 Spencer McIntyre
|
56cd43a8b8
|
Land #15624, Add module for CVE-2020-27955
|
2021-09-15 14:54:19 -04:00 |
|
|
Spencer McIntyre
|
1bd3a764a6
|
Fixup issues from testing
|
2021-09-14 16:32:25 -04:00 |
|
|
adfoster-r7
|
1499b1988e
|
Land #15609, Add Meterpreter compatibility commands
|
2021-09-13 15:21:03 +01:00 |
|
|
adfoster-r7
|
46718e3390
|
Run Rubocop layout rules on modules
|
2021-09-10 12:53:39 +01:00 |
|
|
adfoster-r7
|
059e39a6f0
|
Specify meterpreter compatibility command requirements
|
2021-09-08 22:59:25 +01:00 |
|
|
bwatters
|
a7d99ebbfc
|
Land # 15611, ProxyShell Improvements
Merge branch 'land-15611' into upstream-master
|
2021-09-07 11:47:13 -05:00 |
|
|
Jack Heysel
|
99352ad107
|
Move methods from lfs.rb, fix fail_with types
|
2021-09-03 16:17:35 -05:00 |
|
|
jheysel-r7
|
93aea73939
|
Update modules/exploits/windows/http/git_lfs_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-09-03 16:17:35 -05:00 |
|
|
Jack Heysel
|
5294c714aa
|
Fix spacing
|
2021-09-03 16:17:35 -05:00 |
|
|
Jack Heysel
|
f9c4c35431
|
Update the target_suitable? method
|
2021-09-03 16:17:35 -05:00 |
|
|
Jack Heysel
|
ba64dce5b7
|
Rubocop offenses
|
2021-09-03 16:17:30 -05:00 |
|
|
Jack Heysel
|
3c43bd409d
|
Added docs an Git User-Agent FP
|
2021-09-03 16:15:39 -05:00 |
|
|
Jack Heysel
|
514a37ef2f
|
Removed unecessary gem file + rubocop
|
2021-09-03 16:15:39 -05:00 |
|
|
Jack Heysel
|
21d99a74fb
|
beta commit
|
2021-09-03 16:15:38 -05:00 |
|
|
Alan Foster
|
134fef21c4
|
Improve validation rhosts validation
|
2021-09-02 13:00:01 +01:00 |
|
|
adfoster-r7
|
ded8200396
|
Land #15537, Add support for ruby 3
|
2021-09-01 10:30:54 +01:00 |
|
|
Spencer McIntyre
|
33da289a9c
|
Print stderr when it's not blank
|
2021-08-31 09:18:11 -04:00 |
|
|
Spencer McIntyre
|
95015f0c2b
|
Update the ProxyShell module docs
|
2021-08-27 17:50:28 -04:00 |
|
|
Spencer McIntyre
|
425dcf1f81
|
Cleanup and refactor the exploit logic
|
2021-08-27 17:26:40 -04:00 |
|
|
Spencer McIntyre
|
965dec43ae
|
Delete the draft email
|
2021-08-27 16:59:17 -04:00 |
|
|
Spencer McIntyre
|
0b3b0aab7d
|
Fix the UNC path conversion regex
|
2021-08-27 15:56:58 -04:00 |
|
|
Spencer McIntyre
|
5e32ca9f56
|
Improve error checks and dont use whoami
|
2021-08-27 15:52:34 -04:00 |
|
|
Spencer McIntyre
|
c4cf99795e
|
Remove the requirement on knowing an email address
|
2021-08-27 15:34:51 -04:00 |
|
|
Spencer McIntyre
|
845c01f27f
|
Store the enumerated mailbox email addresses
|
2021-08-27 15:07:13 -04:00 |
|
|
Spencer McIntyre
|
6c01a0dbea
|
Work off of the system mailbox
|
2021-08-27 14:32:26 -04:00 |
|
|
adfoster-r7
|
4a9a15e638
|
Run Rubocop layout rules on modules
|
2021-08-27 17:19:43 +01:00 |
|
|
Spencer McIntyre
|
d5fdcb8fcb
|
Add the plumbing to enumerate email addresses
|
2021-08-27 11:44:27 -04:00 |
|
|
Grant Willcox
|
7cf2e66085
|
