Jack Heysel 27f5ad8e05 Land #18996, VSCode Malicious Ext module ...

This PR adds a new exploit that creates a malicious vsix file. a vsix
file is a VS and VSCode extension file. Once installed, the users
computer will call back with a shell. Its not a bug, its a feature!

2024-04-18 18:10:46 -07:00

..

adobe_u3d_meshcont.rb

Convert disclosure dates to iso8601

2020-10-02 21:00:37 +01:00

archive_tar_arb_file_write.rb

Add in missing RuboCop note sections

2022-04-19 16:40:57 -05:00

evince_cbt_cmd_injection.rb

Change default payload to reverse_bash

2019-02-03 06:18:31 +00:00

ghostscript_failed_restore.rb

tests passing

2023-04-04 10:24:09 +01:00

gitlens_local_config_exec.rb

remove default shells on gitlens module

2024-04-18 17:31:02 -04:00

js_unpacker_eval_injection.rb

Use zeitwerk for lib/msf/core folder

2020-12-07 10:31:45 +00:00

libreoffice_logo_exec.rb

remove PrependMigrate option

2019-08-19 13:12:54 -05:00

libreoffice_macro_exec.rb

Fix up last of the module that had incorrect disclosure dates

2020-10-07 12:09:35 -05:00

maple_maplet.rb

Convert disclosure dates to iso8601

2020-10-02 21:00:37 +01:00

nodejs_js_yaml_load_code_exec.rb

Convert disclosure dates to iso8601

2020-10-02 21:00:37 +01:00

office_word_macro.rb

Fix file reads on Windows for binary files

2022-03-21 12:47:39 +00:00

peazip_command_injection.rb

Convert disclosure dates to iso8601

2020-10-02 21:00:37 +01:00

swagger_param_inject.rb

fix URLs not resolving

2022-02-16 17:22:40 -06:00

visual_studio_vsix_exec.rb

vsix review

2024-04-17 16:13:44 -04:00

zip_slip.rb

Convert disclosure dates to iso8601

2020-10-02 21:00:37 +01:00