Jack Heysel 10c1b79c37 Land #17861, pfSense Config Data RCE as root ...

This module exploits a vulnerability in pfSense version
2.6.0 and below which allows for authenticated users to
execute arbitrary operating systems commands as root.

2023-07-12 14:32:06 -04:00

..

aix

Add invscout RPM Privilege Escalation

2023-05-17 20:17:55 +10:00

android

tests passing

2023-04-04 10:24:09 +01:00

apple_ios

Lint msftidy

2022-04-18 23:36:23 +02:00

bsd/finger

Migrate old uses of manual autocheck to use the new prepend autocheck

2021-02-02 10:15:46 +00:00

bsdi/softcart

…

dialup/multi/login

…

firefox/local

…

freebsd

exploits/freebsd/local/ip6_setpktopt_uaf_priv_esc: Add Reliability notes

2023-02-02 18:45:43 +11:00

hpux/lpd

…

irix/lpd

…

linux

Land #18077, add Symmetricom unauth cmd injection

2023-06-13 17:07:16 -05:00

mainframe/ftp

…

multi

Apache RocketMQ update config RCE

2023-07-05 12:38:51 -04:00

netware

…

openbsd/local

modules: Check datastore ForceExploit before checking if session is root

2023-02-02 18:17:02 +11:00

osx

feedback_assistant_root: Check if OSX version is blank in check method

2023-04-28 19:52:15 +10:00

qnx

modules: Check datastore ForceExploit before checking if session is root

2023-02-02 18:17:02 +11:00

solaris

tests passing

2023-04-04 10:24:09 +01:00

unix

pfSense Config Data Remote Command Execution as root (CVE-2023-27253) Module

2023-07-12 13:27:02 -04:00

windows

Land #18170, Add module for SmarterMail Build 6985 - dotNET Deserialization Remote Code Execution (CVE-2019-7214)

2023-07-10 23:56:09 +01:00

example_linux_priv_esc.rb

small updates to example modules

2023-05-07 13:02:30 -04:00

example_webapp.rb

review comments

2023-05-08 15:25:31 -04:00

example.py

fix URLs not resolving

2022-02-16 17:22:40 -06:00

example.rb

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00