af7b60a702
Land #11818 , Add CVE-2019-8565 OSX Feedback Assistant local root exploit
2019-05-20 10:53:56 -07:00
5c97118bd0
Land #10812 , add 32-bit trident exploit support
2019-02-07 09:47:18 -06:00
4533c86a4f
Land #11230 , add JuicyPotato local privilege escalation
2019-01-17 08:48:45 -08:00
ec2b1c9995
Land #10944 , Add macOS Safari exploit from pwn2own2018
2018-12-13 13:32:39 -08:00
56e0c51897
Land #10965 , Add the macOS LPE from pwn2own2018 (CVE-2018-4237)
2018-11-27 12:02:49 -08:00
4a9f6f5d06
Land #10561 , Add Windows local privilege escalation - CVE-2018-0824
...
Merge branch 'land-10561' into upstream-master
2018-10-25 12:33:06 -07:00
3cbc33204c
Land #10664 , add Windows SetImeInfoEx Win32k NULL Pointer Dereference
2018-10-18 21:02:13 -07:00
0f4ef19555
Land #10418 , Add DCOM/RPC NTLM Reflection (MS16-075) Via Reflective DLL
...
Merge branch 'land-10418' into upstream-master
2018-10-04 14:57:20 -07:00
2b194e2b47
Land #10643 , CVE-2018-8440 ALPC Scheduler
...
Merge branch 'land-10643' into upstream-master
2018-09-24 10:48:41 -07:00
b42545a153
Land #10387 , Update mov_ss and add mov_ss_dll
2018-07-27 12:55:43 -07:00
06e8cc49f5
Land #10297 , Add priv escalation mod for CVE-2018-8897
2018-07-13 08:57:19 -07:00
31ce48502c
Land #9528 , WebKit apple safari trident exploit (CVE-2016-4657)
2018-06-04 15:37:57 -07:00
38465e69a8
Land #8795 , Added CVE-2016-0040 Windows Privilege Escalation
...
Merge branch 'land-8795' into upstream-master
2018-05-04 09:38:28 -05:00
5a07be9b96
Land #9041 , Add LPE on Windows using CVE-2017-8464
2017-11-08 10:09:03 -06:00
c2578c1487
Refactor GetProcessSid to remove do while FALSE
2017-11-07 19:11:24 -05:00
3f6f70f820
Move the cve-2017-8464 source to external/source
2017-10-08 13:58:51 -04:00
6a3fc618a4
Add bypassuac_injection_winsxs.rb module
2017-06-03 12:59:50 +02:00
176e88f293
Land #7835 , Add Windows Local Privilege Escalation exploit stub
2017-03-08 06:20:58 -05:00
3d269b46ad
Support OS X for Microsoft Office macro exploit
2017-02-16 12:28:11 -06:00
ccaa783a31
Add Microsoft Office Word Macro exploit
2017-02-02 17:44:55 -06:00
b6e882c8eb
Add a Windows LPE exploit template for x64/x86
2017-01-17 11:20:14 +10:00
32173b9701
Move execute_payload to the kernel lib
2017-01-17 11:19:26 +10:00
2585c8c8b5
Land #7461 , convert futex_requeue (towelroot) module to use targetting and core_loadlib
2017-01-11 13:24:25 -06:00
25a8283af3
fork early and use WfsDelay
2016-12-20 00:59:27 +08:00
f1efa760df
more fixes
2016-12-20 00:52:11 +08:00
e6d4c0001c
hide debug printing
2016-12-20 00:52:11 +08:00
7ac3859393
convert futex_requeue module to use targetting and core_loadlib
2016-12-20 00:52:11 +08:00
3afa20a1af
fix double \n in printf
2016-12-13 17:02:23 +08:00
fe9972cc25
fork early and use WfsDelay
2016-12-13 17:02:23 +08:00
891fccb4e2
add pattern for GT-S7392
2016-12-13 17:02:23 +08:00
07ce7f3aed
fix make run
2016-12-13 17:02:23 +08:00
9ece45a180
dont exit(0) when exploit fails
2016-12-13 17:02:23 +08:00
ebf7ae0739
add CVE-2013-6282, put_user/get_user exploit for Android
2016-12-13 17:02:23 +08:00
0d1fe20ae5
revamped
2016-10-15 20:57:31 -04:00
12493d5c06
moved c code to external sources
2016-10-13 20:37:03 -04:00
0e82ced082
Add LPE exploit module for the capcom driver flaw
...
This commit includes:
* RDI binary that abuses the SMEP bypass and userland function pointer
invocation that is provided by the driver.
* Related metasploit module.
* Associated make.build to build from command line.
* Updated command line build file.
This also includes the beginnings of a new set of functions that help
with the management/automation of kernel-related work on Windows for
local priv esc exploits.
2016-09-27 22:37:45 +10:00
21e6211e8d
add exploit for cve-2016-0189
2016-08-01 13:26:35 -05:00
b4b3a84fa5
refactor ms16-016 code
2016-07-05 20:50:43 -05:00
eb4611642d
Add Jenkins CLI Java serialization exploit module
...
CVE-2015-8103
2015-12-11 14:57:10 -06:00
2c9734f178
Add exploit source
2015-09-15 14:54:05 -05:00
6e857568e0
Delete comments
2015-09-03 13:33:40 -05:00
b39575928e
Update reflective exploit
2015-09-03 11:01:41 -05:00
ecf3fb61d6
Replace external source
2015-08-26 15:32:50 -05:00
d54249370b
Move tpwn source to external/source/exploits
2015-08-17 18:27:47 -05:00
7113c801b1
Land #5732 , reliability update for adobe_flash_hacking_team_uaf
2015-07-17 16:43:39 -05:00
255d8ed096
Improve adobe_flash_opaque_background_uaf
2015-07-16 14:56:32 -05:00
bd5d372436
Add build comment
2015-07-15 18:30:05 -05:00
138789b77c
Fix indentation
2015-07-15 18:29:28 -05:00
b504f0be8e
Update adobe_flash_hacking_team_uaf
2015-07-15 18:18:04 -05:00
299978d0e2
Put again old exploiter
2015-07-11 00:36:32 -05:00
Wei Chen