adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
34ceae4e2c47f0b1963f73dec1505879fa2d7166
metasploit-gs/data/exploits
T
History
sfewer-r7 1a8e88c054 fix a typo with the use of CVE-2025-55102, it should be CVE-2025-55182
2025-12-09 09:05:59 +00:00
..
badodt
Add files via upload
2018-05-24 09:45:38 +01:00
batik_svg
…
capcom_sys_exec
…
capture/http
…
cve-2010-0094
…
cve-2010-0840/vuln
…
cve-2010-3563
…
cve-2010-3904
Add Reliable Datagram Sockets (RDS) Privilege Escalation
2018-05-03 12:51:21 +00:00
cve-2010-4452
…
cve-2011-3544
…
cve-2012-0217
Use @iZsh's exploit
2018-12-21 15:40:01 +00:00
cve-2012-5076
…
cve-2012-5076_2
…
cve-2012-5088
…
cve-2013-0074
…
cve-2013-0422
…
cve-2013-0431
…
cve-2013-1300
…
cve-2013-1488
…
cve-2013-1493
…
cve-2013-2460
…
cve-2013-3660
…
cve-2013-3881
…
cve-2014-1610
…
cve-2015-1318
Use cross-compiled exploit
2018-01-13 05:44:42 +00:00
cve-2015-3315
Add ABRT raceabrt Privilege Escalation module
2018-01-16 14:52:33 +00:00
cve-2015-5287
Add sosreport-rhel7.py
2019-04-20 11:56:01 +00:00
cve-2016-0051
…
cve-2016-0189
…
cve-2016-6415
…
cve-2017-7308
Recompile pre-compiled exploit executable (stripped, no DEBUG)
2018-05-17 09:43:07 +00:00
cve-2017-8464
recompile binaries
2017-11-08 09:33:48 -06:00
cve-2017-16995
Add in compiled version of the exploit to meet Rapid7 compliance guidelines on having Rapid7 employees submit compiled binaries only
2020-10-23 16:01:00 -05:00
cve-2017-1000112
Fix ufo_privilege_escalation
2018-07-08 11:05:30 +00:00
cve-2018-8897
Combine the modules and update the binaries
2018-07-27 11:08:04 -05:00
cve-2018-18955
Add musl-cross cross-compiled executables
2018-11-25 00:53:55 +00:00
cve-2018-1000001
chore: remove repetitive words
2024-04-15 11:06:50 +08:00
cve-2019-1322
Randomize container name
2019-12-12 07:48:01 -06:00
cve-2020-0668
Working through mountpoint issues
2020-04-21 09:54:45 -05:00
cve-2020-1313
First attempt at CVE-2020-1313
2020-09-18 15:39:12 -05:00
cve-2021-3490
Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match
2021-08-31 15:07:37 -05:00
cve-2022-0995
Update c source with argc check and CRASH notes for module
2022-04-20 17:37:48 -05:00
cve-2023-34634
First attempt at CVE-2023-34634
2023-08-03 10:58:07 -05:00
CVE-2008-6508
…
CVE-2010-0232
…
CVE-2010-0842
…
CVE-2010-1240
…
CVE-2011-2882
…
CVE-2011-3400
…
CVE-2012-0013
…
CVE-2012-1535
…
CVE-2012-2516
…
CVE-2012-4681
…
CVE-2012-6636
add ndkstager to data/exploits
2018-10-05 15:10:21 +08:00
CVE-2013-0109
…
CVE-2013-0634
…
CVE-2013-2465
…
CVE-2013-3906
…
CVE-2013-5045
…
CVE-2013-5331
…
CVE-2014-0038
Cleanup linux/local/recvmmsg_priv_esc module
2018-05-24 17:56:07 +00:00
CVE-2014-0257
…
CVE-2014-0322
…
CVE-2014-0497
…
CVE-2014-0515
…
CVE-2014-0556
…
CVE-2014-0569
…
CVE-2014-2630
working exploit
2020-04-19 15:19:19 -04:00
CVE-2014-4113
…
CVE-2014-4114/template
…
CVE-2014-4404
…
CVE-2014-6352/template_run_as_admin
…
CVE-2014-8440
…
CVE-2015-0016
…
CVE-2015-0311
…
CVE-2015-0313
…
CVE-2015-0318
…
CVE-2015-0336
…
CVE-2015-0359
…
CVE-2015-1130
python 3 compatibility
2019-02-13 22:20:29 +01:00
CVE-2015-1328
…
CVE-2015-1701
…
CVE-2015-2426
…
CVE-2015-3090
…
CVE-2015-3105
…
CVE-2015-3113
…
CVE-2015-3673
…
CVE-2015-5119
…
CVE-2015-5122
Add support for Windows 10(10240) to CVE-2015-5122
2019-06-01 14:44:30 +09:00
CVE-2015-8103
…
CVE-2015-8660
…
CVE-2016-0040
Re-add compiled Binary
2018-05-03 15:50:15 -05:00
CVE-2016-0099
