 Brendan Coles
|
4cd021ce4b
|
Add exploit/android/adb/adb_server_exec documentation
|
2022-03-21 00:37:15 +00:00 |
|
|
bwatters
|
b4de9fa92a
|
Land #16344, Add module for CVE-2022-21999 and More Railgun Definitions
Merge branch 'land-16344' into upstream-master
|
2022-03-16 08:37:05 -05:00 |
|
|
space-r7
|
4a8707982a
|
fix module name in output
|
2022-03-14 09:35:56 -05:00 |
|
|
space-r7
|
c646d01671
|
add systems tested
|
2022-03-14 09:17:43 -05:00 |
|
|
space-r7
|
99664efed7
|
use full user name, add test output to docs
|
2022-03-14 09:15:36 -05:00 |
|
|
space-r7
|
07e6eef201
|
rename module, modify check
|
2022-03-10 17:02:58 -06:00 |
|
|
space-r7
|
b747e55dda
|
Land #16303, add Dirty Pipe exploit
|
2022-03-10 11:16:28 -06:00 |
|
|
space-r7
|
872b9c9a7c
|
modify docs to reflect changes, remove 'return'
|
2022-03-10 10:39:32 -06:00 |
|
|
Tim W
|
bcc9d01958
|
add documentation
|
2022-03-09 08:34:20 +00:00 |
|
|
adfoster-r7
|
22f88f9ab7
|
Add docs
|
2022-03-08 23:52:24 +00:00 |
|
|
Spencer McIntyre
|
42e0c027ab
|
Land #16248, Added Apache APISIX RCE module
|
2022-03-07 09:47:04 -05:00 |
|
|
red
|
23a09be333
|
Fix typo in document of cve_2021_4034
ContOS => CentOS
|
2022-03-05 23:58:31 +08:00 |
|
|
space-r7
|
f116f9e701
|
add docs
|
2022-03-04 15:54:58 -06:00 |
|
|
Spencer McIntyre
|
9ef50a2d23
|
Fixup typos
|
2022-03-04 12:34:14 -05:00 |
|
|
Heyder Andrade
|
4d5716d891
|
Updated documentation
|
2022-03-04 02:21:42 +01:00 |
|
|
bwatters
|
fb658fbb13
|
Land #16245, pfSense Authenticated File Write (CVE-2021-41282)
Merge branch 'land-16245' into upstream-master
|
2022-03-03 15:08:34 -06:00 |
|
|
Spencer McIntyre
|
6be3443680
|
Land #16103, LPE in polkit's pkexec (CVE-2021-4034)
|
2022-03-03 09:24:11 -05:00 |
|
|
Heyder Andrade
|
236efab669
|
Update documentation
Add referece to CVE-2022-24112
msftidy_docs
|
2022-03-03 02:20:56 +01:00 |
|
|
bwatters
|
e649fe3f69
|
Fix some markdown issues, update docs and add arch check for payloads
|
2022-03-02 16:30:52 -06:00 |
|
|
bwatters
|
06e897436c
|
Add Fedora results to docs and some minor final cleanup
|
2022-03-02 09:12:01 -06:00 |
|
|
bwatters
|
58aed837b2
|
Update docs and options
|
2022-03-01 14:48:48 -06:00 |
|
|
Heyder Andrade
|
a6d33ea98e
|
Add module documentation
|
2022-03-01 12:54:17 +01:00 |
|
|
bwatters
|
0081811c52
|
Land #16185, Firefox CVE-2020-26950 use after free browser exploit
Merge branch 'land-16185' into upstream-master
|
2022-02-28 14:38:23 -06:00 |
|
|
Jake Baines
|
65e16a1a72
|
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
|
2022-02-27 18:12:54 -08:00 |
|
|
Tim W
|
579811418f
|
update documentation with note about Firefox 82.0.1
|
2022-02-26 12:35:38 +00:00 |
|
|
bwatters
|
ecaf8b1ba9
|
Land #16204, Hikvision Unauthenticated RCE (CVE-2021-36260)
Merge branch 'land-16204' into upstream-master
|
2022-02-25 16:37:08 -06:00 |
|
|
bwatters
|
b69db83398
|
Land #16202, Add exploit for CVE-2022-21882 (Win32k LPE)
Merge branch 'land-16202' into upstream-master
|
2022-02-25 15:55:48 -06:00 |
|
|
Grant Willcox
|
217afa0f3b
|
Land #16190, Axis Camera App RCE (No CVE)
|
2022-02-25 11:35:03 -06:00 |
|
|
Jake Baines
|
d055a7d811
|
Altered some randomization, the json extracted by check, and fixed some wording
|
2022-02-24 18:48:21 -08:00 |
|
|
Spencer McIntyre
|
544f8e161a
|
Land #16164, Create Module For CVE-2021-42321
|
2022-02-24 11:36:12 -05:00 |
|
|
Jake Baines
|
e1616a520f
|
Fixed a couple of typos. Changed a CheckCode. Randomized the replaced tmp file name
|
2022-02-24 06:38:36 -08:00 |
|
|
Grant Willcox
|
fddd3f15c2
|
Fix up code so that it will not block on attempting to delete the configuration on the folder, just in case the configuration doesn't exist in the first place. Instead print a warning and continue.
