adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
339c1941efdbe265cfe586f11f1da2d000c19d44
metasploit-gs/modules/exploits/windows/local
T
History
bwatters 3aeeede4a6 Land #14187, Added CVE-2020-3433 module 
Merge branch 'land-14187' into upstream-master
2020-09-29 13:41:33 -05:00
..
adobe_sandbox_adobecollabsync.rb
Set needs_cleanup flag for exploits that need it
2019-08-02 10:23:53 -05:00
agnitum_outpost_acs.rb
Remove duplicate word in the agitum_outpost_acs module description
2018-06-14 15:15:29 +02:00
alpc_taskscheduler.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
always_install_elevated.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
anyconnect_lpe.rb
rubocop changes
2020-09-29 13:38:31 -05:00
applocker_bypass.rb
remove single-entry OptEnum from module, since there is only one possible TECHNIQUE
2018-05-23 13:44:53 -05:00
appxsvc_hard_link_privesc.rb
merged write_to_disk and load_dll_with_diaghub
2019-07-09 11:39:38 -05:00
ask.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
bthpan.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
bypassuac_comhijack.rb
Fix #9036, broken refs in bypassuac_comhijack
2017-10-03 13:36:29 -05:00
bypassuac_dotnet_profiler.rb
use a finer-grained exception here
2019-11-18 12:57:33 -06:00
bypassuac_eventvwr.rb
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
bypassuac_fodhelper.rb
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
bypassuac_injection_winsxs.rb
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
bypassuac_injection.rb
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
bypassuac_sdclt.rb
s/http/https/
2019-11-18 01:45:57 -06:00
bypassuac_silentcleanup.rb
bypassuac_silentcleanup: cleanup %WINDIR% env var before calling powershell payload
2019-12-05 15:08:50 +01:00
bypassuac_sluihijack.rb
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
bypassuac_vbs.rb
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
bypassuac_windows_store_filesys.rb
s/bypassuac_windows_store/bypassuac_windows_store_filesys/g
2019-09-06 00:52:13 +08:00
bypassuac_windows_store_reg.rb
minor fixes
2019-09-06 02:11:06 +08:00
bypassuac.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
capcom_sys_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
comahawk.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
current_user_psexec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cve_2017_8464_lnk_lpe.rb
replace trivial usage of expand_path with getenv
2019-05-31 17:44:35 -05:00
cve_2018_8453_win32k_priv_esc.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
cve_2020_0668_service_tracing.rb
Add in further edits to the library code to remove the possiblity of dangling handles and also update the module code accordingly.
2020-07-30 10:45:19 -05:00
cve_2020_0787_bits_arbitrary_file_move.rb
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
cve_2020_0796_smbghost.rb
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
cve_2020_1048_printerdemon.rb
remove requires
2020-09-17 16:04:56 -05:00
cve_2020_1313_system_orchestrator.rb
Typos and cleanup
2020-09-25 12:27:55 -05:00
dnsadmin_serverlevelplugindll.rb
Update module documentation with more detail r.e affected versions and the fact that the use of UNC paths could cause an issue if they are not typed in correctly. Also update the module documentation to use the output from recent tests to reflect recent changes. Shortern the module description and update its stability rating. Finally add in a reliability rating for the exploit module.
2020-09-10 11:32:45 -05:00
docker_credential_wincred.rb
add check for vulnerable path
2020-04-24 09:56:42 -05:00
druva_insync_insynccphwnet64_rcp_type_5_priv_esc.rb
Add Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
2020-05-06 14:09:46 +00:00
gog_galaxyclientservice_privesc.rb
rubocop changes
2020-06-15 08:48:51 -05:00
ikeext_service.rb
Use new method
2020-05-08 14:49:01 -05:00
ipass_launch_app.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
lenovo_systemupdate.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
mov_ss.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
mqac_write.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
ms10_015_kitrap0d.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
ms10_092_schelevator.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms11_080_afdjoinleaf.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
ms13_005_hwnd_broadcast.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms13_053_schlamperei.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms13_081_track_popup_menu.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
ms13_097_ie_registry_symlink.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms14_009_ie_dfsvc.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms14_058_track_popup_menu.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
ms14_070_tcpip_ioctl.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms15_004_tswbproxy.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ms15_051_client_copy_image.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
ms15_078_atmfd_bof.rb
80 pages left
2017-09-13 22:03:34 -04:00
ms16_014_wmi_recv_notif.rb
fix spelling received
2019-10-05 14:40:27 -04:00
ms16_016_webdav.rb
replace strings with bools
2020-01-14 20:47:27 -05:00
ms16_032_secondary_logon_handle_privesc.rb
Move clean-up code to cleanup method (#2)
2020-01-29 17:11:07 +01:00
ms16_075_reflection_juicy.rb
Removing dead code.
2020-02-21 08:33:20 +09:00
ms16_075_reflection.rb
Fixed check to you know, check.
2018-10-04 16:38:35 -05:00
ms18_8120_win32k_privesc.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
ms_ndproxy.rb
Return CheckCode::Safe for unsupported x64 systems
2018-03-29 12:03:33 +00:00
novell_client_nicm.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
novell_client_nwfs.rb
Update CVE references for exploit modules
2018-07-08 18:46:04 -05:00
ntapphelpcachecontrol.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
ntusermndragover.rb
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
nvidia_nvsvc.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
panda_psevents.rb
80 pages left
2017-09-13 22:03:34 -04:00
payload_inject.rb
Update payload_inject.rb
2019-12-18 16:06:26 +01:00
persistence_image_exec_options.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
persistence_service.rb
Declare correct SessionType - Fix #12587
2019-11-16 04:57:18 +00:00
persistence.rb
replace strings with bools
2020-01-14 20:47:27 -05:00
plantronics_hub_spokesupdateservice_privesc.rb
Use new method
2020-05-08 14:49:01 -05:00
powershell_cmd_upgrade.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
powershell_remoting.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ppr_flatten_rec.rb
Replace WsfDelay with WfsDelay - Fixes #11018
2018-11-25 05:09:16 +00:00
ps_persist.rb
replace trivial usage of expand_path with getenv
2019-05-31 17:44:35 -05:00
ps_wmi_exec.rb
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
pxeexploit.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
razer_zwopenprocess.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
registry_persistence.rb
replace strings with bools
2020-01-14 20:47:27 -05:00
ricoh_driver_privesc.rb
check arch
2020-02-06 14:11:42 -06:00
run_as.rb
80 pages left
2017-09-13 22:03:34 -04:00
s4u_persistence.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
service_permissions.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
unquoted_service_path.rb
remove writable from lib, fix check
2020-04-11 12:47:53 -04:00
virtual_box_guest_additions.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
virtual_box_opengl_escape.rb
80 pages left
2017-09-13 22:03:34 -04:00
vss_persistence.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
webexec.rb
Use new method
2020-05-08 14:49:01 -05:00
windscribe_windscribeservice_priv_esc.rb
Use new method
2020-05-08 14:49:01 -05:00
wmi_persistence.rb
replace strings with bools
2020-01-14 20:47:27 -05:00
wmi.rb
Update use_single_quotes to wrap_double_quotes
2019-03-29 18:14:56 -05:00