ea50149ba7
land #12212 linux LPE ktsuss exploit
2019-09-02 13:32:45 -04:00
4b9e748882
ktsuss misc fixes
2019-09-02 13:31:30 -04:00
5b89c221f0
land #11799 linux local priv esc for cached sudo privs
2019-09-02 11:12:21 -04:00
6f58981396
Land #12244 , cisco_ucs_scpuser exploit
2019-08-30 13:35:50 -05:00
83de041894
Land #12243 , cisco_ucs_rce exploit
2019-08-30 13:35:29 -05:00
e36308e5bb
Add FD ref
2019-08-31 00:18:46 +07:00
b0b72892be
Deprecate/delete cisco_rv130_rmi_rce by alias
2019-08-30 12:03:43 -05:00
49b3af3870
Merge remote-tracking branch 'upstream/master' into pr/12133
2019-08-30 12:01:48 -05:00
2ea5e90764
Land #12223 , module deprecation by alias
2019-08-30 11:36:50 -05:00
0c1f3f2d03
make some adjustments
2019-08-29 19:50:01 +07:00
40b0d02f39
make some adjustments
2019-08-29 19:49:37 +07:00
c88ce55013
Add github link
2019-08-28 11:08:35 +07:00
98efac5bfb
Add github link
2019-08-28 11:08:01 +07:00
7fd56f5fb3
Add Cisco UCS scpuser exploit
2019-08-28 11:00:08 +07:00
d6f47fd03a
s/Directory/Director
2019-08-28 10:58:41 +07:00
1aad95f7c4
Add exploit for Cisco UCS RCE
2019-08-28 10:55:49 +07:00
413cd7194d
Land #12064 , add Exim Local Privesc module
2019-08-23 12:23:53 -05:00
8aa00d97aa
Add new moved_from to moved module
2019-08-22 17:58:20 -05:00
901943c90f
Move Ubiquiti AirOS exploit from SSH to HTTP
2019-08-22 17:58:20 -05:00
ca82e6cd25
Add ktsuss suid Privilege Escalation module
2019-08-19 13:28:02 +00:00
32334c2386
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
9fdee466ca
Update ptrace_sudo_token_priv_esc
2019-08-10 07:03:23 +00:00
f317987e02
Land #12175 , hadoop_unauth_exec NoMethodError fix
2019-08-07 22:44:55 -05:00
b5fd9b4fed
Fix whitespace
2019-08-07 22:44:38 -05:00
6cf0ff0678
Fix #12156 , NoMethodError in hadoop exploit.
2019-08-08 10:06:40 +08:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
5e64f8560a
Fix whitespace
2019-08-02 10:23:41 -05:00
8085ad3046
Set default payload based on chosen target.
2019-08-02 10:47:28 +02:00
610bed8fd9
&& is preferred over and.
2019-08-02 10:41:14 +02:00
63de0051f4
Cosmetic changes
2019-07-28 21:38:54 -05:00
34c5277e4e
Deprecate module.
2019-07-27 10:49:59 +02:00
413da527ab
Module renaming.
2019-07-27 10:47:58 +02:00
18f7ae379b
Add support for RV110W and RV215W + check method to fingerprint devices.
2019-07-27 10:45:31 +02:00
e71b92aa60
We are not evil!
2019-07-21 09:33:18 +08:00
07f3c074d4
Add doc and enhance the module.
2019-07-20 00:17:57 +08:00
395e4d2424
Update documentation. Register options by alphabetical order.
...
Change-Id: I46bb3701107a504dddbf030e0345d7adc83bafac
2019-07-18 10:45:44 +01:00
b6697f5016
Add redis rce module and data stuff.
...
To do:
1. Check env of system and compiler.
2. Add a compiled so file to be compatible with windows and mac.
3. Add doc.
2019-07-17 15:33:02 +08:00
e51138fa4b
Establish a tcp connection to check for the exim version.
2019-07-13 22:45:21 +01:00
764a4a0692
Improve check regex
2019-07-13 19:57:03 +01:00
e2a9907e99
Add SendExpectTimeout option
2019-07-13 19:55:12 +01:00
f465e43e34
Change tcp communication with meterpreter
2019-07-13 19:25:34 +01:00
60dbbb0455
Ensure temp files are deleted in every case
...
Change-Id: I53401e4bcce887048f433743a965421f93d699ba
2019-07-12 12:20:37 +01:00
642a71383d
Classic shell exploit now uses a bash script
...
Change-Id: I770cf9bcae5c5a265c19f2dc9e4a512e30705b6c
2019-07-11 17:01:23 +01:00
565e18cbe8
Add a few checks
...
Change-Id: Ieca129a54d2105bf646e6f848cb5ecec804c372f
2019-07-11 14:20:21 +01:00
435240ed41
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:24:48 +01:00
074c73236a
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:24:32 +01:00
7812e0037b
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:24:13 +01:00
af89433c1d
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:23:50 +01:00
9ffbfe0985
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:23:38 +01:00
a06dffa174
Update modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-07-10 17:22:52 +01:00
h00die