Jack Heysel 80ee458410 Land #19151, Add Flowmon Priv Esc Feature Module ...

Privilege escalation module for Progress Flowmon unpatched feature

2024-05-29 11:35:53 -04:00

..

abrt_raceabrt_priv_esc.rb

…

abrt_sosreport_priv_esc.rb

…

af_packet_chocobo_root_priv_esc.rb

…

af_packet_packet_set_ring_priv_esc.rb

…

ansible_node_deployer.rb

ansible review

2024-01-15 17:18:49 -05:00

apport_abrt_chroot_priv_esc.rb

…

apt_package_manager_persistence.rb

…

asan_suid_executable_priv_esc.rb

Removed default empty string for SUID_EXECUTABLE

2024-01-23 14:21:58 -05:00

autostart_persistence.rb

…

bash_profile_persistence.rb

…

blueman_set_dhcp_handler_dbus_priv_esc.rb

…

bpf_priv_esc.rb

…

bpf_sign_extension_priv_esc.rb

…

cpi_runrshell_priv_esc.rb

…

cron_persistence.rb

…

cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb

…

cve_2021_3493_overlayfs.rb

…

cve_2021_4034_pwnkit_lpe_pkexec.rb

…

cve_2021_38648_omigod.rb

…

cve_2022_0847_dirtypipe.rb

…

cve_2022_0995_watch_queue.rb

…

cve_2022_1043_io_uring_priv_esc.rb

…

desktop_privilege_escalation.rb

…

diamorphine_rootkit_signal_priv_esc.rb

…

docker_cgroup_escape.rb

review comments, adding new payloads

2023-12-01 16:06:48 -05:00

docker_daemon_privilege_escalation.rb

…

docker_privileged_container_escape.rb

…

docker_privileged_container_kernel_escape.rb

Add support for redhat based containers

2024-05-01 13:30:16 -04:00

docker_runc_escape.rb

…

exim4_deliver_message_priv_esc.rb

…

f5_create_user.rb

…

glibc_ld_audit_dso_load_priv_esc.rb

…

glibc_origin_expansion_priv_esc.rb

…

glibc_realpath_priv_esc.rb

…

glibc_tunables_priv_esc.rb

Add a way to get the buildid via perf

2023-12-29 17:24:27 +01:00

hp_smhstart.rb

…

hp_xglance_priv_esc.rb

…

juju_run_agent_priv_esc.rb

…

kloxo_lxsuexec.rb

…

ktsuss_suid_priv_esc.rb

…

lastore_daemon_dbus_priv_esc.rb

…

libuser_roothelper_priv_esc.rb

…

nested_namespace_idmap_limit_priv_esc.rb

…

netfilter_nft_set_elem_init_privesc.rb

…

netfilter_priv_esc_ipv4.rb

…

netfilter_xtables_heap_oob_write_priv_esc.rb

…

network_manager_vpnc_username_priv_esc.rb

…

ntfs3g_priv_esc.rb

…

omniresolve_suid_priv_esc.rb

…

overlayfs_priv_esc.rb

…

pihole_remove_commands_lpe.rb

…

pkexec.rb

…

polkit_dbus_auth_bypass.rb

…

progress_flowmon_sudo_privesc_2024.rb

Fix module cleanup

2024-05-29 08:39:06 -04:00

progress_kemp_loadmaster_sudo_privesc_2024.rb

Update debug statements and add protection against bad die name

2024-05-10 08:54:23 -05:00

ptrace_sudo_token_priv_esc.rb

…

ptrace_traceme_pkexec_helper.rb

…

rc_local_persistence.rb

…

rds_atomic_free_op_null_pointer_deref_priv_esc.rb

…

rds_rds_page_copy_user_priv_esc.rb

…

recvmmsg_priv_esc.rb

…

reptile_rootkit_reptile_cmd_priv_esc.rb

…

runc_cwd_priv_esc.rb

Merge branch 'runc_priv_esc' of github.com:SickMcNugget/metasploit-framework into runc_priv_esc

2024-03-11 22:23:55 +08:00

saltstack_salt_minion_deployer.rb

salt review

2024-01-10 17:19:58 -05:00

service_persistence.rb

Fix option collision in service_persistence

2024-02-03 23:18:45 +08:00

servu_ftp_server_prepareinstallation_priv_esc.rb

…

sock_sendpage.rb

…

sophos_wpa_clear_keys.rb

…

su_login.rb

…

sudo_baron_samedit.rb

…

sudoedit_bypass_priv_esc.rb

…

systemtap_modprobe_options_priv_esc.rb

…

tomcat_rhel_based_temp_priv_esc.rb

…

tomcat_ubuntu_log_init_priv_esc.rb

…

ubuntu_enlightenment_mount_priv_esc.rb

…

udev_netlink.rb

…

ueb_bpserverd_privesc.rb

…

ufo_privilege_escalation.rb

…

vcenter_java_wrapper_vmon_priv_esc.rb

add EVENT_DEPENDENT to vcenter vmon priv esc

2024-04-22 15:12:27 -04:00

vmware_alsa_config.rb

…

vmware_mount.rb

…

vmware_workspace_one_access_certproxy_lpe.rb

…

vmware_workspace_one_access_cve_2022_22960.rb

…

vmwgfx_fd_priv_esc.rb

…

yum_package_manager_persistence.rb

…

zimbra_postfix_priv_esc.rb

…

zimbra_slapper_priv_esc.rb

…

zpanel_zsudo.rb

…

zyxel_suid_cp_lpe.rb

…