metasploit-gs

alpc_taskscheduler.md

Improve the list of potential processes to spawn and inject into to be more believable

2021-07-23 12:33:16 -05:00

anyconnect_lpe.md

Added CVE-2020-3433 module

2020-09-25 23:04:58 +02:00

appxsvc_hard_link_privesc.md

…

bits_ntlm_token_impersonation.md

Address Spencer's comments and remove changes that don't directly use the DLL injection library API change

2021-08-24 16:34:01 -05:00

bypassuac_comhijack.md

…

bypassuac_dotnet_profiler.md

…

bypassuac_fodhelper.md

…

bypassuac_injection_winsxs.md

…

bypassuac_sdclt.md

…

bypassuac_silentcleanup.md

…

bypassuac_sluihijack.md

…

bypassuac_windows_store_reg.md

…

canon_driver_privesc.md

Further fixes from review and further touch up edits

2021-08-09 14:23:05 -05:00

comahawk.md

…

cve_2017_8464_lnk_lpe.md

…

cve_2018_8453_win32k_priv_esc.md

remove changes to other files

2020-04-30 17:19:54 +08:00

cve_2019_1458_wizardopium.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_0668_service_tracing.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

cve_2020_0787_bits_arbitrary_file_move.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_0796_smbghost.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_1048_printerdemon.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

cve_2020_1054_drawiconex_lpe.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_1313_system_orchestrator.md

remove stray backtick

2020-09-25 16:04:46 -05:00

cve_2020_1337_printerdemon.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

cve_2020_17136.md

Address Spencer's comments and remove changes that don't directly use the DLL injection library API change

2021-08-24 16:34:01 -05:00

cve_2021_21551_dbutil_memmove.md

Add targeting for Windows 10 v21H1

2021-05-18 12:56:02 -04:00

cve_2021_40449.md

Fix up changes from timwr's review so long

2021-11-09 10:36:50 -06:00

cve_2022_3699_lenovo_diagnostics_driver.md

Rubocop

2023-01-19 13:52:58 -05:00

cve_2022_21882_win32k.md

Writeup the module metadata and docs

2022-02-18 15:23:44 -05:00

cve_2022_21999_spoolfool_privesc.md

fix module name in output

2022-03-14 09:35:56 -05:00

cve_2022_26904_superprofile.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

cve_2023_21768_afd_lpe.md

Add exploit for CVE-2023-21768

2023-03-27 20:08:22 +02:00

cve_2023_28252_clfs_driver.md

Update documentation/modules/exploit/windows/local/cve_2023_28252_clfs_driver.md

2023-08-30 12:11:37 -04:00

cve_2024_30088_authz_basep.md

Removed memory polling

2024-08-30 12:52:18 -07:00

cve_2024_35250_ks_driver.md

Updated docs and check

2024-11-06 09:13:51 -08:00

dnsadmin_serverlevelplugindll.md

Update module documentation with more detail r.e affected versions and the fact that the use of UNC paths could cause an issue if they are not typed in correctly. Also update the module documentation to use the output from recent tests to reflect recent changes. Shortern the module description and update its stability rating. Finally add in a reliability rating for the exploit module.

2020-09-10 11:32:45 -05:00

docker_credential_wincred.md

…

druva_insync_insynccphwnet64_rcp_type_5_priv_esc.md

Use CVE-2020-5752 path traversal bypass for CVE-2019-3999

2020-12-10 12:14:47 +00:00

gog_galaxyclientservice_privesc.md

modify docs for new output

2020-06-15 08:42:27 -05:00

lexmark_driver_privesc.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

microfocus_operations_privesc.md

fix typos and add default rport

2021-04-23 17:38:06 +07:00

mov_ss.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms10_092_schelevator.md

ms10_092_schelevator: Cleanup

2022-08-19 15:19:28 +10:00

ms16_014_wmi_recv_notif.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms16_016_webdav.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms16_075_reflection_juicy.md

…

ms16_075_reflection.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

ms16_reflection.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

ms18_8120_win32k_privesc.md

…

nscp_pe.md

intial commit

2021-06-09 15:10:03 +02:00

ntusermndragover.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

panda_psevents.md

…

payload_inject.md

Address Spencer's comments and remove changes that don't directly use the DLL injection library API change

2021-08-24 16:34:01 -05:00

persistence_image_exec_options.md

…

persistence_service.md

…

plantronics_hub_spokesupdateservice_privesc.md

…

ps_persist.md

…

ricoh_driver_privesc.md

…

service_permissions.md

Update the module docs with more details for the registry technique

2020-12-08 17:39:34 -05:00

srclient_dll_hijacking.md

Remove TODO comment, update documentaton to include WAIT_FOR_TIWORKER option.

2021-03-15 07:51:12 -04:00

tokenmagic.md

chore: remove repetitive words

2024-04-15 11:06:50 +08:00

unquoted_service_path.md

doc how to set permissions on service

2023-01-13 17:07:17 -05:00

webexec.md

…

win_error_cve_2023_36874.md

Update documentation - Options section

2023-09-27 15:17:04 +02:00

windscribe_windscribeservice_priv_esc.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00