7fc38d1b50
Land #15754 , add apache2 path traversal modules
2021-10-22 12:40:57 -04:00
ced61f989b
Tweak the verbiage for clarity, update docs
2021-10-22 12:38:03 -04:00
2f86b332f5
Land #15733 , Add Module For Kubernetes Pod Authenticated Code Execution
2021-10-21 10:46:20 +01:00
1e1b1982b2
Improve image selection when creating a pod
...
The module will now iterate over identified image names by default and
also allows an explicit image name to be specified using the new
PodImage advanced option.
2021-10-20 15:52:23 -04:00
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
9f0804cbfb
Fix Meterpreter spelling mistake
2021-10-12 23:40:43 +01:00
dcb42da269
Land #15612 , Add multiple moodle modules
2021-10-11 23:18:55 +01:00
60b2b0f009
update modules and docs
2021-10-10 17:01:15 +04:00
256b4edf78
update modules to CVE-2021-42013
2021-10-08 15:22:47 +04:00
78ba617aef
Add module doc
2021-10-06 16:43:57 -05:00
92a0f9034d
add modules docs
2021-10-06 23:51:31 +04:00
2c7aa022d4
Add PoC for CVE-2021-22555 Netfilter Priv Escalation
2021-10-04 16:48:23 +01:00
d8f2b18649
Implement review feedback
2021-10-01 14:44:13 -04:00
8d82bebc3c
Add the kubernetes/exec module docs
2021-10-01 10:32:12 -04:00
fee037ac18
Land #15670 , add opmanager sumpdu deser module
2021-09-20 12:15:26 -05:00
327aefd3f5
add older path, fix typo
2021-09-20 12:14:42 -05:00
fd0f565095
Add automatic targeting for the CVEs
2021-09-16 15:15:52 -04:00
12af64c4d8
Land #15604 , add buffer overflow G-Cam module
2021-09-16 13:02:57 -05:00
56cd43a8b8
Land #15624 , Add module for CVE-2020-27955
2021-09-15 14:54:19 -04:00
480dec9a1e
Land #15658 , Add module for CVE-2021-32682
2021-09-14 14:09:27 -04:00
d82ed7d4a2
Write up the module docs
2021-09-14 09:10:44 -04:00
91ae50eb27
escapeshellcmd -> escapeshellarg
2021-09-09 17:28:05 -05:00
0095613a94
add completed module and documentation
2021-09-09 16:58:40 -05:00
5ed5bc3903
Add module doc
2021-09-08 09:37:02 -05:00
abbb994dab
Updated docs
2021-09-07 13:55:21 -04:00
7fe44583fe
Updated docs
2021-09-07 13:32:52 -04:00
a7d99ebbfc
Land # 15611, ProxyShell Improvements
...
Merge branch 'land-15611' into upstream-master
2021-09-07 11:47:13 -05:00
65aae010ce
more libs for moodle and teacher priv esc to rce module
2021-09-04 13:31:11 -04:00
3c43bd409d
Added docs an Git User-Agent FP
2021-09-03 16:15:39 -05:00
0e0e3bbcfb
Land #15603 , Add Geutebruck CVE_2021_335XX command injection module
2021-09-01 10:59:22 -05:00
ff50a94348
Land #15567 , Add in Exploit for CVE-2021-3490
...
Merge branch 'land-15567' into upstream-master
2021-08-31 18:46:25 -05:00
0a57641aa4
Add in documentation and module code cleanness improvements and also make the output easier for readers to understand should something fail midway through.
2021-08-31 18:24:57 -05:00
30a7ee1bf2
Final very minor documentation fixes for better clarity
2021-08-31 18:24:56 -05:00
56cde3eaba
Add Geutebruck CVE_2021_335XX command injections module
2021-08-31 18:24:14 -05:00
3bca3b0bcb
Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match
2021-08-31 15:07:37 -05:00
5ea2cf9e5a
moodle_admin_shell_upload working and minor other fixes
2021-08-29 16:59:44 -04:00
176c1f0751
moodle lib and module
2021-08-29 10:50:25 -04:00
a35be13958
moodle 3.8.0 tested
2021-08-28 08:10:28 -04:00
c0a8535764
moodle spellcheck rce
2021-08-27 19:51:52 -04:00
95015f0c2b
Update the ProxyShell module docs
2021-08-27 17:50:28 -04:00
6a501a37ff
Add CVE-2021-33549 exploit for Geutebruck G-CAM
2021-08-27 01:28:26 +01:00
6c0b90eabb
Land #15532 , add module for CVE-2021-21300 and git mixins
2021-08-26 18:26:04 +01:00
674628e600
Land #15384 , Improve Windows RDLL injection
2021-08-26 12:11:44 -04:00
6f9b06fb4b
Add in Manfred Paul's original blog post and chompie1337's original PoC to the list of links. Also add in a relatively detailed description of how to add in new targets to this exploit to the documentation in case that helps anyone down the line
2021-08-25 18:09:07 -05:00
5a80e9678c
Address Spencer's comments and remove changes that don't directly use the DLL injection library API change
2021-08-24 16:34:01 -05:00
bd490d35ed
Add support for Linux 5.11.x on Fedora
2021-08-23 15:09:10 -05:00
db5ac81ecf
Fix up mistakes bcoles pointed out and also add in a check to ensure we are only targetting x64 systems
2021-08-23 13:23:40 -05:00
e46611cffb
Add in support for exploiting Fedora 32 with Linux kernel 5.10.12
2021-08-20 18:04:59 -05:00
75ae2b76f5
Add support for Fedora 32 Linux Kernel 5.9.8-100 and also fix an error where the wrong file was being used for Fedora 32 Linux Kernel 5.8.8.
2021-08-20 16:50:20 -05:00
5abf407228
Add support for Fedora 32 with Linux Kernel 5.8.8-200
2021-08-20 15:42:34 -05:00
Spencer McIntyre