 Brendan Coles
|
d7f1c9a4a9
|
Land #12696, Add AKA references to several modules
|
2019-12-12 15:28:21 +00:00 |
|
|
William Vu
|
f31930748b
|
Remove RHOST from solarwinds_lem_exec
This doubles as a test.
|
2019-12-11 13:42:41 -06:00 |
|
|
Rob Fuller
|
5eb90d758f
|
Update modules/exploits/linux/ssh/solarwinds_lem_exec.rb
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-12-11 13:44:37 -05:00 |
|
|
Rob Fuller
|
002b9e5b90
|
Fix typo and lacking RHOST
Kinda need a RHOST to use a RCE...
|
2019-12-11 12:17:53 -05:00 |
|
|
h00die
|
8cb58be4c0
|
style
|
2019-12-11 06:44:35 -05:00 |
|
|
h00die
|
3b2a54a599
|
add aka to some modules
|
2019-12-10 09:53:13 -05:00 |
|
|
William Vu
|
42c8420f5a
|
Fix style
|
2019-12-09 20:09:52 -06:00 |
|
|
William Vu
|
7b1d54fc26
|
Land #12577, redis_unauth_exec fixes
|
2019-12-09 19:37:53 -06:00 |
|
|
Green-m
|
22412d4570
|
Fix bind error bug, and enhance check method.
|
2019-11-15 09:52:58 +08:00 |
|
|
Shelby Pace
|
baf27f9654
|
Land #12542, add Bludit File Upload Exploit
|
2019-11-12 15:44:34 -06:00 |
|
|
William Vu
|
3c1fa90a75
|
Land #12515, Pulse Secure VPN RCE
|
2019-11-12 02:55:01 -06:00 |
|
|
William Vu
|
a267ad9d64
|
Reference env(1) as the reason we have useful RCE
|
2019-11-12 02:17:58 -06:00 |
|
|
William Vu
|
8df559eceb
|
Update print to warning
|
2019-11-12 02:09:43 -06:00 |
|
|
wvu-r7
|
0c4580f254
|
Calibrate timeout for hax
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-12 02:03:52 -06:00 |
|
|
William Vu
|
de72ed8545
|
Print our glorious success
|
2019-11-12 02:02:53 -06:00 |
|
|
William Vu
|
238c931fd3
|
Don't fail module if blocking through timeout
|
2019-11-12 01:55:56 -06:00 |
|
|
William Vu
|
d8e612726c
|
Note that an admin SID is required at present
|
2019-11-12 01:46:23 -06:00 |
|
|
William Vu
|
1573664c78
|
Reduce timeout for when the shell pops
|
2019-11-12 01:41:19 -06:00 |
|
|
William Vu
|
bc5b0645dd
|
Fix typo
|
2019-11-12 01:25:36 -06:00 |
|
|
William Vu
|
2c6c46701c
|
Update DefaultOptions
|
2019-11-12 01:23:53 -06:00 |
|
|
William Vu
|
8664ac9dd8
|
Add target print
|
2019-11-12 01:17:28 -06:00 |
|
|
William Vu
|
e9fb4a2528
|
Check for nil
Oops.
|
2019-11-12 01:10:26 -06:00 |
|
|
William Vu
|
f4c7690247
|
Print cmd/unix/generic command output, minus HTML
|
2019-11-12 01:08:56 -06:00 |
|
|
William Vu
|
09901fdf56
|
Clarify session cookie could be invalid
|
2019-11-12 01:08:25 -06:00 |
|
|
William Vu
|
5b825e8245
|
Readd cmd/unix/generic target with manual badchars
|
2019-11-12 01:08:09 -06:00 |
|
|
Wei Chen
|
717a31c7c3
|
Fix typos and format
|
2019-11-11 14:47:56 -06:00 |
|
|
William Vu
|
2b3c2b6af5
|
Land #12535, module traits for some local exploits
|
2019-11-07 10:00:39 -06:00 |
|
|
h00die
|
9cf62d02f9
|
land #12492 coldfusion rds updates
|
2019-11-07 05:16:29 -05:00 |
|
|
dwelch-r7
|
876a307816
|
Land #9396, Linux net snmpd rw access
|
2019-11-07 02:52:47 +00:00 |
|
|
dwelch-r7
|
2ab1b9071f
|
remove unsupported check
|
2019-11-07 01:34:16 +00:00 |
|
|
dwelch-r7
|
61dc3ad487
|
Replace manual escaping with shellescape function
|
2019-11-07 01:33:42 +00:00 |
|
|
Wei Chen
|
553601210a
|
Add CVE-2019-16113: Bludit Directory Traversal Image Upload Exploit
|
2019-11-05 08:57:15 -06:00 |
|
|
Brendan Coles
|
38498305d3
|
Add module notes for Reliability and Stability
|
2019-11-03 00:33:24 +00:00 |
|
|
Brendan Coles
|
294cbcffb6
|
Land #12382, Add Linux Micro Focus (HPE) Data Protector omniresolve Privesc (CVE-2019-11660)
|
2019-11-01 08:06:01 +00:00 |
|
|
bcoles
|
b08e031863
|
Update module description
|
2019-11-01 17:11:33 +11:00 |
|
|
bcoles
|
c6e739c76d
|
Code cleanup
|
2019-11-01 16:30:37 +11:00 |
|
|
William Vu
|
81da0d18c6
|
Add blurb about pre-auth file read
|
2019-10-30 20:41:57 -05:00 |
|
|
William Vu
|
f3a6aeea60
|
Add true post_auth? definition
|
2019-10-30 20:31:58 -05:00 |
|
|
William Vu
|
77c26e9a70
|
Add Pulse Secure VPN arbitrary command execution
|
2019-10-30 20:08:02 -05:00 |
|
|
William Vu
|
e010f48a3b
|
Move module to coldfusion_rds_auth_bypass
|
2019-10-27 11:25:56 -05:00 |
|
|
Brendan Coles
|
991ccdbda5
|
Land #12106, Add Linux PTRACE_TRACEME local root exploit
|
2019-10-23 14:01:14 +00:00 |
|
|
Tim W
|
8c93b219d1
|
fix compile.rb and rubocop
|
2019-10-23 20:54:42 +08:00 |
|
|
Tim W
|
7ff71819e9
|
add architecture check to check method
|
2019-10-23 20:38:55 +08:00 |
|
|
Tim W
|
3b5d0b98e7
|
add a basic check method using loginctl
|
2019-10-23 19:50:19 +08:00 |
|
|
Tim W
|
4d4754a389
|
feedback from bcoles
|
2019-10-10 13:30:31 +08:00 |
|
|
Brendan Coles
|
af05a33957
|
Land #12408, Fix spelling mistakes
|
2019-10-05 21:10:56 +00:00 |
|
|
h00die
|
9f29f5f419
|
fix spelling received
|
2019-10-05 14:40:27 -04:00 |
|
|
h00die
|
905eb17132
|
begining to fix spelling errors
|
2019-10-05 14:26:34 -04:00 |
|
|
s7u55
|
dc64529f03
|
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
|
2019-10-03 09:08:12 +03:00 |
|
|
s7u55
|
b8f19eb933
|
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
Co-Authored-By: Valeri Melnikov <MelnikoffVA@yandex.ru>
|
2019-10-03 09:03:24 +03:00 |
|