6be3443680
Land #16103 , LPE in polkit's pkexec (CVE-2021-4034)
2022-03-03 09:24:11 -05:00
0463373756
Simplify finding pkexec
2022-03-03 09:19:45 -05:00
e649fe3f69
Fix some markdown issues, update docs and add arch check for payloads
2022-03-02 16:30:52 -06:00
06e897436c
Add Fedora results to docs and some minor final cleanup
2022-03-02 09:12:01 -06:00
58aed837b2
Update docs and options
2022-03-01 14:48:48 -06:00
0516badd8e
Change the way we cd after new session is created
2022-03-01 14:20:07 -06:00
f311bd4fce
Remove duplicate warning
2022-02-18 16:31:35 -06:00
3ea032472d
Updated exploit with better check method, added OnSessionCmd option
...
to run a command when a session is bootstrapped, added more
documentation.
2022-02-18 16:30:47 -06:00
d5ba1afbec
fix URLs not resolving
...
fix URLs not resolving
add csv export to references
fix URLs not resolving
pdf not pd
missed a url change
remove extra recirectedfrom fields
remove extra file
fix ovftool url accidental replacement
2022-02-16 17:22:40 -06:00
3f2d6b6c22
adding authors and removing C exploit reference
2022-02-12 11:52:23 +04:00
74521c8ced
Update check for supported CentOS, Ubuntu, and Debian Targets
2022-02-11 20:30:05 -06:00
9635fde12d
Add support and templates for aarch64 targets
2022-02-10 10:49:02 -06:00
d1ba43e4c8
Remove hard-coded values
2022-02-08 16:00:20 -06:00
65ebeafacc
Use the supplied directory
2022-02-08 16:00:19 -06:00
c44fb6a9d3
ugly but working no-gcc module
2022-02-08 16:00:19 -06:00
30b8e2196b
payload_file spaces
...
Thank you bcoles
Co-authored-by: bcoles <bcoles@gmail.com >
2022-02-02 21:30:13 +04:00
ad190fe80f
Spaces at EOL
2022-01-27 12:51:36 +04:00
4828bc58e6
Spaces at EOL and Date
2022-01-27 12:43:41 +04:00
dbca5eeb07
Some linting
2022-01-27 12:32:33 +04:00
4c0340b26c
cve_2021_4034_pwnkit_lpe_pkexec
2022-01-26 23:05:36 +04:00
5d010fcd25
bash_profile_persistence: Add notes and resolve rubocop violations
2021-12-24 03:06:37 +00:00
6c3a29077f
Update rm -rf string to be less fragile
2021-12-02 10:31:47 -06:00
77812ae4c4
Update documentation for multiple binaries, add targeting data,
...
other bcoles improvements
2021-12-02 09:57:48 -06:00
620b2d2b12
Update targeting selection and payloads, fix python cmd_exec
2021-12-02 08:03:03 -06:00
47aacbdf32
Fix cmd_exec to be friendly with binary and python meterpreters
...
Add arch checks for payload/target
2021-12-01 16:18:49 -06:00
a3f2d5468a
Add some quick debugging output
2021-12-01 14:54:48 -06:00
18cc2ef516
Add support for aarch64 Ubuntu versions
2021-12-01 14:54:48 -06:00
c6e2be2cd7
Ensure deletion of exploit and payload even if the exploit fails.
2021-12-01 14:54:48 -06:00
b1f6937542
Updated exploit to compile on target, added control over directory creation
...
Added a method to get source code for the write and compile method
2021-12-01 14:54:47 -06:00
eba7803e1a
Add check method
2021-12-01 14:54:47 -06:00
bf1b3b377c
Add cve-2021-3493 module
2021-12-01 14:54:47 -06:00
1dd26bca03
Land #15802 , add OMIGOD LPE
2021-11-09 10:30:50 -06:00
278d940fee
Update the Python exploit code to fix a bug
2021-11-02 10:10:18 -04:00
73e55fcaee
Land #15665 , Add Meterpreter compatibility metadata
2021-10-29 12:45:26 +01:00
98528c8ba6
Fail over to default paths
2021-10-28 15:01:12 -04:00
ae56ffa934
Initial exploit for CVE-2021-38648
2021-10-27 12:05:56 -04:00
28eab4d871
Add Meterpreter compatibility metadata
2021-10-06 13:54:51 +01:00
2c7aa022d4
Add PoC for CVE-2021-22555 Netfilter Priv Escalation
2021-10-04 16:48:23 +01:00
46718e3390
Run Rubocop layout rules on modules
2021-09-10 12:53:39 +01:00
ff50a94348
Land #15567 , Add in Exploit for CVE-2021-3490
...
Merge branch 'land-15567' into upstream-master
2021-08-31 18:46:25 -05:00
488f58a068
Attempt to fix RuboCop errors
2021-08-31 15:36:00 -05:00
3bca3b0bcb
Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match
2021-08-31 15:07:37 -05:00
4a9a15e638
Run Rubocop layout rules on modules
2021-08-27 17:19:43 +01:00
6f9b06fb4b
Add in Manfred Paul's original blog post and chompie1337's original PoC to the list of links. Also add in a relatively detailed description of how to add in new targets to this exploit to the documentation in case that helps anyone down the line
2021-08-25 18:09:07 -05:00
29a230ec72
Improve error handling for module
2021-08-24 17:36:37 -05:00
bd490d35ed
Add support for Linux 5.11.x on Fedora
2021-08-23 15:09:10 -05:00
db5ac81ecf
Fix up mistakes bcoles pointed out and also add in a check to ensure we are only targetting x64 systems
2021-08-23 13:23:40 -05:00
e46611cffb
Add in support for exploiting Fedora 32 with Linux kernel 5.10.12
2021-08-20 18:04:59 -05:00
75ae2b76f5
Add support for Fedora 32 Linux Kernel 5.9.8-100 and also fix an error where the wrong file was being used for Fedora 32 Linux Kernel 5.8.8.
2021-08-20 16:50:20 -05:00
5abf407228
Add support for Fedora 32 with Linux Kernel 5.8.8-200
2021-08-20 15:42:34 -05:00
Spencer McIntyre