Commit Graph

5681 Commits

Author SHA1 Message Date
Brent Cook 5946245d87 avoid using SMBv2 on Windows XP Native Upload targets 2018-07-02 16:07:27 -05:00
Wei Chen 2ec091931a Land #10237, Add Boxoft WAV to MP3 Converter exploit module 2018-07-02 14:01:27 -05:00
Wei Chen 3e33a6f0a4 Update moduel boxoft_wav_to_mp3 2018-07-02 14:00:33 -05:00
Shelby Pace 54fce378fa added target versions to documentation 2018-07-02 09:20:17 -05:00
Brent Cook 85dc81a58b Land #10185, add SMBv1/2 support in psexec 2018-06-29 17:49:27 -05:00
Shelby Pace 3b5555542c add exploit module and documentation 2018-06-29 15:17:12 -05:00
Brendan Coles c508a5f7f3 Land #10213, Add FTPShell client 6.70 Stack Buffer Overflow exploit 2018-06-29 14:40:51 +00:00
Daniel Teixeira 1e148a8862 Update ftpshell_cli_bof.rb 2018-06-29 14:22:40 +01:00
William Vu 40ac79ced0 Land #10218, MS17-010 Windows Embedded Standard 7 2018-06-28 16:11:56 -05:00
Daniel Teixeira 1854793253 Update ftpshell_cli_bof.rb 2018-06-28 13:01:13 +01:00
Daniel Teixeira bd2fb56adf Update ftpshell_cli_bof.rb 2018-06-28 12:55:48 +01:00
zerosum0x0 a5c0881c08 add Windows Embedded Standard 7 support 2018-06-27 19:17:18 -06:00
Daniel Teixeira 837427ccae Update ftpshell_cli_bof.rb 2018-06-27 16:42:29 +01:00
Daniel Teixeira 4a4e38a7b0 FTPShell client 6.70 (Enterprise edition) 2018-06-27 16:37:22 +01:00
Jacob Robles 2fd0d797ac psexec smb2 support 2018-06-25 15:06:23 -05:00
Adam Cammack 6dafb13f28 Module metadata cleanup 2018-06-21 15:10:47 -05:00
Jeffrey Martin 2f40b2cb45 address missed impacket dependency check 2018-06-21 13:56:17 -05:00
William Vu 4bb6afb24e Move dependency check so we can send our metadata
I missed this detail about the module.run method when adding the check.
Defining the metadata or where you put it doesn't matter so much as if
you're sending it over JSON-RPC.
2018-06-20 15:03:26 -05:00
William Vu 8277a4da24 Add better targeting feedback 2018-06-20 12:41:22 -05:00
William Vu 13a4b2e359 Add dependency check for Impacket 2018-06-20 12:22:17 -05:00
William Vu 0820268d8a Improve rank handling with shim logic 2018-06-19 16:46:20 -05:00
William Vu 9545bac809 Rename remote_exploit_generic template
Dropping "generic" from the name. I initially had some reservations
about leaving it in, and after discussion with @acammack-r7, we've
decided it adds nothing useful.
2018-06-19 11:43:56 -05:00
William Vu df4cee1d77 Fix PEP 8 in added code 2018-06-19 11:20:15 -05:00
William Vu 781478b283 Document some things 2018-06-19 11:20:15 -05:00
William Vu ecea36c459 Convert PoC to external module 2018-06-19 11:20:10 -05:00
William Vu 45e8adc617 Add sleepya's ETERNALBLUE exploit for Win8+ 2018-06-18 11:41:57 -05:00
Clément Notin b64ab9b0de Remove duplicate word in the agitum_outpost_acs module description 2018-06-14 15:15:29 +02:00
bwatters-r7 1e57aa5a57 Land #9777, Slui File Handler Hijack LPE 2018-05-30 15:22:12 -05:00
Brent Cook bc5c7a15e5 remove single-entry OptEnum from module, since there is only one possible TECHNIQUE 2018-05-23 13:44:53 -05:00
bwatters-r7 77403479f5 code cleanup 2018-05-23 12:53:48 -05:00
gushmazuko 3ef6f82894 Update bypassuac_sluihijack.rb 2018-05-23 12:25:49 +02:00
zerosum0x0 4a64401a58 fix ms17-010 similar to 4a56ecf3ae 2018-05-14 15:45:20 -06:00
bwatters-r7 ce5be387c4 Land #8795, Added CVE-2016-0040 Windows Privilege Escalation
Merge branch 'land-8795' into upstream-master
2018-05-03 16:33:53 -05:00
bwatters-r7 96b892a546 Make Rubocop happy 2018-05-03 11:30:05 -05:00
Jacob Robles 4a56ecf3ae psexec native upload argument 2018-05-01 09:33:17 -05:00
Jeffrey Martin 28173222a8 Land #9881, cleanup psexec code 2018-04-30 18:39:36 -05:00
Brent Cook 4cba6d1df4 suggest a reason if we get no server response 2018-04-25 03:57:12 -05:00
Auxilus cbfdaf23a0 updated for requested changes 2018-04-25 08:56:54 +05:30
Auxilus e7ac2cd155 move report_auth to psexec module 2018-04-24 23:00:55 +05:30
Auxilus 3353102dc1 fix opt dependencies 2018-04-24 21:55:09 +05:30
William Vu a0f16b4a66 Prefer print_warning for consistency 2018-04-24 11:17:19 -05:00
William Vu 7ef8b99480 Improve printing in ETERNALBLUE's verify_arch
Now shows the invalid arch instead of showing nothing.
2018-04-24 11:09:54 -05:00
Auxilus f0b9ea635a cleanup psexec code 2018-04-16 09:04:36 +05:30
gushmazuko bd672ae148 Description changed 2018-04-08 12:00:14 +02:00
gushmazuko 1e439b623b Description changed 2018-04-08 11:46:01 +02:00
gushmazuko 11389a6d53 Fixed errors 2 2018-04-02 17:33:53 +02:00
gushmazuko 1327c0bb7e Fixed errors 2018-04-02 17:21:16 +02:00
Brendan Coles 3aac041dcf Return CheckCode::Safe for unsupported x64 systems 2018-03-29 12:03:33 +00:00
gushmazuko 922ed8c284 Slui File Handler Hijack LPE
Slui File Handler Hijack LPE
2018-03-29 00:15:03 +02:00
gushmazuko 69d9321e6b Slui File Handler Hijack LPE
Slui File Handler Hijack LPE - MSF Module
UAC Bypass | Local Privilege Escalation Via Slui Hijack
2018-03-28 20:44:16 +02:00