31b4e72196
Switch to soft tabs the cs code
2013-11-23 23:06:52 -06:00
9f539bafae
Add README on the source code dir
2013-11-22 17:56:05 -06:00
25eb13cb3c
Small fix to interface
2013-11-22 17:02:08 -06:00
288a1080db
Add MS13-022 Silverlight app code
2013-11-22 16:53:06 -06:00
506a4d9e67
Remove genericity, x64 and renamed stuff
...
As per discussion on the github issue, the following changes were made:
* Project renamed from elevate to kitrap0d, implying that this is not
intended to be a generic local priv esc exploit container.
* Container DLL no longer generic, always calls the kitrap0d exploit.
* Removal of all x64 code and project configurations.
* Invocation of the exploit changed so that the address of the payload
is passed in to the exploit entry point. The exploit is now responsible
for executing the payload if the exploit is successful. This removes
the possibility of the payload getting executed when the exploit fails.
* Source moved to the appropriate CVE folder.
* Binary moved to the appropriate CVE folder.
* Little bit of source rejigging to tidy things up.
2013-11-14 12:22:53 +10:00
40f58ce534
Finalise the local exploit for kitrap0d
...
The exploit now properly injects the DLL using RDI and invokes the
exploit based on a parameter passed by the Ruby module. The elevate
code is 'generic' with a goal of possibly supporting more exploits
down the track.
New sessions are now created with the SYSTEM creds, rather than
modifying the existing session. This is now inline with how things
are done with other local modules.
2013-11-12 23:01:24 +10:00
6a25ba18be
Move kitrap0d exploit from getsystem to local exploit
...
This version modifies the existing meterpreter session and bumps the privs
up to SYSTEM. However it's not how local exploits are supposed to work.
More work will be done to make this create a new session with the elevated
privs instead.
2013-11-11 17:14:40 +10:00
795ad70eab
Change directory names
2013-08-15 22:52:42 -05:00
cc5804f5f3
Add Port for OSVDB 96277
2013-08-15 18:34:51 -05:00
c7361043ae
up to date
2013-07-17 11:47:06 -05:00
2634d33832
Forgot C changes
2013-07-06 09:30:09 +01:00
66c2b79177
Initial commit
2013-07-05 19:48:27 +01:00
a4d353fcb3
Clean a little more the VS project
2013-06-29 15:15:27 -05:00
de245113af
Wrap Reflective DLL Readme.md to 80 columns
2013-06-29 09:29:09 -05:00
6878534d4b
Clean Visual Studio Project
2013-06-29 09:20:40 -05:00
7725937461
Add Module for cve-2013-3660
2013-06-28 18:18:21 -05:00
3c1af8217b
Land #2011 , @matthiaskaiser's exploit for cve-2013-2460
2013-06-26 14:35:22 -05:00
b400c0fb8a
Delete project files
2013-06-25 12:58:39 -05:00
d25e1ba44e
Make fixes proposed by review and clean
2013-06-25 12:58:00 -05:00
b32513b1b8
Fix CVE-2013-2171 with @jlee-r7 feedback
2013-06-25 10:40:55 -05:00
74825af933
Add Makefile
2013-06-24 16:08:22 -05:00
6780566a54
Add CVE-2013-2171: FreeBSD 9 Address Space Manipulation Module
2013-06-24 11:50:21 -05:00
8a96b7f9f2
added Java7u21 RCE module
...
Click2Play bypass doesn't seem to work anymore.
2013-06-24 02:04:38 -04:00
7090d4609b
Add module for CVE-2013-1488
2013-06-07 13:38:41 -05:00
9fca89f70b
fix small issues
2013-04-20 01:43:14 -05:00
c225d8244e
Added module for CVE-2013-1493
2013-03-26 22:30:18 +01:00
f04df6300a
makefile updated
2013-02-21 13:44:37 +01:00
da9e58ef79
Added the java code to get the ser file
2013-02-20 18:14:24 +01:00
d88ad80116
Added first version of cve-2013-0431
2013-02-20 16:39:53 +01:00
ee2fed8335
Merge branch 'master' of https://github.com/booboule/metasploit-framework into booboule-master
2013-01-24 16:18:06 +01:00
afa32c7552
Update external/source/exploits/cve-2012-5076_2/Makefile
...
Wrong directory path
2013-01-23 20:18:24 +01:00
d2b75ad005
Update external/source/exploits/cve-2012-5088/Makefile
2013-01-23 12:42:33 +01:00
807bd6e88a
Merge branch 'java_jre17_glassfish_averagerangestatisticimpl' of https://github.com/jvazquez-r7/metasploit-framework into jvazquez-r7-java_jre17_glassfish_averagerangestatisticimpl
2013-01-22 15:33:39 +01:00
ef16a7fd24
cleanup
2013-01-17 21:45:13 +01:00
670b4e8e06
cleanup
2013-01-17 21:39:41 +01:00
78279a0397
Added new module for cve-2012-5076
2013-01-17 21:27:47 +01:00
d0b9808fc7
Added module for CVE-2012-5088
2013-01-17 21:14:49 +01:00
51f3f59d2f
cve and references available
2013-01-11 00:54:53 +01:00
e503d596ed
code indention for exploit.java fixed
2013-01-10 20:34:58 +01:00
876d889d82
added exploit for j7u10 0day
2013-01-10 20:30:43 +01:00
133ad04452
Cleanup of #1062
2012-12-07 11:55:48 +01:00
fd1557b6d2
Merge branch 'msi_elevated' of https://github.com/Meatballs1/metasploit-framework into Meatballs1-msi_elevated
2012-11-28 21:49:36 +01:00
bc9065ad42
Move MSI source and binary location
2012-11-27 18:12:49 +00:00
5076198ba2
fixing bperry comments
2012-11-11 20:18:19 +01:00
08cc6d56ec
updated java source
2012-11-11 20:11:33 +01:00
c07701f61e
Makefile updated
2012-11-11 17:44:27 +01:00
1528ccf423
added Makefile for java code
2012-11-11 17:43:57 +01:00
8619c5291b
Added module for CVE-2012-5076
2012-11-11 17:05:51 +01:00
d37b52c9d3
Update source information
2012-08-30 17:48:02 -05:00
363c0913ae
changed dir names according to CVE
2012-08-28 16:33:01 +02:00
jvazquez-r7
OJ
jvazquez-r7
Meatballs
sinn3r
Matthias Kaiser
booboule
sinn3r