|
2022-02-22 17:52:29 -06:00 |
|
|
Jake Baines
|
4cd3563bc7
|
Initial commit of exploit for CVE-2021-36260
|
2022-02-19 13:13:24 -08:00 |
|
|
bwatters
|
3ea032472d
|
Updated exploit with better check method, added OnSessionCmd option
to run a command when a session is bootstrapped, added more
documentation.
|
2022-02-18 16:30:47 -06:00 |
|
|
Spencer McIntyre
|
443bf1249a
|
Remove all the old CVE-2021-1732 data
|
2022-02-18 15:25:39 -05:00 |
|
|
Spencer McIntyre
|
bcd7cb1122
|
Writeup the module metadata and docs
|
2022-02-18 15:23:44 -05:00 |
|
|
Tim W
|
90a06a1cb9
|
fix docs
|
2022-02-16 08:37:01 +00:00 |
|
|
Tim W
|
fb53ca0ac2
|
actually add support for Windows
|
2022-02-16 08:33:24 +00:00 |
|
|
Tim W
|
841af2c6e1
|
add support for Windows
|
2022-02-16 08:30:07 +00:00 |
|
|
Tim W
|
11f2c5201d
|
add documentation
|
2022-02-16 08:19:25 +00:00 |
|
|
bwatters
|
1086926b2e
|
Land #16159, Add module for CVE-2021-3129
Merge branch 'land-16159' into upstream-master
|
2022-02-15 17:14:01 -06:00 |
|
|
Jake Baines
|
5ac3330802
|
Initial commit of Axis camera app install exploit
|
2022-02-14 17:54:18 -08:00 |
|
|
Grant Willcox
|
a7ace66b3f
|
Use send_request_cgi and update options to use HttpUsername and HttpPassword accordingly. This simplifies code. Also update documentation accordingly
|
2022-02-14 18:19:00 -06:00 |
|
|
Grant Willcox
|
c49591cf11
|
Add in changes to use targets array as per Spencer's suggestion so we can now spawn Meterpreter shells. Also remove ACCOUNT_LOCKOUTS and fix a call that should have been .get_xml_document
|
2022-02-14 17:38:10 -06:00 |
|
|
Grant Willcox
|
4c1b2478fa
|
Add in exploit and documentation
|
2022-02-11 13:58:56 -06:00 |
|
|
space-r7
|
db00991f26
|
Land #16150, add nagios xi web shell upload
|
2022-02-11 11:45:06 -06:00 |
|
|
Jake Baines
|
0a78dd78ec
|
Used suggested method for defining user webshell, used suggested depth configuration, and used vars_get in a couple of places
|
2022-02-08 18:20:03 -08:00 |
|
|
space-r7
|
bed067dda0
|
Land #16125, add ARCH_CMD for GXV3140 support
|
2022-02-08 12:24:42 -06:00 |
|
|
Heyder Andrade
|
6b64c6b393
|
Add module documentation
|
2022-02-08 15:29:11 +01:00 |
|
|
Brendan Coles
|
5bbe934db9
|
Add QEMU Monitor HMP 'migrate' Command Execution module
|
2022-02-07 17:48:27 +00:00 |
|