Commit Graph

1000 Commits

Author SHA1 Message Date
Brendan Coles 180876d8fc Add check for SMAP 2018-11-27 23:24:02 +00:00
Brent Cook b05bb616bf Land #10987, add exploit for PHP imap_open function against various web apps 2018-11-27 16:44:51 -06:00
Brent Cook 66cae6240f Land #10994, Added exploit for CVE-2018-18955 2018-11-27 16:12:05 -06:00
Shelby Pace 6712363bb5 Land #10737, add TeamCity XML-RPC exploit module 2018-11-27 14:59:37 -06:00
Shelby Pace 064c79a4ae note about cmd_stager flavor 2018-11-27 14:46:19 -06:00
Wei Chen d523124faf Land #10965, Add the macOS LPE from pwn2own2018 (CVE-2018-4237) 2018-11-27 14:00:35 -06:00
Brendan Coles c1722a922f Fix markdown 2018-11-27 19:43:08 +00:00
Brendan Coles aae86241ef Update version check 2018-11-27 18:13:29 +00:00
Brent Cook 0fddb8e31c Land #10768, Exploit for Netgear CVE-2016-1555 2018-11-26 11:45:10 -06:00
h00die e2d58afe13 cleaned up code, added custom 2018-11-25 10:59:53 -05:00
Brendan Coles be6cfde921 Land #11015, Fix payload and console check for Xorg_privesc Linux targets 2018-11-25 04:51:27 +00:00
Brendan Coles 01ed57cbb3 Remove check for nosuid 2018-11-25 01:53:07 +00:00
Brendan Coles f0999e3a7e Add documentation 2018-11-25 00:54:58 +00:00
Aaron Ringo 1783617770 consolelock check updated to use id, payload upload changed, documentation updated, misc formatting 2018-11-24 15:10:21 -06:00
h00die 945755b058 add custom php_imap target 2018-11-24 14:18:13 -05:00
h00die 45f2c5beb2 update php_imap_open docs 2018-11-24 07:26:42 -05:00
h00die e36cef3b96 e107 exploitable now 2018-11-23 20:16:53 -05:00
Brent Cook a59913434d Land #10916, Xorg SUID privesc 2018-11-21 19:46:11 -06:00
h00die 4c59a271e2 added suitecrm to imap_open exploit 2018-11-20 18:33:42 -05:00
Brent Cook d5d8216377 Land #10977, Add documentation and some enhancement to freesshd_authbypass module 2018-11-20 11:44:49 -06:00
Tim W 0649ad9876 add documentation 2018-11-20 16:09:18 +08:00
h00die aca3f44c9b fix markdown formatting 2018-11-18 21:38:25 -05:00
h00die 4b09584047 php_imap_open_rce 2018-11-18 21:28:19 -05:00
Imran E. Dawoodjee 0edd3a9138 Fixed numbering error in documentation. 2018-11-16 21:34:05 +08:00
Imran E. Dawoodjee 08b3efa046 Enhanced module and added documentation. 2018-11-16 21:18:45 +08:00
Jacob Robles 795aa3c99c Land #10828, git submodule url exec CVE-2018-17456 2018-11-14 12:39:13 -06:00
Aaron Ringo 4fc047db87 Added advanced option to check console lock on linux systems, default true & updated docs 2018-11-13 22:33:12 -06:00
Shelby Pace ac8932c144 update 9631 to a current branch 2018-11-13 15:15:25 -06:00
Aaron Ringo 538055c406 Initial documentation for Xorg Privesc Module
killed white spaces
2018-11-12 15:44:13 -06:00
Brendan Coles 1f14a9846d Land #10767, Add Cisco Prime Infrastructure remote root exploit 2018-11-10 17:08:16 +00:00
Wei Chen a32d8083f0 Land #10847 - Add blueimp's jQuery (Arbitrary) File Upload
CVE-2018-9206
2018-11-05 11:37:20 -06:00
Brent Cook 86469cc5a0 Land #10836, Add Morris worm sendmail debug mode exploit 2018-11-02 11:17:33 -05:00
Brent Cook 1d81f3764f Land #10700, Add Morris worm fingerd exploit and VAX reverse shell 2018-11-02 11:16:46 -05:00
Shelby Pace 6f58a15e00 removed template line 2018-10-24 15:14:15 -05:00
Shelby Pace cecc7177f7 added documentation for modules 2018-10-24 09:47:05 -05:00
William Vu bf5fe2864f Update module doc 2018-10-23 16:28:49 -05:00
William Vu 326597e842 Update module doc with new output 2018-10-23 07:14:19 -05:00
William Vu 3d06c10ad0 Link to Apache AllowOverride directive and change 2018-10-23 03:51:16 -05:00
William Vu a55f7ff30a Clarify vuln (re)discovery vs. disclosure
https://www.bleepingcomputer.com/news/security/jquery-file-upload-plugin-vulnerable-for-8-years-and-only-hackers-knew/
2018-10-23 03:22:45 -05:00
William Vu df23507772 Add module doc 2018-10-22 23:35:42 -05:00
William Vu f40647b2a4 Link to Docker environment in module doc 2018-10-22 18:32:37 -05:00
William Vu 114692ee56 Add module doc and promise a Docker environment 2018-10-22 18:32:37 -05:00
William Vu 8a6075c882 Add module doc 2018-10-20 14:15:26 -05:00
Wei Chen 3cee96d8ed Land #10664, add Windows SetImeInfoEx Win32k NULL Pointer Dereference 2018-10-18 14:42:14 -05:00
Tim W 1e5f3f2f7b add documentation 2018-10-18 12:45:53 +08:00
Wei Chen 8e442cc980 Update documenation 2018-10-15 15:45:39 -05:00
Wei Chen 5433d2cca9 Sync up upstream master 2018-10-15 14:19:07 -05:00
Pedro Ribeiro ab63044fe0 Update cisco_prime_inf_rce.md 2018-10-15 22:37:47 +07:00
Pedro Ribeiro 53f9c359e9 Update cisco_prime_inf_rce.md 2018-10-15 22:37:22 +07:00
Pedro Ribeiro 38ad735b04 Create cisco_prime_inf_rce.md 2018-10-15 22:35:26 +07:00