William Vu
6dbf9445c9
Add MAC address discovery
2018-03-02 19:18:30 -06:00
William Vu
107512498c
Add check method
2018-03-02 19:16:37 -06:00
William Vu
25f36fb926
Refactor code into new methods
2018-03-02 19:16:37 -06:00
William Vu
109bc87ffb
Check for nil, EOFError, and zero-length response
2018-03-02 19:15:20 -06:00
William Vu
bcdfebf93c
Add a vprint for creds we chose
2018-03-02 19:15:19 -06:00
William Vu
4418a0de02
Enhance detection of telnetenabled vs. telnetd
2018-03-02 19:15:19 -06:00
William Vu
fba30d47a2
Use default creds specific to protocol
2018-03-02 19:15:18 -06:00
William Vu
1f40afea9c
Add automatic target for detection of TCP or UDP
2018-03-02 19:15:18 -06:00
William Vu
a5e5b618fd
Add print statements I forgot
2018-03-02 19:15:17 -06:00
William Vu
e87681f2c4
Add NETGEAR TelnetEnable
2018-03-02 19:15:17 -06:00
Biswajit Roy
38c42f3b10
Fixed Typos
...
Fixed minor typing errors.
2018-03-02 17:38:19 +05:30
Sonny Gonzalez
883654f0ea
Land #9653 , fix Y2k38 issue (until Jan 1, 2038)
2018-03-01 09:13:41 -06:00
Brent Cook
27bd2a4a9f
workaround Y2k38 issues in java certificate generation
2018-03-01 08:41:28 -06:00
Daniel Teixeira
c84ece15a3
Update exodus.rb
2018-02-28 11:04:16 +00:00
Daniel Teixeira
c366f94017
Update exodus.rb
2018-02-28 10:35:05 +00:00
Brent Cook
325ad7256e
if multi/handler is disabled, exit
2018-02-27 04:30:09 -06:00
attackdebris
2939695991
Add ARCH_CMD and general fixup
2018-02-26 16:59:36 -05:00
Daniel Teixeira
15bd45cee3
Exodus Module
2018-02-26 21:31:13 +00:00
William Vu
7663e5c1f6
Land #9601 , ms17_010_eternalblue reliability fixes
2018-02-22 15:30:45 -06:00
bwatters-r7
4b8a8fa2b1
Land #9441 , Create exploit for AsusWRT LAN RCE
...
Merge branch 'land-9441' into upstream-master
2018-02-22 10:40:45 -06:00
Brendan Coles
f98b4b0540
require 'rubygems/package'
2018-02-22 04:28:56 +00:00
Aaron Soto
af45c1764b
Tweak exception handling and timing of ms17_010_eternalblue
2018-02-21 13:40:04 -06:00
Brent Cook
78822fd799
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-21 06:59:09 -06:00
Jacob Robles
b2cb4c425d
Land #9594 , CloudMe Sync v1.10.9 Buffer Overflow
2018-02-20 17:49:19 -06:00
Jacob Robles
6a62ca15e7
Remove NOPS
...
[ticket: #9594 ]
2018-02-20 17:40:33 -06:00
Daniel Teixeira
745ad4d727
CloudMe Sync Client BoF
2018-02-20 21:57:13 +00:00
Jacob Robles
107a41a4ce
Land #9561 , Disk Savvy Enterprise v10.4.18 built-in server buffer overflow
2018-02-20 15:42:12 -06:00
Jacob Robles
d02bf40d69
Modified Exploit
...
Remove NOPS that weren't needed and freed up space for a larger payload.
[ticket: #9561 ]
2018-02-20 15:35:43 -06:00
Chris Higgins
74c6e21f49
Lands #9504 , MagniComp SysInfo privilege escalation
2018-02-19 22:47:33 -06:00
Quentin Kaiser
9e3f12665e
Plaintext for console type to see what's going on.
2018-02-17 20:11:05 +01:00
Quentin Kaiser
e877151895
Attempt at clarifying network exchange using Telnet class IAC related constants.
2018-02-17 14:00:57 +01:00
Quentin Kaiser
e86169c217
Clean up Telnet IAC negotation and xplain obscure hex bytes.
2018-02-15 23:08:17 +01:00
Daniel Teixeira
651ddbb7eb
Disk Savvy Server Buffer Overflow
2018-02-15 10:09:07 +00:00
Daniel Teixeira
929027ab96
Disk Savvy Server Buffer Overflow
2018-02-14 20:35:32 +00:00
Quentin Kaiser
5fbeb74f0c
Remove osx platform and fix date.
2018-02-13 23:57:53 +01:00
Quentin Kaiser
0259e794ba
OSGi console remote command execution.
2018-02-13 23:38:18 +01:00
h00die
285b329ee1
Land #9422 abrt race condition priv esc on linux
2018-02-11 11:58:39 -05:00
Pearce Barry
add7ae8fa1
Land #9536 , Add Ubuntu notes to documentation
2018-02-11 07:27:00 -06:00
Pearce Barry
321b78b0fe
Land #9408 , Add Juju-run Agent Privilege Escalation module (CVE-2017-9232)
2018-02-11 07:19:49 -06:00
Brendan Coles
4e5cbd68b9
Add Ubuntu notes to documentation
2018-02-11 06:52:36 +00:00
Brendan Coles
1177efef89
Update tested versions
2018-02-10 16:32:20 +00:00
Brendan Coles
0d573e1434
Support shell sessions
2018-02-09 16:15:04 -05:00
Brendan Coles
45249d582d
Add partition check
2018-02-09 16:15:04 -05:00
Brendan Coles
0ba37f8104
Add glibc $ORIGIN Expansion Privilege Escalation exploit
2018-02-09 16:15:04 -05:00
h00die
cb1b59545b
Land #9469 linux local exploit for glibc ld audit
2018-02-09 14:00:42 -05:00
Brendan Coles
5b251ae672
Support shell sessions on Debian
2018-02-08 11:29:09 +00:00
Brent Cook
b1d0529161
prefer 'shell' channels over 'exec' channels for ssh
...
If a command is not specified to CommandStream, request a "shell"
session rather than running exec. This allows targets that do not have a
true "shell" which supports exec to instead return a raw shell session.
2018-02-08 02:21:16 -06:00
Brent Cook
ca4ad1d0c4
Land #9478 , Improve Dup Scout BOF exploit
2018-02-07 23:51:14 -06:00
Brendan Coles
d078ab8033
Use 'exit' CommandShellCleanupCommand
2018-02-06 13:36:36 +00:00
Brendan Coles
41dbae29a6
Add MagniComp SysInfo mcsiwrapper Privilege Escalation exploit
2018-02-05 13:47:09 +00:00