bc0f7602c2
Only bind the socket once
2026-04-30 17:09:32 -04:00
55f9216698
Finish the exploit check and cleanup methods
2026-04-30 14:39:46 -04:00
12e08fb451
Add an expanded check
2026-04-30 10:54:17 -04:00
9f6349de7d
Initial commit of updated stub
...
Stub has been updated to forward arguments to /bin/sh
2026-04-30 09:53:12 -04:00
3cfbb90b0f
Fix bug
2026-04-17 07:31:25 +09:00
4973d666ff
Relocate json to an external file
2026-04-16 21:57:07 +09:00
214256ffe8
Merge pull request #21310 from zeroSteiner/fix/remove-eshell-payloads
...
Remove the encrypted shell payload and libs
2026-04-16 04:13:02 -04:00
91633fdad7
Remove the encrypted shell payload and libs
2026-04-15 12:43:29 -04:00
c81a2ee9e3
Merge pull request #21287 from zeroSteiner/fix/exe-compat
...
Fix EXE template compatibility with Windows Server 2000
2026-04-15 11:30:34 -04:00
b3d367f1bf
Merge pull request #21085 from dledda-r7/issue-19309
...
Update block-api to prepare for a random IV
2026-04-14 15:35:10 -04:00
b6dd5bbcfc
Switch to building with powershell and add patch
...
Need to patch the headers for compatibility with Server 2000
2026-04-14 10:31:29 -04:00
e79b3cf8a2
Land #21027 , fixes alignment of ELF shared object templates
...
Fixes alignment in ELF shared object templates
2026-04-11 12:20:32 +02:00
6e4be026a2
fix(block_api): block-api graphml file using unicode_string->length
2026-04-10 10:53:23 -04:00
c3c6a21e55
Update the block API hashing algorithm
...
Allow the block API hashing algorithm to accept an IV
2026-04-10 10:53:22 -04:00
53df5b989a
Fixes alignment for Riscv32 LE
2026-04-09 16:24:51 +02:00
ac715797a7
Rreplaces the hardcoded padding with align 4 keyword
2026-04-09 16:09:55 +02:00
b0f3dd9fe3
php_include: XXpathXX -> !INJECT!
2026-03-31 06:38:52 +01:00
1271eed27d
Update bofloader logo location
2026-03-30 11:33:49 +01:00
1faa27f7e6
Fix encoding issues in files
2026-03-25 19:01:57 +00:00
53338b6736
fix: correct ARM LE ELF SO entry point alignment
...
The _start label in the armle ELF shared object template was landing
at offset 0xF6, which is half-word aligned but not word aligned.
ARM A32 requires 4-byte (word) alignment for instruction addresses.
This caused the shared object to fail to load and execute on 32-bit
ARM Linux targets.
Fix: add 2 null padding bytes between strtab and _start, pushing the
entry point from 0xF6 to 0xF8 (word aligned).
Fixes #19668
2026-02-27 19:14:08 +05:30
75ff7b6af1
emacs extension persistence
2026-01-31 22:54:18 -05:00
537a1c5395
Land #19821 , adds Burpsuite persistence module
...
Burp extension persistence
2026-01-22 11:03:08 +01:00
7ccf574e99
burp extension all working
2026-01-16 08:44:27 -05:00
fa83217a07
burp extension java target working
2026-01-15 16:15:48 -05:00
d5fb4a95ed
fix: minor fix linux elf templates
2026-01-06 09:51:56 -05:00
f7caa72f3f
fix: align assembly comments, add single build instructions
2026-01-06 09:51:28 -05:00
0b0ab91594
Add build script
2026-01-06 09:50:07 -05:00
7c77a9cfc7
ARMBe and Zarch stageless payload
2026-01-06 09:47:55 -05:00
3f2be78f9b
feat: add mips64 elf template and meterpreter_loader
2026-01-06 09:47:54 -05:00
861e1b77d6
PowerPC stageless payload
2026-01-06 09:47:50 -05:00
ca9706b6ae
PPC progress
2026-01-06 09:47:27 -05:00
0c2b25e099
PPC64 shellcode added, adding PPC initial work
2026-01-06 09:47:06 -05:00
764c0c449f
PPC64le init
2026-01-06 09:46:33 -05:00
839a8f2ebc
burp extension review
2026-01-04 08:06:14 -05:00
c272d8a0aa
burp extension persistence
2026-01-04 08:06:14 -05:00
30e8ede308
windows and linux build portions working, debugging java
2026-01-04 08:06:14 -05:00
190fab9b0a
windows and linux build portions working
2026-01-04 08:06:14 -05:00
8752110581
non-compile working just needs testing
2026-01-04 08:06:14 -05:00
773f2c4b8b
burp extension persistence
2026-01-04 08:06:14 -05:00
6c4a61fa42
Merge pull request #20761 from Chocapikk/acf-extended-rce
...
Add WordPress ACF Extended unauthenticated RCE exploit (CVE-2025-13486)
2025-12-18 16:03:06 -06:00
d86c5f0908
Merge pull request #20746 from Chocapikk/king-addons
...
Add WordPress King Addons privilege escalation exploit (CVE-2025-8489)
2025-12-10 08:37:11 -08:00
d6560b951f
Merge branch 'master' into loongarch64
2025-12-10 07:08:40 -05:00
b4d65afcf5
Add exploit module for WordPress ACF Extended CVE-2025-13486 unauthenticated RCE
2025-12-09 22:02:41 +01:00
1a8e88c054
fix a typo with the use of CVE-2025-55102, it should be CVE-2025-55182
2025-12-09 09:05:59 +00:00
66279422d1
Merge pull request #20747 from vognik/2025-55182
...
Add CVE-2025-55182 / CVE-2025-66478
2025-12-08 13:41:49 -08:00
1dde12b483
fix naming errors
2025-12-06 02:53:38 -08:00
38682b5ed6
refactoring
2025-12-05 14:58:59 -08:00
f71a71ab18
add exploit mvp
2025-12-04 22:16:27 -08:00
eb33e08efa
Add Documentation
2025-12-04 05:48:26 -08:00
b3fc1b05e5
Add WordPress King Addons privilege escalation exploit (CVE-2025-8489)
2025-12-04 01:37:40 +01:00
Spencer McIntyre