Fix up regex to properly match results and not include the 'version' part of the string, which was causing Rex::Version to return incorrect results and therefore make the 'check' method fail
|
2021-08-26 17:41:41 -05:00 |
|
|
Grant Willcox
|
415b46d9a7
|
Fix Rubocop errors
|
2021-08-26 16:52:58 -05:00 |
|
|
Dimitrie-Toma Furdui
|
63aaa8f438
|
fixed version check for docker_credential_wincred
|
2021-08-26 16:33:45 -05:00 |
|
|
Spencer McIntyre
|
674628e600
|
Land #15384, Improve Windows RDLL injection
|
2021-08-26 12:11:44 -04:00 |
|
|
Grant Willcox
|
be9a7bc9b9
|
Fix up error in alpc_taskscheduler.rb where it expected a DLL but we passed it shellcode instead
|
2021-08-26 09:27:21 -05:00 |
|
|
Grant Willcox
|
7652a2240e
|
Add in missing import for modules/exploits/windows/local/ntapphelpcachecontrol.rb to prevent crashes due to execute_dll not being defined
|
2021-08-25 18:19:58 -05:00 |
|
|
Grant Willcox
|
5a80e9678c
|
Address Spencer's comments and remove changes that don't directly use the DLL injection library API change
|
2021-08-24 16:34:01 -05:00 |
|
|
sjanusz
|
8e00c5a188
|
Add default payload option to targets
|
2021-08-20 16:38:22 +01:00 |
|
|
William Vu
|
31796c6236
|
Land #15561, ProxyShell exploit
|
2021-08-19 10:31:02 -05:00 |
|
|
William Vu
|
0a06730802
|
Update contributors
|
2021-08-19 10:30:21 -05:00 |
|
|
Spencer McIntyre
|
84f8c44e69
|
Write to the targeted backend server
|
2021-08-18 12:34:40 -04:00 |
|
|
Spencer McIntyre
|
75e63992d6
|
Write an exploit for ProxyShell
|
2021-08-18 10:50:34 -04:00 |
|
|
Jack Heysel
|
5aa56b303a
|
Land #15539, Fix cve_2018_8453_win32k_priv_esc
Fixes the check method for the above module, prior
to this change the module was not running against 1703.
|
2021-08-13 11:01:58 -04:00 |
|
|
Grant Willcox
|
85ef49a79c
|
Land #15535, Update psexec module to use SMBSHARE option name for consistency
|
2021-08-11 17:41:38 -05:00 |
|
|
Grant Willcox
|
5fdf990f24
|
Land #15519, Lexmark Universal Print Driver Local Privilege Escalation
|
2021-08-11 15:03:53 -05:00 |
|
|
Grant Willcox
|
7b25bd366f
|
Update documentation and fix a few typos so that it reflects latest changes
|
2021-08-11 12:25:36 -05:00 |
|
|
Jacob Baines
|
afa3d92774
|
Switched to upnp implementation
|
2021-08-10 18:17:18 -04:00 |
|
|
Dimitrie-Toma Furdui
|
6dae595e4e
|
fixed version check for cve_2018_8453_win32k_priv_esc
|
2021-08-10 21:49:42 +03:00 |
|
|
Alan Foster
|
03400991af
|
Update uses of open ssl
|
2021-08-10 15:40:23 +01:00 |
|
|
adfoster-r7
|
b9d2f30bbd
|
Update psexec module to use SMBSHARE option name for consistency
|
2021-08-10 13:17:57 +01:00 |
|
|
Jacob Baines
|
b3dbf7c0e9
|
Altered the approach in check
|
2021-08-09 22:05:16 -04:00 |
|
|
Grant Willcox
|
55404ff29f
|
Further fixes from review and further touch up edits
|
2021-08-09 14:23:05 -05:00 |
|
|
Grant Willcox
|
c03ca1d39d
|
Fix RuboCop error
|
2021-08-09 12:21:07 -05:00 |
|