Grant Willcox 78d4ac8592 Update module reliability and also fix issues from bcoles's review

2022-04-20 19:04:27 -05:00

..

abrt_raceabrt_priv_esc.md

…

abrt_sosreport_priv_esc.md

…

af_packet_chocobo_root_priv_esc.md

…

af_packet_packet_set_ring_priv_esc.md

…

apport_abrt_chroot_priv_esc.md

…

apt_package_manager_persistence.md

…

autostart_persistence.md

…

bash_profile_persistence.md

…

blueman_set_dhcp_handler_dbus_priv_esc.md

…

bpf_priv_esc.md

…

bpf_sign_extension_priv_esc.md

…

cpi_runrshell_priv_esc.md

…

cron_persistence.md

…

cve_2021_3490_ebpf_alu32_bounds_check_lpe.md

Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match

2021-08-31 15:07:37 -05:00

cve_2021_3493_overlayfs.md

Update documentation for multiple binaries, add targeting data,

2021-12-02 09:57:48 -06:00

cve_2021_4034_pwnkit_lpe_pkexec.md

Fix typo in document of cve_2021_4034

2022-03-05 23:58:31 +08:00

cve_2021_38648_omigod.md

Add documentation for CVE-2021-38648

2021-10-27 12:06:01 -04:00

cve_2022_0847_dirtypipe.md

modify docs to reflect changes, remove 'return'

2022-03-10 10:39:32 -06:00

cve_2022_0995_watch_queue.md

Update module reliability and also fix issues from bcoles's review

2022-04-20 19:04:27 -05:00

diamorphine_rootkit_signal_priv_esc.md

…

docker_priviledged_container_escape.md

…

docker_runc_escape.md

Update from code review

2021-06-30 11:02:11 +02:00

exim4_deliver_message_priv_esc.md

…

glibc_ld_audit_dso_load_priv_esc.md

…

glibc_origin_expansion_priv_esc.md

…

glibc_realpath_priv_esc.md

…

hp_xglance_priv_esc.md

…

juju_run_agent_priv_esc.md

…

ktsuss_suid_priv_esc.md

…

lastore_daemon_dbus_priv_esc.md

…

libuser_roothelper_priv_esc.md

…

nested_namespace_idmap_limit_priv_esc.md

…

netfilter_priv_esc_ipv4.md

…

netfilter_xtables_heap_oob_write_priv_esc.md

Add PoC for CVE-2021-22555 Netfilter Priv Escalation

2021-10-04 16:48:23 +01:00

network_manager_vpnc_username_priv_esc.md

…

ntfs3g_priv_esc.md

…

omniresolve_suid_priv_esc.md

…

overlayfs_priv_esc.md

…

pihole_remove_commands_lpe.md

fix typos, pihole version in docs

2021-07-29 11:13:58 -05:00

polkit_dbus_auth_bypass.md

Update some typos in the documentation and also update the exploit module to handle various cases whereby the dbus-send command might end up timing out due to TIMEOUT being too low and to fix some final issues found during testing

2021-07-08 16:24:01 -05:00

ptrace_sudo_token_priv_esc.md

…

ptrace_traceme_pkexec_helper.md

…

rc_local_persistence.md

…

rds_atomic_free_op_null_pointer_deref_priv_esc.md

…

rds_rds_page_copy_user_priv_esc.md

…

recvmmsg_priv_esc.md

…

reptile_rootkit_reptile_cmd_priv_esc.md

…

service_persistence.md

…

servu_ftp_server_prepareinstallation_priv_esc.md

…

sock_sendpage.md

…

su_login.md

Added python alternative and check function

2020-10-09 03:58:55 -04:00

sudo_baron_samedit.md

Reorder the Fedora targets to be descending

2021-05-18 18:02:12 -04:00

systemtap_modprobe_options_priv_esc.md

…

ueb_bpserverd_privesc.md

…

ufo_privilege_escalation.md

…

vmware_alsa_config.md

…

yum_package_manager_persistence.md

…