C4ssandre 1fec224bae Adding a new check raised by an unforeseen usecase. I tested the usecase of a webserver on which a malicious user succeeded to upload a meterpreter .exe and execute it by calling its url. The meterpreter sessions belongs to IUSRS, which is not allowed to enumerate services. Thus the exploit fails, but checks pass. So added new checks for filtering this usecase.

2020-12-11 05:22:37 -05:00

..

aix

…

android

add module description to the binder_uaf module

2020-02-29 11:24:06 +08:00

apple_ios

remove debug logging from the kernel exploit

2020-07-30 18:10:26 +08:00

bsd/finger

Refactor modules that use Expect

2020-02-05 21:16:21 -06:00

bsdi/softcart

…

dialup/multi/login

…

firefox/local

…

freebsd

Use AutoCheck mixin and prefer cc over gcc

2020-08-24 11:47:50 +00:00

hpux/lpd

…

irix/lpd

…

linux

Fix formatting

2020-08-17 11:53:39 -05:00

mainframe/ftp

…

multi

Backport miscellaneous fixes to my modules

2020-08-14 13:40:23 -05:00

netware

…

openbsd/local

Add Msf::Post::Unix.is_root? method

2020-07-12 00:47:56 +00:00

osx

Update last batch of modules

2020-06-09 14:18:52 +02:00

qnx

…

solaris

Update last batch of modules

2020-06-09 14:18:52 +02:00

unix

Backport miscellaneous fixes to my modules

2020-08-14 13:40:23 -05:00

windows

Adding a new check raised by an unforeseen usecase. I tested the usecase of a webserver on which a malicious user succeeded to upload a meterpreter .exe and execute it by calling its url. The meterpreter sessions belongs to IUSRS, which is not allowed to enumerate services. Thus the exploit fails, but checks pass. So added new checks for filtering this usecase.

2020-12-11 05:22:37 -05:00

example_linux_priv_esc.rb

rubocop

2020-04-19 17:23:54 -04:00

example_webapp.rb

…

example.rb

…