9b40554ec6
Land #13370 , Add Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
...
Merge branch 'land-13370' into upstream-master
2020-05-12 13:20:27 -05:00
b4e2599921
Remove trailing whitespace to fix build failures
2020-05-07 09:59:34 -04:00
9769e04b6e
Land #13322 , CVE-2020-0668 Service tracing file junction overwrite
2020-05-07 09:47:20 -04:00
26d4cb7a47
Tweak the service tracking checks and update docs markdown
2020-05-07 09:46:19 -04:00
a5fe498610
Update ARCH handling, suggested changes, and last-minute fixes
2020-05-06 15:36:53 -05:00
bf16307d7f
Add Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
2020-05-06 14:09:46 +00:00
02bc959d1b
Documentation alignment to 72 character width as is standard
2020-05-05 21:01:52 -05:00
bcf9449b29
add basic check method
2020-05-01 19:02:21 +08:00
01f1cfd188
Update documentation with note about prior windows versions
2020-04-30 09:37:52 -05:00
8e9a162b1b
fix
2020-04-30 18:05:00 +08:00
ea22e34b9c
fix description
2020-04-30 17:51:28 +08:00
109f0a01f7
add windows 7 sp1 scenario
2020-04-30 17:19:54 +08:00
ff0704b316
code review from grant <3
2020-04-30 17:19:54 +08:00
7560f7de8c
remove changes to other files
2020-04-30 17:19:54 +08:00
f05b50f54e
add documentation for CVE-2019-0808
2020-04-30 17:19:53 +08:00
191044cdad
Final fixes and documentation
2020-04-29 10:18:22 -05:00
640eb77403
Land #13260 , add docker wincred module
2020-04-24 10:02:38 -05:00
24eeba09e8
typo
2020-04-24 10:01:31 -05:00
1c757f90db
bcoles suggestions
2020-04-22 18:08:58 -05:00
62a000fe32
Land #13193 , add updates to the trusted service path LPE
2020-04-16 11:41:02 -04:00
9bede45746
Word
2020-04-15 17:01:32 -05:00
23cd4708c6
Forgot a step
2020-04-15 16:57:56 -05:00
2166ab04ac
First swipe at CVE-2019-15752
2020-04-15 16:52:45 -05:00
a01d50de38
add windows writable? and update unqouted service path
2020-04-10 14:54:20 -04:00
f339e2e476
doc tidy
2020-04-03 22:02:28 -04:00
6d8fc1dad6
unquoted service path updates
2020-04-03 22:00:15 -04:00
0316ed7a18
Add module docs for CVE-2020-0796
2020-04-02 17:48:07 -04:00
c9e4ca34c3
Land #12921 , Updating regex in ms16_075_reflection_juicy exploit windows version check
...
Merge branch 'land-12921' into upstream-master
2020-02-20 21:10:37 -06:00
de6306fa35
Fix message, once more with feeling
2020-02-20 11:26:21 -06:00
9c69059a24
Fix DisablePayloadHandler warning once and for all
2020-02-20 10:35:47 -06:00
9e46926a0f
Update documentation/modules/exploit/windows/local/ms16_075_reflection_juicy.md
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-02-12 08:18:49 +09:00
785dbb6ba3
Update documentation/modules/exploit/windows/local/ms16_075_reflection_juicy.md
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-02-12 08:18:27 +09:00
9c30250161
Updating documentation for juicy potato exploit.
...
Added a link to information on the expiry of the bug, and explicitly
listing which versions of Microsoft Windows were and were not
vulnerable.
2020-02-10 16:33:45 +09:00
7f3c0c9314
Land #12906 , Add module for CVE-2019-19363
...
Merge branch 'land-12906' into upstream-master
2020-02-06 15:22:17 -06:00
e736588795
change method of exploitation for reliability
...
This commit changes a few things:
1. The module first writes the dll to a
temp location.
2. The module writes a batch file to a
temp location.
3. The batch file copies the dll until
the copy command fails (presumably
because the dll is now in use by
PrintIsolationHost.exe).
4. The dropped files are deleted.
5. Docs updated to reflect changes.
2020-02-06 12:51:36 -06:00
772431a29e
add documentation
2020-02-03 16:25:16 -06:00
34621c0adc
Add Windscribe WindscribeService Named Pipe Privilege Escalation
2020-02-01 00:41:07 +00:00
3ffc79aa85
Land #12878 , msftidy_docs
...
Land #12878 , msftidy_docs
2020-01-31 11:59:50 -06:00
bd48588fd5
catch false positive spaces at eol from code indent
2020-01-28 14:28:18 -05:00
0d8d17c63d
Land #12736 , Add support for PPID spoofing
2020-01-24 08:49:51 -06:00
3518b9465c
Merge pull request #12831 from h00die/doc_cleanup
...
Documentation standardization. This is the first step in standardizing the module documentation.
2020-01-22 14:53:12 -06:00
208aa3454f
Add documentation and warning for PPID interaction
2020-01-22 13:36:34 -06:00
bc312420ca
module doc standardizations
2020-01-20 21:41:32 -05:00
e4013846d3
more standardizations
2020-01-16 11:32:02 -05:00
b2e0950bba
caps
2020-01-16 11:09:29 -05:00
c904b9d2f2
scenario to scenarios
2020-01-16 10:36:38 -05:00
fa73709b3e
documentation standardization
2020-01-14 21:02:53 -05:00
b3e9d9aee9
Add Plantronics Hub SpokesUpdateService Privilege Escalation
2020-01-03 20:13:27 +00:00
894927d960
Land #12693 , add Comahawk privilege escalation
2019-12-18 15:40:51 -06:00
f9fbe96145
more bcoles suggestions
2019-12-18 14:25:43 -06:00
bwatters-r7