Commit Graph

891 Commits

Author SHA1 Message Date
phra e69d509bdf chore: update description and ranking 2019-01-12 04:32:21 +01:00
phra 3a865a0c05 feat: spawn as NT AUTHORITY\SYSTEM 2019-01-12 04:03:26 +01:00
phra 149f895329 feat: add LOGFILE support for debug 2019-01-11 18:21:54 +01:00
phra dca99552e6 feat: pass payload length to the dll 2019-01-11 16:28:49 +01:00
phra 7653d64c4a fix: improve exploit check 2019-01-11 15:38:57 +01:00
phra dc2d3c5774 feat: add juicy potato post module, fixes #11229 2019-01-10 17:20:43 +01:00
Jacob Robles 88b7b7df4a Fix additional path space issues 2018-12-17 07:00:23 -06:00
Green-m 0aa6e5a640 Handle path with spaces correctly. 2018-12-17 10:25:06 +08:00
Jacob Robles 8adfef5730 Remove Version, Fix Whitespace 2018-12-14 13:19:49 -06:00
Jacob Robles e67eaa94c9 Move code to ERB template 2018-12-14 13:13:32 -06:00
Jacob Robles 556d182231 Remove code that was replaced 2018-12-14 09:15:01 -06:00
Jacob Robles a057b72bd9 Use argument 2018-12-14 09:14:27 -06:00
Jacob Robles dfa84aa1af Use exploit default exception handling 2018-12-14 09:12:32 -06:00
Jacob Robles 5fd7b82f7a Remove unused parameter 2018-12-14 09:10:29 -06:00
Jacob Robles 58aa16d06b Work around snprintf 2018-12-13 14:29:54 -06:00
Jacob Robles 92feeea0ca Minor syntax change 2018-12-13 13:46:40 -06:00
Jacob Robles ea724dec46 Merge in upstream/master 2018-12-12 11:00:31 -06:00
Brendan Coles 5c06cdca73 Replace WsfDelay with WfsDelay - Fixes #11018 2018-11-25 05:09:16 +00:00
Shelby Pace 0c38babb9e Land #10874, rm size restriction from pyld_inject 2018-11-05 15:16:40 -06:00
Jacob Robles 6bc4b71ca3 Land #10873, Add notes to exploit modules 2018-11-02 14:11:11 -05:00
Spencer McIntyre 7faa775b55 Remove the now unnecessary DisableNops option 2018-11-02 14:57:41 -04:00
bwatters-r7 114a8127e8 Land #10858, bypassuac_eventvwr optimizations - reduce created processes and artifacts
Merge branch 'land-10858' into upstream-master
2018-10-31 16:44:32 -05:00
bwatters-r7 af7a7d586b Add validation check to make sure x64 remote host and a x86 session
cannot select an x64 target.
2018-10-31 16:31:52 -05:00
Elazar Broad 6fe7bb0bb6 Increase sleep time to 10 seconds
Increase the wait time before removing the registry key - allows the payload to spawn successfully on slow systems.
2018-10-29 12:55:03 -04:00
Spencer McIntyre 52fee303d4 Remove the size restriction from payload_inject 2018-10-27 21:26:09 -04:00
Spencer McIntyre caf76a6555 Add applicable notes to my exploit modules 2018-10-27 20:54:14 -04:00
Wei Chen e84ba62740 Cosmetic changes for local/webexec 2018-10-24 16:13:47 -05:00
Elazar Broad 16d633fabd Remove spaces before EOL 2018-10-24 11:04:41 -04:00
Shelby Pace 3729e9ed7b added description, references 2018-10-24 09:46:00 -05:00
Elazar Broad ef2854c918 Use in-memory reflection for executing the payload
Use to_win32pe_psh_reflection() instead of to_win32pe_psh_net() in order to reduce the amount of processes and forensic artifacts created by this module.
2018-10-23 22:12:10 -04:00
Elazar Broad d75c599929 Use ShellExecuteA to spawn eventvwr.exe
Use ShellExecuteA from railgun to spawn eventvwr.exe, as opposed to cmd /c. This reduces the amount of processes generated by this module.
2018-10-23 21:52:36 -04:00
Elazar Broad da4b424780 Fix typo in cleanup message 2018-10-23 21:33:49 -04:00
Shelby Pace 34ae9c38f9 added WebEx modules, arch check 2018-10-23 15:51:23 -05:00
Green-m c0e8d09802 Add disclosure date. 2018-10-23 09:44:36 +08:00
Green-m 4711d6ba08 Move post module persistenct service to exploit. 2018-10-22 18:07:40 +08:00
Wei Chen 3cee96d8ed Land #10664, add Windows SetImeInfoEx Win32k NULL Pointer Dereference 2018-10-18 14:42:14 -05:00
Wei Chen fac05db154 Update rescue statement 2018-10-18 14:30:20 -05:00
Shelby Pace 9e069c95f5 add auto targeting 2018-10-15 23:26:08 -07:00
Shelby Pace 6cdfe604d4 removed exception handling for reg_file_for_handle 2018-10-15 18:29:15 -07:00
Dhiraj Mishra f78ccbf995 Indentation 2018-10-15 08:32:58 +05:30
Shelby Pace a942654515 rescue-from-method addressed 2018-10-12 14:47:05 -05:00
Shelby Pace 26631bcfbd addressed suggestions 2018-10-12 14:35:42 -05:00
Dhiraj Mishra 96eeaf7da3 Made few changes
Thank you bcoles
2018-10-12 11:47:53 +05:30
Shelby Pace a67122aaf7 updated doc, added x86_64 binary 2018-10-11 12:37:51 -05:00
Shelby Pace 521b50af55 added separate binaries, extended for x86 2018-10-11 10:43:35 -05:00
Shelby Pace 04cc40136f changed formatting, deleted post, renamed files 2018-10-10 14:41:14 -05:00
Shelby Pace 76325bd21e fixed indentation 2018-10-10 14:18:44 -05:00
Dhiraj Mishra ee2c6274c7 Updating description 2018-10-10 22:26:07 +05:30
Dhiraj Mishra 4a821101ce Fixing cmd_exec_get_pid 2018-10-10 21:59:46 +05:30
Dhiraj Mishra c1c07d5c8f Updating
Suggestion given by Shelby
2018-10-10 21:30:12 +05:30