Commit Graph

13654 Commits

Author SHA1 Message Date
William Vu 4bb6afb24e Move dependency check so we can send our metadata
I missed this detail about the module.run method when adding the check.
Defining the metadata or where you put it doesn't matter so much as if
you're sending it over JSON-RPC.
2018-06-20 15:03:26 -05:00
William Vu 8277a4da24 Add better targeting feedback 2018-06-20 12:41:22 -05:00
William Vu 13a4b2e359 Add dependency check for Impacket 2018-06-20 12:22:17 -05:00
William Vu 0820268d8a Improve rank handling with shim logic 2018-06-19 16:46:20 -05:00
William Vu 9913606ed9 Correct rank and formatting in Haraka 2018-06-19 11:44:02 -05:00
William Vu 9545bac809 Rename remote_exploit_generic template
Dropping "generic" from the name. I initially had some reservations
about leaving it in, and after discussion with @acammack-r7, we've
decided it adds nothing useful.
2018-06-19 11:43:56 -05:00
William Vu df4cee1d77 Fix PEP 8 in added code 2018-06-19 11:20:15 -05:00
William Vu 781478b283 Document some things 2018-06-19 11:20:15 -05:00
William Vu ecea36c459 Convert PoC to external module 2018-06-19 11:20:10 -05:00
William Vu 45e8adc617 Add sleepya's ETERNALBLUE exploit for Win8+ 2018-06-18 11:41:57 -05:00
Jacob Robles cb50d0fade Land #9825, Add 'phpMyAdmin Authenticated Remote Code Execution' 2018-06-18 08:51:53 -05:00
Jacob Robles 2e2ded22fc Use Gem::Version
Simplify version comparisons
2018-06-18 08:35:47 -05:00
Jacob Robles 122ea2ddcb Update module, Add docs
Changed the module to an exploit module and
added documentation.
2018-06-18 07:33:05 -05:00
Clément Notin b64ab9b0de Remove duplicate word in the agitum_outpost_acs module description 2018-06-14 15:15:29 +02:00
bwatters-r7 29f4870fa0 Land #10101, Add glibc 'realpath()' Privilege Escalation exploit 2018-06-12 16:41:07 -05:00
bwatters-r7 06b3fdce49 Update reliability because of failures 2018-06-12 16:39:41 -05:00
William Vu c3c6bc19da Land #10059, CVE-2018-1111 exploit 2018-06-12 15:02:06 -05:00
William Vu f4bb00b9a5 Remove stray PayloadType outside Compat 2018-06-12 14:59:29 -05:00
Tim W 9abf438428 Land #10118, cleanup OSX local exploit modules 2018-06-08 14:57:09 +08:00
Tim W 641ffca98c use base_dir 2018-06-08 14:53:21 +08:00
Chris Higgins 78bcd57694 Land #10092, Cleanup linux/local/recvmmsg_priv_esc 2018-06-04 10:32:35 -05:00
Brendan Coles 3bcc329c07 Add HID discoveryd command_blink_on Unauthenticated RCE exploit 2018-06-03 05:41:10 +00:00
Brent Cook 61a98b94b6 Land #9528, WebKit apple safari trident exploit (CVE-2016-4657) 2018-06-02 21:52:52 -05:00
phra e9db949418 refactor: replace last string with hash 2018-06-01 16:59:38 +02:00
phra ae3e8dab78 chore: update references 2018-06-01 16:58:26 +02:00
phra 5649dd0598 refactor: use Hash.to_json instead of strings 2018-06-01 16:57:57 +02:00
Brendan Coles 9c14bddd93 Cleanup OSX local exploit modules 2018-05-31 12:26:33 +00:00
bwatters-r7 1e57aa5a57 Land #9777, Slui File Handler Hijack LPE 2018-05-30 15:22:12 -05:00
Tim W c0841ef0bf set default payload 2018-05-30 18:04:22 +08:00
Tim W 2ec7f11b90 add binary 2018-05-30 18:02:17 +08:00
Brent Cook e69c51132d Land #10083, Add Msf::Post::OSX::Priv mixin 2018-05-29 23:01:36 -05:00
Pedro Ribeiro d77ee20fc7 Add fix for 7.3.0 2018-05-30 00:59:11 +03:00
Pedro Ribeiro f1663afd53 Change patch level of vulnerable versions 2018-05-30 00:37:29 +03:00
Pedro Ribeiro 476030bbd6 Fix grep with proper Base64 support; IBM bug! 2018-05-29 18:49:52 +03:00
Pedro Ribeiro a3c7ac830f Fix typo in rand 2018-05-29 18:40:50 +03:00
Pedro Ribeiro ac5718d24c Fix whitespace 2018-05-29 15:02:36 +03:00
Pedro Ribeiro 809982b430 Make changes requested by bcoles 2018-05-29 14:48:57 +03:00
Pedro Ribeiro 56dd07639f add vuln versions 2018-05-28 17:37:58 +03:00
Pedro Ribeiro aaaa9c7508 Fix warnings from travis 2018-05-28 17:18:52 +03:00
Pedro Ribeiro e126681814 Changed disclosure date 2018-05-28 17:08:48 +03:00
Pedro Ribeiro cfb7d4c2fe Add github url 2018-05-28 16:53:54 +03:00
Pedro Ribeiro 7db8183bc7 Create file for CVE-2018-1418 2018-05-28 16:39:10 +03:00
Brendan Coles 0af5d44c42 Add glibc 'realpath()' Privilege Escalation exploit 2018-05-26 21:25:59 +00:00
Brent Cook fad5a99c7d fix incorrect disclosure date 2018-05-25 02:59:08 -05:00
Brendan Coles 651fb69585 Cleanup linux/local/recvmmsg_priv_esc module 2018-05-24 17:56:07 +00:00
Brent Cook bc5c7a15e5 remove single-entry OptEnum from module, since there is only one possible TECHNIQUE 2018-05-23 13:44:53 -05:00
bwatters-r7 77403479f5 code cleanup 2018-05-23 12:53:48 -05:00
gushmazuko 3ef6f82894 Update bypassuac_sluihijack.rb 2018-05-23 12:25:49 +02:00
Brendan Coles 45481f26b6 Add Msf::Post::OSX::Priv mixin 2018-05-22 22:25:39 +00:00
Brendan Coles 15e472637a Land #10070, Fix cleanup in exploits/osx/local/rootpipe_entitlements 2018-05-22 21:52:24 +00:00