phra
e69d509bdf
chore: update description and ranking
2019-01-12 04:32:21 +01:00
phra
3a865a0c05
feat: spawn as NT AUTHORITY\SYSTEM
2019-01-12 04:03:26 +01:00
phra
149f895329
feat: add LOGFILE support for debug
2019-01-11 18:21:54 +01:00
phra
dca99552e6
feat: pass payload length to the dll
2019-01-11 16:28:49 +01:00
phra
7653d64c4a
fix: improve exploit check
2019-01-11 15:38:57 +01:00
phra
dc2d3c5774
feat: add juicy potato post module, fixes #11229
2019-01-10 17:20:43 +01:00
Jacob Robles
88b7b7df4a
Fix additional path space issues
2018-12-17 07:00:23 -06:00
Green-m
0aa6e5a640
Handle path with spaces correctly.
2018-12-17 10:25:06 +08:00
Jacob Robles
8adfef5730
Remove Version, Fix Whitespace
2018-12-14 13:19:49 -06:00
Jacob Robles
e67eaa94c9
Move code to ERB template
2018-12-14 13:13:32 -06:00
Jacob Robles
556d182231
Remove code that was replaced
2018-12-14 09:15:01 -06:00
Jacob Robles
a057b72bd9
Use argument
2018-12-14 09:14:27 -06:00
Jacob Robles
dfa84aa1af
Use exploit default exception handling
2018-12-14 09:12:32 -06:00
Jacob Robles
5fd7b82f7a
Remove unused parameter
2018-12-14 09:10:29 -06:00
Jacob Robles
58aa16d06b
Work around snprintf
2018-12-13 14:29:54 -06:00
Jacob Robles
92feeea0ca
Minor syntax change
2018-12-13 13:46:40 -06:00
Jacob Robles
ea724dec46
Merge in upstream/master
2018-12-12 11:00:31 -06:00
Brendan Coles
5c06cdca73
Replace WsfDelay with WfsDelay - Fixes #11018
2018-11-25 05:09:16 +00:00
Shelby Pace
0c38babb9e
Land #10874 , rm size restriction from pyld_inject
2018-11-05 15:16:40 -06:00
Jacob Robles
6bc4b71ca3
Land #10873 , Add notes to exploit modules
2018-11-02 14:11:11 -05:00
Spencer McIntyre
7faa775b55
Remove the now unnecessary DisableNops option
2018-11-02 14:57:41 -04:00
bwatters-r7
114a8127e8
Land #10858 , bypassuac_eventvwr optimizations - reduce created processes and artifacts
...
Merge branch 'land-10858' into upstream-master
2018-10-31 16:44:32 -05:00
bwatters-r7
af7a7d586b
Add validation check to make sure x64 remote host and a x86 session
...
cannot select an x64 target.
2018-10-31 16:31:52 -05:00
Elazar Broad
6fe7bb0bb6
Increase sleep time to 10 seconds
...
Increase the wait time before removing the registry key - allows the payload to spawn successfully on slow systems.
2018-10-29 12:55:03 -04:00
Spencer McIntyre
52fee303d4
Remove the size restriction from payload_inject
2018-10-27 21:26:09 -04:00
Spencer McIntyre
caf76a6555
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
Wei Chen
e84ba62740
Cosmetic changes for local/webexec
2018-10-24 16:13:47 -05:00
Elazar Broad
16d633fabd
Remove spaces before EOL
2018-10-24 11:04:41 -04:00
Shelby Pace
3729e9ed7b
added description, references
2018-10-24 09:46:00 -05:00
Elazar Broad
ef2854c918
Use in-memory reflection for executing the payload
...
Use to_win32pe_psh_reflection() instead of to_win32pe_psh_net() in order to reduce the amount of processes and forensic artifacts created by this module.
2018-10-23 22:12:10 -04:00
Elazar Broad
d75c599929
Use ShellExecuteA to spawn eventvwr.exe
...
Use ShellExecuteA from railgun to spawn eventvwr.exe, as opposed to cmd /c. This reduces the amount of processes generated by this module.
2018-10-23 21:52:36 -04:00
Elazar Broad
da4b424780
Fix typo in cleanup message
2018-10-23 21:33:49 -04:00
Shelby Pace
34ae9c38f9
added WebEx modules, arch check
2018-10-23 15:51:23 -05:00
Green-m
c0e8d09802
Add disclosure date.
2018-10-23 09:44:36 +08:00
Green-m
4711d6ba08
Move post module persistenct service to exploit.
2018-10-22 18:07:40 +08:00
Wei Chen
3cee96d8ed
Land #10664 , add Windows SetImeInfoEx Win32k NULL Pointer Dereference
2018-10-18 14:42:14 -05:00
Wei Chen
fac05db154
Update rescue statement
2018-10-18 14:30:20 -05:00
Shelby Pace
9e069c95f5
add auto targeting
2018-10-15 23:26:08 -07:00
Shelby Pace
6cdfe604d4
removed exception handling for reg_file_for_handle
2018-10-15 18:29:15 -07:00
Dhiraj Mishra
f78ccbf995
Indentation
2018-10-15 08:32:58 +05:30
Shelby Pace
a942654515
rescue-from-method addressed
2018-10-12 14:47:05 -05:00
Shelby Pace
26631bcfbd
addressed suggestions
2018-10-12 14:35:42 -05:00
Dhiraj Mishra
96eeaf7da3
Made few changes
...
Thank you bcoles
2018-10-12 11:47:53 +05:30
Shelby Pace
a67122aaf7
updated doc, added x86_64 binary
2018-10-11 12:37:51 -05:00
Shelby Pace
521b50af55
added separate binaries, extended for x86
2018-10-11 10:43:35 -05:00
Shelby Pace
04cc40136f
changed formatting, deleted post, renamed files
2018-10-10 14:41:14 -05:00
Shelby Pace
76325bd21e
fixed indentation
2018-10-10 14:18:44 -05:00
Dhiraj Mishra
ee2c6274c7
Updating description
2018-10-10 22:26:07 +05:30
Dhiraj Mishra
4a821101ce
Fixing cmd_exec_get_pid
2018-10-10 21:59:46 +05:30
Dhiraj Mishra
c1c07d5c8f
Updating
...
Suggestion given by Shelby
2018-10-10 21:30:12 +05:30