notivan 08690e5e11 Exploit for CVE-2016-9299 (Jenkins CLI Ldap Deser) ...

This is based on Matthias Kaiser's presentation at deepsec. We build a chain that connects back to our LDAP server and trigger it over the CLI HTTP interface. The LDAP server then serves a second chain based on YSOSerial commons-collection which triggers Runtime.exec. The second chain doesn't run with Jenkin's class filtering so succeeds.

2017-01-11 23:23:02 +00:00

..

antivirus

use MetasploitModule as a class name

2016-03-08 14:02:44 +01:00

browser

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

ftp

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

games

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

http

Use Linux payloads instead of cmd/unix/interact

2017-01-09 11:11:17 -06:00

ids

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

imap

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

local

Land #7579, rename netfilter_priv_esc to rename netfilter_priv_esc_ipv4

2016-11-21 17:59:29 -06:00

misc

Exploit for CVE-2016-9299 (Jenkins CLI Ldap Deser)

2017-01-11 23:23:02 +00:00

mysql

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

pop3

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

postgres

Implement first pass of architecture/platform refactor

2016-10-28 07:16:05 +10:00

pptp

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

proxy

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

samba

Adding changes to Samba exploit to target MIPSBE (this is for OpenWRT on a router

2016-09-01 10:05:13 +01:00

smtp

Implement first pass of architecture/platform refactor

2016-10-28 07:16:05 +10:00

ssh

Merge branch 'master' into bug/7321/fix-ssh-modules

2016-09-19 15:27:37 -05:00

telnet

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00

upnp

Revert "Land #6812, remove broken OSVDB references"

2016-07-15 12:00:31 -05:00