d676f98d56
Remove already included Msf::Exploit::Remote::Tcp
2019-08-13 10:56:03 -05:00
da98d3d376
finish documentation and module
2019-08-13 09:47:24 -05:00
71f4eadd18
module rework and some documentation
2019-08-12 15:22:22 -05:00
e1e1cd9020
Land #12161 , Store opasswd password history
2019-08-12 09:22:50 -05:00
63dfa2a8bd
Fix the RDP NLA protocol detection
2019-08-11 19:23:29 -07:00
84669f567b
Add the RDP fingerprinting method to rdp_scanner
2019-08-11 16:20:14 -07:00
9fdee466ca
Update ptrace_sudo_token_priv_esc
2019-08-10 07:03:23 +00:00
76da9ea4fc
get shell with test data
2019-08-09 08:40:41 -05:00
46005eb933
Updated References
2019-08-09 14:08:47 +01:00
373e409184
add module applocker_evasion_workflow_compiler
2019-08-08 18:48:10 +01:00
320642e3c0
add module applocker_evasion_regasm_regsvcs
2019-08-08 18:36:36 +01:00
9418f4bac2
Land #12032 , add Xymon gather info module
2019-08-08 10:55:40 -05:00
f317987e02
Land #12175 , hadoop_unauth_exec NoMethodError fix
2019-08-07 22:44:55 -05:00
b5fd9b4fed
Fix whitespace
2019-08-07 22:44:38 -05:00
6cf0ff0678
Fix #12156 , NoMethodError in hadoop exploit.
2019-08-08 10:06:40 +08:00
46b6a5927e
Comment update
2019-08-07 19:25:43 -05:00
4861a139ca
Minor comments
2019-08-07 19:20:36 -05:00
9566334868
merge upstream/master
2019-08-07 19:11:58 -05:00
93e6ff67b4
Addressing feedback
2019-08-07 16:37:59 -05:00
2d5e9cb241
RDP: address feedback from wvu
2019-08-07 14:47:33 -05:00
18da91a348
Add 'Crash' action for enabling the DoS
2019-08-07 11:38:14 -05:00
7d30c92375
RDP: rubocop cleanup
2019-08-07 09:12:53 -05:00
b6956bd3be
RDP: moar migration
2019-08-07 08:50:01 -05:00
0c1868b158
RDP: migrate security nego to lib
2019-08-07 08:27:15 -05:00
7dc87bf8bc
RDP: Refactor protocol code
2019-08-07 07:25:42 -05:00
a63e0ba106
BlueKeep: Add DoS exploit
2019-08-06 20:15:53 -05:00
979681443c
add rudimentary check method
2019-08-06 14:48:37 +08:00
b35b4674d0
fix forking behaviour
2019-08-06 14:17:28 +08:00
f48d1b1231
add more links
2019-08-06 13:54:15 +08:00
efd6bec827
Store opasswd password history
2019-08-04 01:12:06 +00:00
61a1abab79
update csproj arch targeting
2019-08-03 10:41:13 +01:00
c3b6e33f2e
Adds suggested modifications
2019-08-03 06:10:11 +02:00
ce552ab88b
Removes double quotes in libreoffice_logo_exec
...
Co-Authored-By: Carter Brainerd <0xCB@protonmail.com >
2019-08-03 05:52:12 +02:00
eab38b8b21
make requested changes
2019-08-02 22:49:43 +01:00
817726699c
make requested changes
2019-08-02 22:48:54 +01:00
cbe4771d29
Land #12159 , EXITFUNC for pingback
2019-08-02 16:07:02 -05:00
c9d2013ddb
Change generate method to match single payloads.
2019-08-02 15:47:36 -05:00
6572fa93c4
Land #12158 , needs_cleanup for on_new_session
2019-08-02 14:56:47 -05:00
d9d48ffa91
Land #12152 , EOFError fix for BlueKeep scanner
2019-08-02 11:23:22 -05:00
e11de696d4
Make msftidy happy
2019-08-02 11:17:41 -05:00
20438614bb
Stupid extra line....
2019-08-02 11:11:19 -05:00
c6defb0264
Rubocop complaints and require_size additions
2019-08-02 11:09:14 -05:00
f675a974a6
implement changes suggested by @cbrnrd
2019-08-02 16:29:08 +01:00
14ee5c4a4f
Update Windows payloads to support exitfunk
2019-08-02 10:28:57 -05:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
5e64f8560a
Fix whitespace
2019-08-02 10:23:41 -05:00
8085ad3046
Set default payload based on chosen target.
2019-08-02 10:47:28 +02:00
610bed8fd9
&& is preferred over and.
2019-08-02 10:41:14 +02:00
c4c0ed9187
Land #12155 , Fix printed CVE number
2019-08-01 18:01:53 -05:00
bbf0cb4d9d
Land #11653 , Apache Tika CVE-2018-1335 RCE
2019-08-01 17:43:57 -05:00
William Vu