Add a random sentinel to close channel when terminates (#1)
2020-01-25 23:30:49 +01:00
CVE-2016-1240
tomcat 8 priv esc on ubuntu prebuilt so file
2023-02-04 18:17:41 -05:00
CVE-2016-4117
initial import, CVE-2016-4117 OSX exploit
2018-12-21 02:54:35 -06:00
CVE-2016-4557
Fix bpf_priv_esc module
2018-12-12 17:23:12 +00:00
CVE-2016-4655
add DEBUG exploit binary
2018-10-22 19:51:21 +08:00
CVE-2016-4669
remove debug logging from the kernel exploit
2020-07-30 18:10:26 +08:00
CVE-2016-4997
…
CVE-2016-8655
Update AF_PACKET chocobo_root Privilege Escalation module
2020-01-19 11:51:01 +00:00
CVE-2017-0358
…
CVE-2017-7494
Rename payloads with os+libc, shrink array inits
2017-05-27 19:50:31 -05:00
CVE-2017-8291
Quick Ghostscript module based on the public PoC
2017-04-28 09:56:52 -05:00
CVE-2017-13861
add exploit binary
2019-06-02 10:19:24 +08:00
CVE-2017-16666
Add xplico remote code execution
2017-11-14 09:30:57 +03:00
CVE-2017-17562
Resolve a bug in reverse_tcp and segfaults across payloads
2017-12-29 14:18:55 -06:00
CVE-2017-1000353
add poc
2020-09-11 12:00:16 -05:00
CVE-2018-0824
Remove duplicated files
2018-10-23 12:31:18 -05:00
CVE-2018-4233
move int64.js and utils.js to javascript_utils folder
2020-09-01 16:14:31 +08:00
CVE-2018-4237
add binary
2018-11-20 15:59:23 +08:00
CVE-2018-4404
add binaries
2018-11-15 08:46:24 +08:00
CVE-2018-5333
Add rds_atomic_free_op_null_pointer_deref_priv_esc (CVE-2018-5333)
2020-01-18 08:34:52 +00:00
CVE-2018-8120
addressed suggestions
2018-10-12 14:35:42 -05:00
CVE-2018-8440
Inject Payload to Memory First
2018-09-19 21:13:49 -05:00
CVE-2018-8453
Add cve-2018-8453 exploit module
2019-07-09 07:15:13 -05:00
CVE-2018-9948
Cleanup for foxit_reader_uaf
2018-09-05 21:47:57 -05:00
CVE-2018-16858
reduced file size
2019-04-16 09:06:44 -05:00
CVE-2018-19276
add xml erb file
2019-12-02 08:44:37 -06:00
CVE-2019-0808
Recompile DLL and alter vcxproj file to automatically place generated DLL in right folder
2020-05-06 16:33:01 -05:00
CVE-2019-0841
move source to external/source directory
2019-07-09 09:08:28 -05:00
CVE-2019-1458
Recompile the exploit.dll DLL for CVE-2019-1458 as per Rapid7 policies
2020-10-15 10:58:56 -05:00
CVE-2019-2215
Initial commit of CVE-2019-2215 Android Binder Use-After-Free
2019-10-17 18:48:49 +08:00
CVE-2019-5736
Last additions and improvements
2021-06-30 11:02:11 +02:00
CVE-2019-8513
add exploit binary
2019-04-21 16:02:10 +08:00
CVE-2019-8565
Add CVE-2019-8565 OSX Feedback Assistant local root exploit
2019-05-07 04:30:47 +08:00
CVE-2019-9848
@LoadLow Marks the generated ODT file readonly
2019-08-18 18:36:31 +02:00
CVE-2019-12477
Implement on_request_uri
2019-06-25 23:47:19 -05:00
CVE-2019-13272
Update CVE-2019-13272 pre-compiled exploit
2020-05-11 13:36:41 +00:00
CVE-2020-0787
Recompile everything so we don't have the messagebox calls
2020-06-11 00:18:45 -05:00
CVE-2020-0796
Add the x64 LPE exploit for CVE-2020-0796
2020-04-02 17:22:00 -04:00
CVE-2020-1048
Update binaries
2020-09-16 11:41:02 -05:00
CVE-2020-1054
Add dll
2020-12-15 12:42:06 +01:00
CVE-2020-1337
Cleanup and edits per review from Christophe
2021-01-11 16:02:58 -06:00
CVE-2020-2555
add PoC
2020-05-04 11:08:38 -05:00
CVE-2020-2883
add poc code
2020-06-02 14:29:02 -05:00
CVE-2020-7457
Add CVE-2020-7457 exploit.c
2020-07-26 08:04:37 +00:00
CVE-2020-9839
Recompiled binary exploit file to match source
2020-09-04 15:46:52 -05:00
