adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
91633fdad7e9474debefbfd044d2b8bc7652deee
metasploit-gs/modules/exploits/linux/local
T
History
bcoles 338db0cabd Add RISC-V arch support to Linux local exploit modules 
Add ARCH_RISCV64LE and ARCH_RISCV32LE to the supported architecture
lists of 9 Linux local privilege escalation modules that use generic
EXE payload dropping and are not dependent on pre-compiled
architecture-specific exploit binaries.

This allows these modules to be used on RISC-V targets with the
existing RISC-V payload set.
2026-04-05 02:15:16 +11:00
..
abrt_raceabrt_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
abrt_sosreport_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
af_packet_chocobo_root_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
af_packet_packet_set_ring_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
ansible_node_deployer.rb
ansible review
2024-01-15 17:18:49 -05:00
apport_abrt_chroot_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
asan_suid_executable_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
blueman_set_dhcp_handler_dbus_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
bpf_priv_esc.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
bpf_sign_extension_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
cpi_runrshell_priv_esc.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
cve_2021_3493_overlayfs.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
cve_2021_4034_pwnkit_lpe_pkexec.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
cve_2021_38648_omigod.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
cve_2022_0847_dirtypipe.rb
modify docs to reflect changes, remove 'return'
2022-03-10 10:39:32 -06:00
cve_2022_0995_watch_queue.rb
Fix a typo when the kernel is not Ubuntu
2024-09-09 14:19:20 -04:00
cve_2022_1043_io_uring_priv_esc.rb
reduces code duplication
2023-04-04 10:27:11 +01:00
cve_2023_0386_overlayfs_priv_esc.rb
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
desktop_privilege_escalation.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
docker_cgroup_escape.rb
guard Rex::Version.new against crashes on local modules
2025-01-17 16:10:23 -05:00
docker_daemon_privilege_escalation.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
docker_privileged_container_escape.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
docker_privileged_container_kernel_escape.rb
Add support for redhat based containers
2024-05-01 13:30:16 -04:00
docker_runc_escape.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
exim4_deliver_message_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
f5_create_user.rb
Get rid of #String.hash in favour of UnixCrypt
2023-02-01 11:02:04 -08:00
gameoverlay_privesc.rb
Update payload name, fix payload escapes & quotation, add unix cmd support
2024-12-17 16:52:24 -06:00
glibc_ld_audit_dso_load_priv_esc.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
glibc_origin_expansion_priv_esc.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
glibc_realpath_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
glibc_tunables_priv_esc.rb
Add a way to get the buildid via perf
2023-12-29 17:24:27 +01:00
hp_smhstart.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
hp_xglance_priv_esc.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
igel_network_priv_esc.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
juju_run_agent_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kloxo_lxsuexec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
ktsuss_suid_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
lastore_daemon_dbus_priv_esc.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
libuser_roothelper_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
ndsudo_cve_2024_32019.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
nested_namespace_idmap_limit_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
netfilter_nft_set_elem_init_privesc.rb
Update ranking for nft_set_elem_init
2022-09-30 09:57:54 -05:00
netfilter_priv_esc_ipv4.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
netfilter_xtables_heap_oob_write_priv_esc.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
network_manager_vpnc_username_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ntfs3g_priv_esc.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
omniresolve_suid_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
overlayfs_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pihole_remove_commands_lpe.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
pkexec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
polkit_dbus_auth_bypass.rb
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command shell
2022-11-25 15:13:57 +11:00
progress_flowmon_sudo_privesc_2024.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
progress_kemp_loadmaster_sudo_privesc_2024.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
ptrace_sudo_token_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
ptrace_traceme_pkexec_helper.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
rds_atomic_free_op_null_pointer_deref_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
rds_rds_page_copy_user_priv_esc.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
recvmmsg_priv_esc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
reptile_rootkit_reptile_cmd_priv_esc.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
rootkit_privesc_signal_hunter.rb
Add Rootkit Privilege Escalation Signal Hunter
2025-10-31 17:22:19 +11:00
runc_cwd_priv_esc.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
saltstack_salt_minion_deployer.rb
salt review
2024-01-10 17:19:58 -05:00
servu_ftp_server_prepareinstallation_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
sock_sendpage.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
sophos_wpa_clear_keys.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
su_login.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
sudo_baron_samedit.rb
Run rubocop on exploit modules
2023-02-08 15:20:32 +00:00
sudo_chroot_cve_2025_32463.rb
Adds more comprehensive check, updates build instructions
2025-08-27 17:58:11 +02:00
sudoedit_bypass_priv_esc.rb
stronger grep
2023-05-16 16:18:14 -04:00
systemtap_modprobe_options_priv_esc.rb
Add RISC-V arch support to Linux local exploit modules
2026-04-05 02:15:16 +11:00
tomcat_rhel_based_temp_priv_esc.rb
review comment
2023-03-13 14:42:26 -04:00
tomcat_ubuntu_log_init_priv_esc.rb
wrap tomcat dpkg command and rex version
2025-01-22 17:06:48 -05:00
ubuntu_enlightenment_mount_priv_esc.rb
modules: Check datastore ForceExploit before checking if session is root
2023-02-02 18:17:02 +11:00
ubuntu_needrestart_lpe.rb
review of ubuntu_needrestart_lpe
2025-01-09 16:23:09 -05:00
udev_netlink.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
ueb_bpserverd_privesc.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ufo_privilege_escalation.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
vcenter_java_wrapper_vmon_priv_esc.rb
add EVENT_DEPENDENT to vcenter vmon priv esc
2024-04-22 15:12:27 -04:00
vcenter_sudo_lpe.rb
peer review
2024-12-04 18:39:43 -05:00
vmware_alsa_config.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
vmware_mount.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
vmware_workspace_one_access_certproxy_lpe.rb
tests passing
2023-04-04 10:24:09 +01:00
vmware_workspace_one_access_cve_2022_22960.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
vmwgfx_fd_priv_esc.rb
guard Rex::Version.new against crashes on local modules
2025-01-17 16:10:23 -05:00
zimbra_postfix_priv_esc.rb
Resolve feedback - get rid of unnecessary directory, add CVE number, let the user choose the path
2022-10-17 15:00:56 -07:00
zimbra_slapper_priv_esc.rb
Update zimbra_slapper_priv_esc.rb
2023-03-27 16:46:07 +01:00
zpanel_zsudo.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
zyxel_suid_cp_lpe.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00