jheysel-r7 05cbd1d9a3 Land #19593 Add exploit for CVE-2023-28324 (Unauthenticated RCE in Ivanti EPM) ...

This exploits an unauthenticated RCE in Ivanti's EPM where a .NET remoting client can invoke a method that results in an OS command being executed in the context of NT AUTHORITY\SYSTEM.

2024-11-20 11:18:58 -08:00

..

document_generator

Enhances info -d with references to AttackerKB

2023-02-03 10:15:55 +00:00

dot_net_deserialization

Add the BinaryArray record definition

2024-10-17 12:54:25 -04:00

java_deserialization

Refactor the BeanFactory gadget code

2022-01-12 16:58:31 -05:00

windows_registry

Code review

2024-04-26 18:47:42 +02:00

db_manager.rb

Group multi-column search conditions

2020-09-11 08:40:28 +02:00

document_generator.rb

Replace deprecated File.exists? with File.exist?

2023-03-05 14:30:47 +11:00

dot_net_deserialization.rb

Add a formatter_compatible_gadget_chains function

2023-03-23 17:28:58 -04:00

exe.rb

Msf::Util::EXE: Add support for RISC-V ELF executables

2024-10-15 22:51:36 +11:00

helper.rb

fixed some bugs

2017-07-17 10:10:12 +02:00

host.rb

Rename scope to zone_id

2022-03-15 11:14:41 -04:00

java_deserialization.rb

Fix file reads on Windows for binary files

2022-03-21 12:47:39 +00:00

payload_cached_size.rb

Fix crash when generating payload sizes

2022-11-04 02:10:58 +00:00

python_deserialization.rb

Add source code for Python deserialization gadgets

2024-03-29 09:33:47 -04:00

ruby_deserialization.rb

It made the gadgets being used more readable

2022-12-06 17:47:49 +01:00

service_helper.rb

Add Msf::Util::ServiceHelper class

2019-01-08 22:39:26 -05:00

windows_crypto_helpers.rb

Fixes incorrect usage of pack/unpack directives

2023-07-19 11:39:00 +01:00

windows_registry.rb

Add inline technique to dump SAM hashes, LSA secrets and cached hashes

2024-04-26 18:44:05 +02:00