metasploit-gs

alpc_taskscheduler.md

Improve the list of potential processes to spawn and inject into to be more believable

2021-07-23 12:33:16 -05:00

anyconnect_lpe.md

Added CVE-2020-3433 module

2020-09-25 23:04:58 +02:00

appxsvc_hard_link_privesc.md

…

bits_ntlm_token_impersonation.md

Address Spencer's comments and remove changes that don't directly use the DLL injection library API change

2021-08-24 16:34:01 -05:00

bypassuac_comhijack.md

…

bypassuac_dotnet_profiler.md

…

bypassuac_fodhelper.md

…

bypassuac_injection_winsxs.md

…

bypassuac_sdclt.md

…

bypassuac_silentcleanup.md

…

bypassuac_sluihijack.md

…

bypassuac_windows_store_reg.md

…

canon_driver_privesc.md

Further fixes from review and further touch up edits

2021-08-09 14:23:05 -05:00

comahawk.md

…

cve_2017_8464_lnk_lpe.md

…

cve_2018_8453_win32k_priv_esc.md

…

cve_2019_1458_wizardopium.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_0668_service_tracing.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_0787_bits_arbitrary_file_move.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_0796_smbghost.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_1048_printerdemon.md

…

cve_2020_1054_drawiconex_lpe.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

cve_2020_1313_system_orchestrator.md

…

cve_2020_1337_printerdemon.md

Specify you must be SYSTEM for dll removal in docs and removed unused variable in the module

2021-01-12 11:45:53 -06:00

cve_2020_17136.md

Address Spencer's comments and remove changes that don't directly use the DLL injection library API change

2021-08-24 16:34:01 -05:00

cve_2021_21551_dbutil_memmove.md

Add targeting for Windows 10 v21H1

2021-05-18 12:56:02 -04:00

cve_2021_40449.md

Fix up changes from timwr's review so long

2021-11-09 10:36:50 -06:00

cve_2022_3699_lenovo_diagnostics_driver.md

Rubocop

2023-01-19 13:52:58 -05:00

cve_2022_21882_win32k.md

Writeup the module metadata and docs

2022-02-18 15:23:44 -05:00

cve_2022_21999_spoolfool_privesc.md

fix module name in output

2022-03-14 09:35:56 -05:00

cve_2022_26904_superprofile.md

Add in documentation and also update the module to handle NarratorQuickstart.exe which sometimes comes up and can lead to visual indicators

2022-03-28 17:53:53 -05:00

cve_2023_21768_afd_lpe.md

Add exploit for CVE-2023-21768

2023-03-27 20:08:22 +02:00

dnsadmin_serverlevelplugindll.md

…

docker_credential_wincred.md

…

druva_insync_insynccphwnet64_rcp_type_5_priv_esc.md

Use CVE-2020-5752 path traversal bypass for CVE-2019-3999

2020-12-10 12:14:47 +00:00

gog_galaxyclientservice_privesc.md

…

lexmark_driver_privesc.md

Add in driver installation instructions to documentation

2021-08-11 14:40:21 -05:00

microfocus_operations_privesc.md

fix typos and add default rport

2021-04-23 17:38:06 +07:00

mov_ss.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms10_092_schelevator.md

ms10_092_schelevator: Cleanup

2022-08-19 15:19:28 +10:00

ms16_014_wmi_recv_notif.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms16_016_webdav.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms16_075_reflection_juicy.md

…

ms16_075_reflection.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

ms16_reflection.md

…

ms18_8120_win32k_privesc.md

…

nscp_pe.md

intial commit

2021-06-09 15:10:03 +02:00

ntusermndragover.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

panda_psevents.md

…

payload_inject.md

Address Spencer's comments and remove changes that don't directly use the DLL injection library API change

2021-08-24 16:34:01 -05:00

persistence_image_exec_options.md

…

persistence_service.md

…

plantronics_hub_spokesupdateservice_privesc.md

…

ps_persist.md

…

ricoh_driver_privesc.md

…

service_permissions.md

Update the module docs with more details for the registry technique

2020-12-08 17:39:34 -05:00

srclient_dll_hijacking.md

Remove TODO comment, update documentaton to include WAIT_FOR_TIWORKER option.

2021-03-15 07:51:12 -04:00

tokenmagic.md

Update documentation where possible for changed exploits

2021-07-23 12:34:12 -05:00

unquoted_service_path.md

doc how to set permissions on service

2023-01-13 17:07:17 -05:00

webexec.md

…

windscribe_windscribeservice_priv_esc.md

…