Commit Graph

24924 Commits (06e1d16c60c88a96b9c8e523671166bd4a86fcd7)

Author SHA1 Message Date
Wei Chen a19046dedb
Land #10793, improve windows_defender_js_hta 2018-10-15 17:42:21 -05:00
Wei Chen 8e442cc980 Update documenation 2018-10-15 15:45:39 -05:00
Wei Chen b0313dd25c Update getgodm_http_response_bof for proper auto targets 2018-10-15 15:25:55 -05:00
Wei Chen ff9f3ed9ff Add support for v5 2018-10-15 15:14:12 -05:00
Wei Chen 5433d2cca9 Sync up upstream master 2018-10-15 14:19:07 -05:00
h00die 8877582086
Land #10668 rsh stack clash solaris priv esc 2018-10-14 10:34:48 -04:00
William Vu 5b14d94957
Land #10671, struts2_namespace_ognl updates
There are still some outstanding concerns, but I want to unblock this.
2018-10-12 11:08:33 -05:00
William Vu 2989507b85 Copy check for data_header to avoid crash
Variable was used but out of scope.
2018-10-12 11:06:26 -05:00
amaloteaux f8ad47d475 improve windows_defender_js_hta :
-add platform detection for jsc
-prevent cmd prompt when launching jsc
2018-10-11 17:38:47 +02:00
Patrick DeSantis c0aff8f134
Description update / typo fix
fix typo in module description (added one word)
2018-10-10 17:56:17 -04:00
Jacob Robles fb689da24c
Land #10335, Add vlc_mkv exploit module 2018-10-10 13:47:08 -05:00
Jacob Robles 50a7ee5e6a
Minor modifications 2018-10-10 12:22:47 -05:00
Jacob Robles 796579e265
Use fail_with 2018-10-10 11:24:16 -05:00
Jacob Robles 4beb434054
Default Payloads
exploit:vlc_mkv default target payloads
2018-10-10 11:23:17 -05:00
Brendan Coles 8826932f72 Fix syntax errors 2018-10-10 14:39:07 +00:00
Brendan Coles 15cfeb37ea CamelCase 2018-10-10 14:35:34 +00:00
Brendan Coles 7a048afd14 Make WritableDir an advanced option 2018-10-10 14:12:29 +00:00
Jeffrey Martin 6cdfbdd281
Land #10554, Rescue REX runtime errors in x86 encoders 2018-10-09 22:52:48 -05:00
Jacob Robles 1cb8418b2d
Filename options
exploit:vlc_mkv overwrite fileformat filename method
to supply options
2018-10-09 21:15:10 -05:00
Jacob Robles 94f260f289
exploit rand_text
exploit:vlc_mkv use rand_text functions defined in exploit.rb
2018-10-09 21:15:05 -05:00
Jacob Robles e07da5c518
EDB Ref Fix
exploit:vlc_mkv
2018-10-09 20:57:44 -05:00
Jacob Robles af594f6744
Merge in master 2018-10-09 12:56:31 -05:00
William Vu 9ec989a1bd Address @bcoles' review in #10672 2018-10-08 14:15:21 -05:00
Tod Beardsley 6e10718ed5
Format ZDI ref correctly. 2018-10-08 13:48:52 -05:00
Tod Beardsley f7d2815a01
Add a ZDI reference 2018-10-08 13:23:50 -05:00
Shelby Pace bed497c6ae
Land #10672, Add COMMGR Buffer Overflow module 2018-10-08 10:04:52 -05:00
Wei Chen 5951f5724e Pass msftidy 2018-10-06 16:04:07 -05:00
Wei Chen 7c1fbf2c5a Update description 2018-10-06 09:22:35 -05:00
Wei Chen a25a7086b2 Rename file 2018-10-06 09:20:15 -05:00
Wei Chen c7efd57144
Sync up with master 2018-10-06 08:27:01 -05:00
Brent Cook 3d507250b0
Land #9745, Update QNX iwatchd to use newer APIs 2018-10-06 05:06:42 -04:00
Brent Cook c9ebe5ae23
Land #9745, Add ifwatchd QNX privilege escalation exploit module 2018-10-06 05:03:50 -04:00
Brendan Coles 89b6aafd85 Use register_file_for_cleanup 2018-10-06 04:37:04 +00:00
Brent Cook e2f97c75a0
Land #10616, update Unitrends UEB module to support vulnerabilities in version 10 2018-10-05 16:20:38 -05:00
Brent Cook a51243ce91
Land #10745, Update lastore_daemon_dbus_priv_esc tested versions 2018-10-05 11:35:31 -04:00
William Vu 7bc98e0ea8 Fix formatting and convert a missed AKA reference 2018-10-05 03:22:08 -05:00
William Vu d9cb052189 Fix improper use of the Ruby shovel operator (<<)
junk would be modified and returned, and we just want to return the
concatenated string. Practically doesn't matter, but it's incorrect.

This was my first public module. I've been wanting to fix this since.
I'm noticing it again now as I look for how I used Ret in a target.
2018-10-05 02:18:06 -05:00
bwatters-r7 28fb27187a
Land #10418, Add DCOM/RPC NTLM Reflection (MS16-075) Via Reflective DLL
Merge branch 'land-10418' into upstream-master
2018-10-04 16:54:53 -05:00
bwatters-r7 9a45c66db4 Fixed check to you know, check. 2018-10-04 16:38:35 -05:00
Brendan Coles fe7ce02dfd Update tested versions 2018-10-04 21:13:21 +00:00
William Vu 9f30512532
Land #10707, module traits to augment module rank 2018-10-04 13:26:14 -05:00
Jacob Robles 071aa04111
Land #10738, Add Zahir Enterprise 6 build 10b BOF 2018-10-04 11:00:12 -05:00
Wei Chen fb60558777
Land #10712, Make exploit/linux/http/axis_srv_parhand_rce more stable 2018-10-04 10:10:28 -05:00
Jacob Robles 060c68d2e0
Aligment, minor modifications 2018-10-04 10:10:09 -05:00
Jacob Robles 8b955f8ec5
Land #10704, Navigate CMS Unauthenticated RCE 2018-10-04 06:44:21 -05:00
Brent Cook ff0ee51da1
Land #10686, ARGS, TIMEOUT, and output to upload_exec module
Merge remote-tracking branch 'upstream/pr/10686' into upstream-master
2018-10-04 04:28:02 -05:00
Thomas Gregory 144c76ecd4 Latest fix based on @jrobles-r7 recommendations
Fixing:
- MetasploitModule class changed
- Remove the word 'exploit' from name
- Remove StackAdjustment
- Remove Privileged option
- Remove make_nops(12)
- Remove extra buffer at the end of exploit
2018-10-04 16:18:02 +07:00
Thomas Gregory 991ac3c671 Fixing for msftidy
Fixing some format because still throw errors
2018-10-03 18:55:29 +07:00
Thomas Gregory cb5d68b641 Fixing based on msftidy.rb
Makes msftidy happy
2018-10-03 17:13:24 +07:00
William Vu e0a664c0cd Improve prints, use FileDropper, and bump TIMEOUT 2018-10-02 21:53:18 -05:00