7ddffc790c
Merge pull request #19460 from gardnerapp/game_overlay
...
Land #19460 , CVE-2023-2640, CVE-2023-32629 Game Overlay Ubuntu Privilege Escalation
2024-12-18 14:44:57 -06:00
b7f477172f
Update docs to reflect recent changes
2024-12-18 14:08:10 -06:00
0f6da56a52
vcenter sudo module
2024-11-21 04:34:15 -05:00
6bd049e346
operator working
2024-11-18 20:09:13 -05:00
19770cf870
Remove unneeded file and rudocop corrections
...
Update modules/exploits/linux/local/gameoverlay_privesc.rb
Co-authored-by: Brendan <bwatters@rapid7.com >
Give bwatters7 credit, add docs
Experiment with randomized bash copy and Rex::File.join
remove unused line
Add missing parenthesis
fix problem with bash copy
Remove rex::join, call proper method for generating payload
add exploit::exe mixin, bash copy randomization
Rubocop changes
Remove nc
2024-11-18 17:01:08 -06:00
f38661d6c3
pod user working
2024-11-18 07:30:21 -05:00
3211edd83c
docs: review changes
2024-10-09 12:18:35 -04:00
2762132830
docs: adding motd_persistence docs
2024-10-08 11:22:13 -04:00
6b64640f8b
Update doc
2024-09-09 21:22:07 +09:00
b8f1bc3da2
Update doc
2024-09-09 08:40:08 +09:00
dc81711301
Make timeout user configurable
2024-09-06 08:24:14 +09:00
3d20dd6ddf
Add module:
...
Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386
2024-09-05 22:54:55 +09:00
80ee458410
Land #19151 , Add Flowmon Priv Esc Feature Module
...
Privilege escalation module for Progress Flowmon unpatched feature
2024-05-29 11:35:53 -04:00
2c6fc11639
Responded to comments, clean up /etc/sudoers file
2024-05-23 16:56:35 -04:00
0de89d3b2d
Update documentation/modules/exploit/linux/local/progress_flowmon_sudo_privesc_2024.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-05-21 13:42:52 -07:00
80fdde5fdc
Land #19100 , Add Loadmaster sudo priv esc
...
Add Kemp Progress Loadmaster sudo abuse priv esc
2024-05-10 10:21:38 -04:00
b28e263a2b
Update debug statements and add protection against bad die name
2024-05-10 08:54:23 -05:00
47c8d7252b
Land #18519 , Docker kernel module escape
2024-05-06 09:08:08 -04:00
b044bcab01
Add command payloads and checks for overwritten files
2024-05-03 13:06:16 -05:00
ca669d8f08
Update docs to reflect changes
2024-05-01 13:45:20 -04:00
c2a561630d
Add local privesc module for Flowmon
2024-05-01 09:07:34 -07:00
d94971598b
Add documentation and fix some debug prints
2024-04-29 15:28:34 -05:00
1c8c91096f
Removed port being in documentation as it made no sense
2024-04-23 18:47:30 -04:00
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
cbbb6cbda4
Merge branch 'master' into docker-kernel-module-escape
2024-03-04 22:58:18 -05:00
747d328bcb
Land #18786 , Fix option collision in service_persistence
2024-02-14 17:25:15 +01:00
29524fa7f8
Fix option collision in service_persistence
...
The option `SHELLPATH` collide with `cmd/unix/reverse_netcat`,
resulting in abnormal backdoors. This commit rename it to BACKDOOR_PATH
2024-02-03 23:18:45 +08:00
cf2f76e6a2
cve-2024-21626 review
2024-02-02 16:27:02 -05:00
1c73cf938f
cve-2024-21626
2024-02-01 15:28:04 -05:00
904e34434e
Land #18626 , SaltStack Minion Deployer
...
This PR adds an exploit module which allows for
a user who has compromised a host acting as a
SaltStack Master to deploy payloads to the Minions
attached to that Master.
2024-01-23 11:58:38 -05:00
a8d46b3e7a
Land #18627 , Ansible: post gather module, payload deployer, and file reader
2024-01-17 15:26:25 +01:00
e711c9ea43
ansible review
2024-01-10 17:16:57 -05:00
2cfcb74303
saltstack review
2024-01-10 17:09:02 -05:00
e9296d1add
saltstack review
2024-01-10 17:04:03 -05:00
80e9f1b97d
saltstack salt-master review
2024-01-06 06:38:59 -05:00
11c12fcb6d
review comments
2023-12-23 13:23:34 -05:00
a5698f6aa6
review comments
2023-12-23 12:18:06 -05:00
fb26c93291
Land #18541 , Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
2023-12-20 20:04:21 +01:00
065abf6b92
Rubocop, doc scenario update
2023-12-19 12:30:02 -05:00
4e61596e7a
Check Build ID before running exploit
2023-12-19 12:15:35 -05:00
549ee43df9
Update docs description minor comments
2023-12-19 00:32:21 -05:00
02302439a0
saltstack salt minion deployer
2023-12-16 10:13:46 -05:00
c911ec1413
ansible collection
2023-12-16 07:16:26 -05:00
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
eca611aaac
review
2023-12-05 16:18:39 -05:00
82b8556c78
Improves documentation based on suggestions
...
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com >
2023-12-05 13:52:47 -05:00
22242732d9
working cve-2022-0492
2023-11-28 15:25:53 -05:00
b171b5e77c
working cve-2022-0492
2023-11-28 15:16:18 -05:00
4ae62a431b
not-working docker escape
2023-11-28 13:44:08 -05:00
Brendan