15 +01:00 |
|
|
yaumn
|
74eb74e606
|
Pipe method with netcat now works
|
2019-07-04 23:15:23 +01:00 |
|
|
Guillaume Andre
|
e4c27d3eab
|
Clean pipe file
Change-Id: Ibc78639ad44eb56ffa26fcfb4f656b5a78dbf76a
|
2019-07-04 16:20:13 +01:00 |
|
|
Guillaume Andre
|
3c0b581371
|
Clean code
Change-Id: I83287dcd52c4ba566396a0ff7e4f3c3125d12bb0
|
2019-07-04 16:16:27 +01:00 |
|
|
Guillaume Andre
|
9b378ceb71
|
Add options. Add pipe netcat method
Change-Id: I0c401add1c2ff76e3e2c3d82a8fb7f74db405a1f
|
2019-07-04 15:02:03 +01:00 |
|
|
yaumn
|
bddfef0cac
|
Add options. Exploits now works with both setuid and nc methods
|
2019-07-04 00:16:28 +01:00 |
|
|
yaumn
|
bb58160d10
|
Exploits now also works with netcat
|
2019-07-03 14:30:23 +01:00 |
|
|
yaumn
|
4f1d9af5fd
|
Add netcat method (still buggy though)
|
2019-07-03 14:30:23 +01:00 |
|
|
Guillaume Andre
|
a2411a1d63
|
First version of the exploit is now working
Change-Id: Idf6b6d773cf71c477fe68885313f5f98d74d9c11
|
2019-07-03 14:30:23 +01:00 |
|
|
Guillaume Andre
|
bef6425d0e
|
First commit
Change-Id: If751eb1753fc8991fe7971c7123a203734396a46
|
2019-07-03 14:30:23 +01:00 |
|
|
William Vu
|
5e04ab2e66
|
Add lokiuox to bypassuac_silentcleanup authors
Looks like they were removed by accident.
|
2019-07-02 12:36:07 -05:00 |
|
|
Brendan Coles
|
a0538a9613
|
Add Xymon useradm Command Execution module
|
2019-07-02 14:04:07 +00:00 |
|
|
h00die
|
a42c7ea736
|
land #11990 windows tomcat cmdlinearguments
|
2019-07-01 17:29:02 -04:00 |
|
|
asoto-r7
|
d3056723e1
|
Land #12030, CVE-2019-12181: Serv-U FTP Server prepareinstallation privesc
|
2019-07-01 16:01:04 -05:00 |
|
|
Brent Cook
|
e50ab5cd13
|
Land #11726, add exploit for CVE-2019-8513, macOS TimeMachine cmd injection
|
2019-06-29 05:36:12 -05:00 |
|
|
bcoles
|
c7ff78c277
|
Remove spaces at EOL
|
2019-06-29 14:01:18 +10:00 |
|
|
Brendan Coles
|
203e3b74db
|
Add Serv-U FTP Server prepareinstallation Privilege Escalation
|
2019-06-29 03:52:53 +00:00 |
|
|
William Vu
|
0a00f3851a
|
Land #12007, true 0s timeout in send_request_*
|
2019-06-28 12:32:32 -05:00 |
|
|
William Vu
|
7a26e1c257
|
Fix sshexec hanging on exec! and blocking close
|
2019-06-27 22:07:37 -05:00 |
|
|
William Vu
|
1503dcd168
|
Land #11997, SilentCleanup UAC bypass
|
2019-06-27 11:52:56 -05:00 |
|
|
William Vu
|
6f1aaac70e
|
Add enigma0x3 and fix nyshone69 researchers
|
2019-06-27 11:38:34 -05:00 |
|
|
William Vu
|
7b0aac72ec
|
Fix missing is_in_admin_group? method
This was missed in the refactor, since admin_group was removed.
|
2019-06-27 11:16:49 -05:00 |
|
|
Jeff McJunkin
|
2927fd5dc8
|
Update bypassuac_sluihijack: Fix typo
|
2019-06-26 14:25:32 -07:00 |
|
|
Shelby Pace
|
258f631f84
|
remove echo cmdstagerflavor
|
2019-06-26 13:56:13 -05:00 |
|
|
Shelby Pace
|
2f29c914ab
|
add changes, remove db backup delete code
|
2019-06-26 13:48:14 -05:00 |
|
|
William Vu
|
61f09d0538
|
Land #12017, xdebug_unauth_exec nil fix
|
2019-06-26 12:26:30 -05:00 |
|
|
William Vu
|
cc3fd747aa
|
Add Pen Test Partners reference
Did we somehow miss this?
|
2019-06-26 11:05:22 -05:00 |
|
|
Jacob Robles
|
efc61a4934
|
Use cmdstager
|
2019-06-26 10:15:25 -05:00 |
|
|
Jacob Robles
|
7c3e566a23
|
Update check
Handle nil error code and fix version extraction based
on both of the possible Apache Tika return pages.
|
2019-06-26 10:15:25 -05:00 |
|
|
Patrick Webster
|
8d6f36e05c
|
Minor fix for xdebug_unauth_exec
Avoid triggering error where res.headers may not exist.
|
2019-06-27 01:00:49 +10:00 |
|
|
Wei Chen
|
2fb129ad41
|
Allow check in exploit to be optional
|
2019-06-25 17:13:55 -05:00 |
|
|
Wei Chen
|
685fb55179
|
Land #11987, Add Nagios XI 5.5.6 magpie_debug Root Exploit
|
2019-06-25 16:17:50 -05:00 |
|
|
Wei Chen
|
23dbc4d90d
|
Change file name
|
2019-06-25 16:10:44 -05:00 |
|
|
Wei Chen
|
e9fc9970ba
|
Make names more random. Also, make metadata changes
|
2019-06-25 16:09:15 -05:00 |
|
|
Quentin Kaiser
|
94dd2b1800
|
Fix disclosure date format.
Co-Authored-By: @shellfail <jrobles@rapid7.com>
|
2019-06-25 20:50:56 +02:00 |
|
|
William Vu
|
5c14aea1a0
|
Fix target_platform check (it's empty, not nil)
|
2019-06-25 12:56:36 -05:00 |
|