9b9d3013a4
Module name changed.
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-10-29 22:18:36 +03:00
bbf405bf92
Added EDB number instead of url
2019-10-28 22:09:01 +03:00
5dea40f43b
Added Ajenti 2.1.31 exploit
...
Ajenti is an open source, web-based control panel that can be used for a large variety of server management tasks. It can install packages and run commands, and you can view basic server information such as RAM in use, free disk space, etc. All this can be accessed from a web browser.
This module exploits a command injection in Ajenti <= 2.1.31.
By injecting a command into the username POST parameter to api/core/auth, a shell can be spawned.
2019-10-28 21:39:13 +03:00
fcc9ad628c
Land #12473 , add xscreensaver log privesc
2019-10-23 13:27:45 -05:00
991ccdbda5
Land #12106 , Add Linux PTRACE_TRACEME local root exploit
2019-10-23 14:01:14 +00:00
8c93b219d1
fix compile.rb and rubocop
2019-10-23 20:54:42 +08:00
7ff71819e9
add architecture check to check method
2019-10-23 20:38:55 +08:00
3b5d0b98e7
add a basic check method using loginctl
2019-10-23 19:50:19 +08:00
7d25e321ef
add some more comments
2019-10-23 14:45:32 +08:00
ab9d1470d2
Use workaround for horrific command tokenisation
2019-10-23 06:37:30 +00:00
2d829f9d46
first upgrade on futex
2019-10-22 21:05:55 -04:00
e8469dca93
Land #11025 , add Xorg SUID Modulepath Privesc
2019-10-22 14:11:00 -05:00
f4a54df262
change location of rescue, method name
2019-10-22 09:31:43 -05:00
39db3be145
Update tested versions
2019-10-22 06:35:57 +00:00
1fd09b6a81
add solaris targets and Metasm usage
2019-10-21 16:13:10 -05:00
3565b0efb8
Land #12365 , Total.js CMS widget creation RCE
2019-10-21 15:22:09 -05:00
84430c2a66
Add Solaris xscreensaver log Privilege Escalation module
2019-10-21 06:14:50 +00:00
0ebc971d29
Use CmdStager mixin
2019-10-15 14:00:58 -05:00
bb7c42b2ce
Arch and disclosure date
2019-10-15 10:25:20 -05:00
a3331dba9f
Move totaljs cms module and doc
2019-10-15 10:11:14 -05:00
ec9ea4ce0d
Land #12366 , fix nil check in atutor module
2019-10-14 18:14:06 -05:00
4d4754a389
feedback from bcoles
2019-10-10 13:30:31 +08:00
aadfb843bb
add module move metadata
2019-10-08 13:18:47 -05:00
5ce3f5d166
Land #12400 , Add File Sharing Wizard SEH exploit module
2019-10-08 07:42:47 -05:00
951fd7b93e
Replace double quotes with single quotes
2019-10-08 11:44:41 +01:00
25937c9e35
Use uri param and clean up logging
2019-10-07 17:15:04 +01:00
4eb068c9b0
Update target
2019-10-07 15:25:27 +01:00
02376c88fe
Use httpclient over tcpclient
2019-10-07 15:20:30 +01:00
b723d026ab
Address code review comments
...
Use strings in info hash, port is an integer, remove version number from
name
2019-10-06 15:27:29 +01:00
af05a33957
Land #12408 , Fix spelling mistakes
2019-10-05 21:10:56 +00:00
90ea642c35
Land #12406 , Fix spelling mistakes
2019-10-05 19:42:58 +00:00
9f29f5f419
fix spelling received
2019-10-05 14:40:27 -04:00
905eb17132
begining to fix spelling errors
2019-10-05 14:26:34 -04:00
4cc85ecb75
adress a spelling problem
2019-10-05 14:22:18 -04:00
270f1cc63a
Land #12394 fix spelling of separated
2019-10-05 14:14:10 -04:00
f95f952b65
fix separated spelling
2019-10-05 14:13:38 -04:00
3c397b721d
Land #12375 , Add image execute options persistence module
2019-10-04 14:40:37 -05:00
06661df510
Make rubocop happy
2019-10-04 15:12:51 +01:00
938c3a0e76
Add module docs
2019-10-03 23:22:21 +01:00
e13463eb7c
remove default exit func
2019-10-03 16:24:29 +01:00
c8c4d8ad77
Add new bad char
2019-10-03 15:46:26 +01:00
ffc8c7e32a
more ruby style
2019-10-02 20:23:12 -04:00
8142f22f6e
shutup, rubocop
2019-10-02 14:50:00 -05:00
20d21b45de
Move module location
2019-10-02 16:08:54 +01:00
2f8e22b603
Remove hardcoded shell code and use options from info hash
2019-10-02 15:11:33 +01:00
c747221863
Remove invalid email addresses
2019-10-02 13:35:25 +02:00
477a70934f
Fix copy/pasta error in options
2019-10-01 10:10:51 -05:00
273e8b6a82
Add image execute options persistence module
2019-09-30 16:34:43 -05:00
3edb0e3ef5
Reword module title and description
2019-09-30 14:28:53 -05:00
4b5c6002b4
Move implant neutralization code to method
2019-09-30 14:18:41 -05:00
Onur ER