1609 Commits

Author	SHA1	Message	Date
Brendan	e998b91aee	Merge pull request #20717 from sfewer-r7/fortiweb-exploit-rce ... Add exploit module for Fortinet FortiWeb (CVE-2025-64446 + CVE-2025-58034)	2025-11-25 14:14:31 -06:00
sfewer-r7	fa03ac8b66	on 7.4.8 the command nohup is not available. we must execute our payload in a new session, so we use a python stub to essentially call setsid. This has been tested to work on both 8.0.1 and 7.4.8. Teh payload cmd/unix/reverse_python isnot working as it previously was, so I am removing from the list of confirmed paylaods. The other two, cmd/unix/reverse_bash and cmd/unix/reverse_openssl work fine on both versions	2025-11-25 11:25:41 +00:00
Zedeldi	4b2798f357	Correct vulnerable version information	2025-11-24 17:10:51 +00:00
Zedeldi	ce926fd3d1	Update vulnerable IGEL OS version to < 11.09.310	2025-11-24 11:57:18 +00:00
Zedeldi	933fb7bdf1	Add clean-up information	2025-11-24 11:43:46 +00:00
Zedeldi	002795c5be	Update module information in documentation	2025-11-24 11:24:23 +00:00
Zedeldi	b13137886a	Add IGEL OS and vulnerability summary to documentation	2025-11-21 13:09:28 +00:00
sfewer-r7	aff76622fa	add in the unauth RCE exploit module for CVE-2025-64446 + CVE-2025-58034	2025-11-21 12:22:25 +00:00
Zedeldi	c6db0d4285	Move IGEL OS persistence module to linux/persistence	2025-11-17 18:42:28 +00:00
Zedeldi	c37f7872a3	Add documentation for IGEL OS modules	2025-11-17 16:33:15 +00:00
h00die	b646e0e044	docs editing for consistency	2025-11-07 15:42:27 -05:00
h00die	fb02ec4554	remove 4 space indents in options	2025-11-07 15:42:27 -05:00
h00die	caa2873a14	more adjustments	2025-11-07 15:42:27 -05:00
h00die	d8c73f6684	replace bold options with h3	2025-11-07 15:42:23 -05:00
Diego Ledda	110cb837aa	Merge pull request #20672 from h00die-gr3y/centreon_auth_rce ... Centreon authenticated command injection leading to RCE via broker engine "reload" parameter [CVE-2025-5946]	2025-11-05 16:29:29 +01:00
h00die-gr3y	408eceb2d9	small update documentation	2025-11-03 10:27:44 +00:00
h00die-gr3y	85b4233345	updated module based on review comments and added documentation	2025-11-03 10:21:31 +00:00
Diego Ledda	13dc61e2e8	Merge pull request #20523 from h00die/modern_persistence_upstart ... update upstart to persistence mixin	2025-10-31 12:28:59 +01:00
bcoles	676a2ed4b1	Add Rootkit Privilege Escalation Signal Hunter	2025-10-31 17:22:19 +11:00
h00die	c0b3f40b3e	upstart review	2025-10-27 19:45:38 -04:00
bcoles	52b7f1ff25	Deprecate exploit/linux/local/diamorphine_rootkit_signal_priv_esc	2025-10-24 17:05:10 +11:00
h00die	55583bd2c8	review for sysv persistence	2025-10-14 19:30:06 -04:00
h00die	058e858e82	update systemvinit to persistence mixin	2025-10-13 13:42:41 -04:00
Brendan	91c0adb17f	Merge pull request #20585 from vognik/CVE_2025_60787 ... Add MotionEye Authenticated RCE (CVE-2025-60787)	2025-10-09 13:50:25 -05:00
Vognik	267a26b763	code review changes from smcintyre-r7@	2025-10-09 21:51:31 +04:00
msutovsky-r7	79ff667d5e	Land #20538, adds systemd override persistence module ... persistence: systemd service override	2025-09-26 15:57:31 +02:00
h00die	6c5522cdba	Update documentation/modules/exploit/linux/persistence/init_systemd_override.md ... Co-authored-by: Brendan <bwatters@rapid7.com>	2025-09-18 16:25:54 -04:00
h00die	15f4abd1b2	update yum to persistence module	2025-09-18 15:36:44 -04:00
Diego Ledda	c718a965d7	Merge pull request #20508 from h00die/modern_persistence_cron ... update cron to persistence mixin	2025-09-18 12:04:00 +02:00
msutovsky-r7	dc8d67538c	Land #20536, adds docker image persistence module ... docker image persistence module	2025-09-17 09:56:16 +02:00
jheysel-r7	81ce0f8868	Merge pull request #20521 from h00die/modern_persistence_systemd ... update systemd to persistence mixin	2025-09-16 14:56:26 -07:00
jheysel-r7	02e35f7e92	Merge pull request #20520 from h00die/modern_persistence_openrc ... update openrc to persistence mixin	2025-09-15 15:54:31 -07:00
h00die	ebe0234ddb	Update documentation/modules/exploit/linux/persistence/init_openrc.md ... Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>	2025-09-15 16:30:17 -04:00
Brendan	1ec10ec877	Merge pull request #20510 from h00die/modern_persistence_rc_local ... update rc_local to persistence mixin	2025-09-15 14:47:48 -05:00
jheysel-r7	b45a3caaa5	Merge pull request #20509 from h00die/modern_persistence_motd ... update motd to persistence mixin	2025-09-12 16:18:08 -07:00
h00die	403d02698b	systemd service override persistence	2025-09-11 17:29:13 -04:00
Diego Ledda	985af001d2	Merge pull request #20497 from h00die/modern_persistence_autostart ... update autostart to persistence mixin	2025-09-11 18:58:32 +02:00
h00die	00115457f7	Update documentation/modules/exploit/linux/persistence/init_upstart.md ... Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>	2025-09-11 12:00:28 -04:00
h00die	5c52151a06	Update documentation/modules/exploit/linux/persistence/init_upstart.md ... Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>	2025-09-11 12:00:22 -04:00
Diego Ledda	80c5e41650	Merge pull request #20495 from h00die/modern_persistence_apt ... update apt_package_manager to persistence mixin	2025-09-11 10:49:08 +02:00
h00die	2bf5264aff	docker image persistence module	2025-09-10 13:45:22 -04:00
Diego Ledda	1314f5d0bb	Merge pull request #20455 from Chocapikk/aitemi_m300_time_rce ... Add unauthenticated RCE on Shenzhen Aitemi M300 MT02 (CVE-2025-34152)	2025-09-10 10:12:41 +02:00
h00die	ccd1fe3d78	update upstart to persistence mixin	2025-09-09 17:03:25 -04:00
h00die	8b6aede3e4	update systemd to persistence mixin	2025-09-09 16:19:41 -04:00
h00die	c2ca191711	update openrc to persistence mixin	2025-09-09 15:42:46 -04:00
h00die	e0f350f294	update rc_local to persistence mixin	2025-09-09 14:35:35 -04:00
h00die	e1e4e43535	update motd to persistence mixin	2025-09-09 14:29:29 -04:00
h00die	785397bb0c	cron to multi with persistence mixin	2025-09-09 11:50:31 -04:00
h00die	c3be5ad23c	update autostart to persistence mixin	2025-09-09 10:49:56 -04:00
h00die	db2f9f7792	update apt_package_manager to persistence mixin	2025-09-09 10:28:03 -04:00