adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
1314f5d0bbb547dbceefeb8da2e01abfbc07d936
metasploit-gs/modules/exploits/linux/local
T
History
Brendan da7224ed1b Merge pull request #20376 from msutovsky-r7/exploit/sudo-chroot-privesc 
Adds module for sudo chroot LPE (CVE-2025-32463)
2025-09-03 16:53:43 -05:00
..
abrt_raceabrt_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
abrt_sosreport_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
af_packet_chocobo_root_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
af_packet_packet_set_ring_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
ansible_node_deployer.rb
ansible review
2024-01-15 17:18:49 -05:00
apport_abrt_chroot_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apt_package_manager_persistence.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
asan_suid_executable_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
autostart_persistence.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
blueman_set_dhcp_handler_dbus_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
bpf_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
bpf_sign_extension_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
cpi_runrshell_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cron_persistence.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
cve_2021_3493_overlayfs.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
cve_2021_4034_pwnkit_lpe_pkexec.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
cve_2021_38648_omigod.rb
Update the Python exploit code to fix a bug
2021-11-02 10:10:18 -04:00
cve_2022_0847_dirtypipe.rb
modify docs to reflect changes, remove 'return'
2022-03-10 10:39:32 -06:00
cve_2022_0995_watch_queue.rb
Fix a typo when the kernel is not Ubuntu
2024-09-09 14:19:20 -04:00
cve_2022_1043_io_uring_priv_esc.rb
reduces code duplication
2023-04-04 10:27:11 +01:00
cve_2023_0386_overlayfs_priv_esc.rb
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
desktop_privilege_escalation.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
diamorphine_rootkit_signal_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
docker_cgroup_escape.rb
guard Rex::Version.new against crashes on local modules
2025-01-17 16:10:23 -05:00
docker_daemon_privilege_escalation.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
docker_privileged_container_escape.rb
Add module notes
2023-02-08 15:46:07 +00:00
docker_privileged_container_kernel_escape.rb
Add support for redhat based containers
2024-05-01 13:30:16 -04:00
docker_runc_escape.rb
Update from review
2021-06-30 18:13:35 +02:00
exim4_deliver_message_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
f5_create_user.rb
Get rid of #String.hash in favour of UnixCrypt
2023-02-01 11:02:04 -08:00
gameoverlay_privesc.rb
Update payload name, fix payload escapes & quotation, add unix cmd support
2024-12-17 16:52:24 -06:00
glibc_ld_audit_dso_load_priv_esc.rb
check files exist before suid checking them
2022-10-05 19:43:07 -04:00
glibc_origin_expansion_priv_esc.rb
use more Post::File functions
2022-10-08 09:50:25 -04:00
glibc_realpath_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
glibc_tunables_priv_esc.rb
Add a way to get the buildid via perf
2023-12-29 17:24:27 +01:00
hp_smhstart.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_xglance_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
juju_run_agent_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kloxo_lxsuexec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ktsuss_suid_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
lastore_daemon_dbus_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
libuser_roothelper_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
motd_persistence.rb
Add modules/exploits/linux/local/motd_persistence.rb
2024-09-12 17:41:47 +02:00
ndsudo_cve_2024_32019.rb
Adds check for ndsudo binary
2025-08-20 12:49:38 +02:00
nested_namespace_idmap_limit_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
netfilter_nft_set_elem_init_privesc.rb
Update ranking for nft_set_elem_init
2022-09-30 09:57:54 -05:00
netfilter_priv_esc_ipv4.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
netfilter_xtables_heap_oob_write_priv_esc.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
network_manager_vpnc_username_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ntfs3g_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
omniresolve_suid_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
overlayfs_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pihole_remove_commands_lpe.rb
Update PiHole module to not wait for sudo input
2022-05-04 17:24:43 +01:00
pkexec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
polkit_dbus_auth_bypass.rb
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command shell
2022-11-25 15:13:57 +11:00
progress_flowmon_sudo_privesc_2024.rb
Fix module cleanup
2024-05-29 08:39:06 -04:00
progress_kemp_loadmaster_sudo_privesc_2024.rb
Remove errant CVE reference.
2025-02-20 08:19:23 -06:00
ptrace_sudo_token_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ptrace_traceme_pkexec_helper.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
rc_local_persistence.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rds_atomic_free_op_null_pointer_deref_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
rds_rds_page_copy_user_priv_esc.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
recvmmsg_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
reptile_rootkit_reptile_cmd_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
runc_cwd_priv_esc.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
saltstack_salt_minion_deployer.rb
salt review
2024-01-10 17:19:58 -05:00
service_persistence.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
servu_ftp_server_prepareinstallation_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
sock_sendpage.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
sophos_wpa_clear_keys.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
su_login.rb
Add module notes
2023-02-08 15:46:07 +00:00
sudo_baron_samedit.rb
Run rubocop on exploit modules
2023-02-08 15:20:32 +00:00
sudo_chroot_cve_2025_32463.rb
Adds more comprehensive check, updates build instructions
2025-08-27 17:58:11 +02:00
sudoedit_bypass_priv_esc.rb
stronger grep
2023-05-16 16:18:14 -04:00
systemtap_modprobe_options_priv_esc.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
tomcat_rhel_based_temp_priv_esc.rb
review comment
2023-03-13 14:42:26 -04:00
tomcat_ubuntu_log_init_priv_esc.rb
wrap tomcat dpkg command and rex version
2025-01-22 17:06:48 -05:00
ubuntu_enlightenment_mount_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
ubuntu_needrestart_lpe.rb
review of ubuntu_needrestart_lpe
2025-01-09 16:23:09 -05:00
udev_netlink.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
udev_persistence.rb
Adds different approach to udev rule naming
2025-06-04 15:24:43 +02:00
ueb_bpserverd_privesc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ufo_privilege_escalation.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
vcenter_java_wrapper_vmon_priv_esc.rb
add EVENT_DEPENDENT to vcenter vmon priv esc
2024-04-22 15:12:27 -04:00
vcenter_sudo_lpe.rb
peer review
2024-12-04 18:39:43 -05:00
vmware_alsa_config.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
vmware_mount.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
vmware_workspace_one_access_certproxy_lpe.rb
tests passing
2023-04-04 10:24:09 +01:00
vmware_workspace_one_access_cve_2022_22960.rb
Removed unnecessary require statement
2023-04-18 18:05:11 -04:00
vmwgfx_fd_priv_esc.rb
guard Rex::Version.new against crashes on local modules
2025-01-17 16:10:23 -05:00
yum_package_manager_persistence.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zimbra_postfix_priv_esc.rb
Resolve feedback - get rid of unnecessary directory, add CVE number, let the user choose the path
2022-10-17 15:00:56 -07:00
zimbra_slapper_priv_esc.rb
Update zimbra_slapper_priv_esc.rb
2023-03-27 16:46:07 +01:00
zpanel_zsudo.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zyxel_suid_cp_lpe.rb
Initial commit of CVE-2022-30526 LPE
2022-07-19 03:29:11 -07:00