CVE-2020-9850
add exploit binaries
2020-09-01 17:14:21 +08:00
CVE-2020-17136
Make second round of review edits to fix Spencer's comments
2021-01-08 12:50:52 -06:00
CVE-2020-25736
use 2021 helper name in objective-c code too
2022-12-12 15:55:36 -06:00
CVE-2021-3156
Tested on various other Fedora's
2021-05-04 14:18:16 +10:00
CVE-2021-3493
Add support for aarch64 Ubuntu versions
2021-12-01 14:54:48 -06:00
CVE-2021-4034
Remove unneeded files
2022-02-18 16:33:39 -06:00
CVE-2021-21551
Add targeting for Windows 10 v21H1
2021-05-18 12:56:02 -04:00
CVE-2021-22204
Add CVE-2021-22204 ExifTool ANT perl injection
2021-05-11 12:02:12 +10:00
CVE-2021-22555
Add PoC for CVE-2021-22555 Netfilter Priv Escalation
2021-10-04 16:48:23 +01:00
CVE-2021-35587
add in a build of the gadget for 12.2.1.4.0, needed as the serialVersionUID changes for classes in the coherence.jar file
2025-04-02 15:28:29 +01:00
CVE-2021-38648
Update the Python exploit code to fix a bug
2021-11-02 10:10:18 -04:00
CVE-2021-40444
Remove the Not_Hosted target
2021-12-08 17:22:44 -05:00
CVE-2021-40449
Make adjustments to dllmain.c from reviews and recompile the DLL again
2021-11-09 10:49:14 -06:00
CVE-2021-44228
First "working" 2021-44228 exploit module state
2021-12-29 09:10:07 -05:00
CVE-2022-0847
add binaries for pre-compiled option
2022-03-10 08:50:48 -06:00
CVE-2022-1043
Rapid7 compiled binary
2023-02-01 10:08:13 -05:00
CVE-2022-1471
Initial commit of CVE-2023-43654
2023-10-12 09:27:26 -04:00
CVE-2022-2334
commit and sign binary
2024-07-19 12:07:59 -05:00
CVE-2022-3699
Rubocop
2023-01-19 13:52:58 -05:00
CVE-2022-21882
One exploit for CVE-2021-1732 and CVE-2022-21882
2022-02-18 15:23:38 -05:00
CVE-2022-22942
Updated pre_compiled binary
2023-01-31 13:37:45 -05:00
CVE-2022-26904
Update data to fix more things found during review process
2022-04-05 12:48:11 -05:00
CVE-2022-30190
Add rtf support to cve-2022-30190 AKA Follina
2022-06-30 17:30:06 -05:00
CVE-2022-34918
Updates to the C source code (execl instead of execve, removal of some old comments)
2022-07-25 22:18:47 +02:00
CVE-2022-46689
Rapid7 compiled binary
2023-02-02 11:11:06 -05:00
CVE-2023-0386
Update binary
2024-09-26 13:45:44 -05:00
CVE-2023-4911
Responded to comments from jvoisin
2023-12-19 13:50:09 -05:00
CVE-2023-21768
Add exploit for CVE-2023-21768
2023-03-27 20:08:22 +02:00
CVE-2023-21839
Slight efficiency improvements
2023-05-24 17:36:39 -05:00
CVE-2023-22518
Removed unnecessary files in zip backup
2023-12-11 18:23:22 -05:00
CVE-2023-28252
Responded to comments, improved stability
2023-08-21 19:20:25 -04:00
CVE-2023-34039
vmware aria ssh keys exploit
2023-10-16 13:06:17 -04:00
CVE-2023-36874
Add error checking and randomize the report directory
2023-09-22 14:43:21 -05:00
CVE-2023-50386
Responded to comments
2024-04-04 13:39:22 -07:00
CVE-2024-29510
Add documentation and some updates
2024-07-16 16:34:28 +02:00
CVE-2024-30085
Rebase and squash for CVE-2024-30085
2025-03-20 09:03:28 -05:00
CVE-2024-30088
Removed memory polling
2024-08-30 12:52:18 -07:00
CVE-2024-35250
Windows Access Mode Mismatch LPE in ks.sys [CVE-2024-35250]
2024-11-05 15:31:44 -08:00
CVE-2024-48990
needrestart exploit updates
2024-11-27 15:41:23 -05:00
CVE-2025-8518
Add Vvveb CMS Authenticated RCE (CVE-2025-8518)
2025-10-18 17:12:05 -07:00
CVE-2025-60787
code review changes from smcintyre-r7@
2025-10-09 21:51:31 +04:00
dell_protect
