master
add a makefile so i don't forget how to compile this stuff
Minor fixes
compile java applet with 1.3, Fixes #685
add exploit module for cve-2009-3869 NOTE: no policy change is required for this exploit to succeed.
add an exploit module for cve-2010-0094, thanks Matthias Kaiser.
Quick fix to x64 kitrap0d project
add source code for cve-2010-0840
Added CVE-2010-0842
add an exploit for cve-2010-3563, thanks Matthias Kaiser
made the shellcode request random to avoid signatures
added adobe flashplayer array indexing exploit (CVE-2011-2110)
The more description the better
Add checks for data being null, too, just in case
Add CVE-2012-0754 .as source
changes on openfire_auth_bypass
Improve CVE-2012-1535
Last touch-up
Update source information
Beautify and fix both ruby an AS
Fix CVE-2013-2171 with @jlee-r7 feedback
Fix the makefile to use the right directory
Add module for CVE-2013-5331
fix double \n in printf
Add module for CVE-2014-0322
Add module for CVE-2014-0497
Delete debug
Update AS code
Really fix indentation
fork early and use WfsDelay
Change paths, add makefile and compile
Make last code cleanup
Update AS source code
Fix indentation
Update Main.as
Add support for Windows 8.1/Firefox
Fix exploit indentation
revamped
Add exploit source
Fix one more line indentation
Add module for CVE-2015-3113
Add build comment
Add support for Windows 10(10240) to CVE-2015-5122
Add Jenkins CLI Java serialization exploit module
moved c code to external sources
We don't need the application.c file
add find_memcmp() offsets
remove debug logging from the kernel exploit
fix build when missing IOKit headers
Get everything together finally (still needs cleanup)
fix forking
move offsets to hash
removed original binary, added source
Inject Payload to Memory First
Add cve-2018-8453 exploit module
Recompile DLL and alter vcxproj file to automatically place generated DLL in right folder
move source to external/source directory
Randomize container name
CVE-2019-1458 chrome sandbox escape initial commit
Initial commit of CVE-2019-2215 Android Binder Use-After-Free
Last additions and improvements
fix cleanup
Add CVE-2019-8565 OSX Feedback Assistant local root exploit
Recompile everything so we don't have the messagebox calls
Couple of minor cleanups for the assembly stub
Rubocop on module and update error handling on exploit C code + recompile
add offsets
Rubocop, fix check method, clean up c code
Make second round of review edits to fix Spencer's comments
use 2021 helper name in objective-c code too
Add source code for generating emp.ser
getroot -> make writable
remove CMakeLists.txt
Add targeting for Windows 10 v21H1
Updates docs to reflect new default prompt
Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match
Updated exploit to compile on target, added control over directory creation Added a method to get source code for the write and compile method
Make adjustments to dllmain.c from reviews and recompile the DLL again
Authors cleanup
updates to module
Address comments from the review
One exploit for CVE-2021-1732 and CVE-2022-21882
Update LICENSE file and location of source file
Remove x86 things, include AutoCheck
Update data to fix more things found during review process
Add MAX_TRIES option, address the feedback of bwatters-r7
Removed 22621
Add CVE-2022-46689 macOS dirty cow
Update exploit binary and remove unnecessary
Remove encoding issue in source file
Responded to comments, improved stability
Add error checking and randomize the report directory
Rebase and squash for CVE-2024-30085
Removed memory polling
Removed unnecessary code from exploit.cpp
Land #3403 - MS13-097 Registry Symlink IE Sandbox Escape
Added batik svg java module
remove some dead code paths
Add bypassuac_injection_winsxs.rb module
Move execute_payload to the kernel lib
enable java payloads, currently via one-off method
fixing bperry comments
Update external/source/exploits/cve-2012-5076_2/Makefile
Update external/source/exploits/cve-2012-5088/Makefile
Switch to soft tabs the cs code
Add make script for nvidia nvsvc
cve and references available
makefile updated
Address OJ's comments
Add module for CVE-2013-1488
Added module for CVE-2013-1493
Delete project files
Merge remote-tracking branch 'upstream/master' into submodule
Upgrade toolchain to Visual Studio 2013 v120.
Use PDWORD_PTR and DWORD_PTR
Replace external source
Support older targets x86 for MS15-051
refactor ms16-016 code
add exploit for cve-2016-0189
Refactor GetProcessSid to remove do while FALSE
Update mov_ss and add mov_ss_dll
Semicolon....
Pulled offsets out of dll into module. Auto-find lsass.exe when pid is 0
Fixing a little error.
Move MSI source and binary location
fix small issues
chore: update juicy potato reflective DLL source to latest
Not needed anymore
Support OS X for Microsoft Office macro exploit
Adjust files to be better shared
Recompile binaries and prep for VS2013 compiles
Cleanup of #1062
Move tpwn source to external/source/exploits
Add a Windows LPE exploit template for x64/x86
Add LPE exploit module for the capcom driver flaw