Pulled offsets out of dll into module. Auto-find lsass.exe when pid is 0
2021-12-18 10:56:46 -08:00
docx
…
drunkpotato
Adding DLL's
2021-01-06 15:59:08 +01:00
edb-35948
…
firefox_smil_uaf
…
ghostscript
Add Ghostscript failed restore exploit
2018-09-05 19:56:32 -05:00
hpe_sim_76_amf_deserialization
First attempt at CVE-2020-7200 module, with RuboCopped module
2021-03-02 16:38:19 -06:00
imagemagick
…
java_signed_applet
…
javascript_utils
move int64.js and utils.js to javascript_utils folder
2020-09-01 16:14:31 +08:00
jre7u17
…
juicypotato
build: recompile dlls
2019-01-12 04:02:34 +01:00
ldap
Native LDAP infrastructure to support log4shell
2021-12-16 18:47:52 -05:00
manageengine_xnode/CVE-2020-11532
additional code review improvements for xnode auxiliary modules/lib/docs
2022-07-28 15:12:00 +03:00
mssql
…
mysql
updated windows udf files and documentation
2018-08-07 14:50:47 -04:00
ntapphelpcachecontrol
…
office_word_macro
Update office_word_macro exploit to support template injection
2017-05-25 15:53:45 -05:00
openfire_plugin
Adjust files to be better shared
2023-07-14 12:47:04 -05:00
openoffice_document_macro
…
osx
…
pfsense_clickjacking
Added local copies of the static content
2017-12-02 10:14:14 +01:00
php
…
poison_ivy_c2
…
postgres
…
powershell
fix ssl connection on Windows Server 2012
2021-11-30 06:30:59 +00:00
proxymaybeshell
Fix enumerating emails via ProxyShell
2022-12-02 15:58:50 -05:00
psnuffle
Fixes modules to now correctly use a hash with report note
2025-05-22 10:59:50 +01:00
pxexploit
…
R7_2015_17
…
react2shell_unauth_rce_cve_2025_55182
fix a typo with the use of CVE-2025-55102, it should be CVE-2025-55182
2025-12-09 09:05:59 +00:00
redis
Add doc and enhance the module.
2019-07-20 00:17:57 +08:00
roothelper
Add Libuser roothelper Privilege Escalation exploit
2018-04-23 17:49:11 +00:00
rottenpotato
Recompile binaries and prep for VS2013 compiles
2018-10-04 16:21:23 -05:00
scripthost_uac_bypass
…
splunk
…
tokenmagic
Addressed comments
2021-05-14 17:46:26 -05:00
tpwn
…
uso_trigger
Add Uso dll
2020-04-23 15:18:22 -05:00
uxss
…
vmware_view_planner_4_6_uploadlog_rce
Quick update to make the backdoor a bit stealthier by removing the extra Payload Success! message that wasn't needed
2021-03-14 00:00:17 -06:00
wifi
…
cve-2010-2883.ttf
…
cve-2013-0758.swf
…
cve-2014-1761.rtf
…
cve-2017-0199.rtf
Fix rtf info author
2017-04-14 21:16:39 -05:00
CVE-2007-3314.dat
…
CVE-2008-0320.doc
…
CVE-2008-5353.jar
…
CVE-2008-5499.swf
…
CVE-2009-3867.jar
…
CVE-2009-3869.jar
…
CVE-2010-0480.avi
…
CVE-2010-0822.xls
…
CVE-2010-1297.swf
…
CVE-2010-3275.amv
…
CVE-2010-3654.swf
…
CVE-2011-0105.xlb
…
CVE-2011-0257.mov
…
CVE-2011-0609.swf
…
CVE-2011-0611.swf
…
CVE-2011-2110.swf
…
CVE-2012-0507.jar
…
CVE-2012-0754.swf
…
CVE-2012-0779.swf
…
CVE-2012-1723.jar
…
CVE-2013-2171.bin
…
CVE-2013-6282.so
…
CVE-2014-0980.pui
…
CVE-2014-3153.so
…
evasion_shellcode.js
improve windows_defender_js_hta :
2018-10-11 17:38:47 +02:00
exec_payload.msi
…
google_proxystylesheet.xml
…
hta_evasion.hta
improve windows_defender_js_hta :
2018-10-11 17:38:47 +02:00
iceweasel_macosx.icns
…
iphone_libtiff.bin
…
modicon_ladder.apx
…
mp4player.as
…
mp4player.fla
…
mp4player.swf
…
msfJavaToolkit.jar
…
office_ole_multiple_dll_hijack.ppsx
…
pricedown.eot
…
QTJavaExploit.class
…
runcalc.hlp
…
s4u_persistence.xml
…
shockwave_rcsl.dir
…
word_msdtjs.docx
fix chmod 644
2022-05-30 22:11:35 +04:00