Worawit Wang
|
83b3745050
|
Merge pull request #31 from zerosum0x0/ARMRT
fingerprint ARM WinRT
|
2018-03-30 06:47:58 +07:00 |
|
zerosum0x0
|
8576e0e798
|
fingerprint RT
|
2018-03-29 15:33:54 -06:00 |
|
Worawit Wang
|
b9409bf2b0
|
Merge pull request #25 from zerosum0x0/named_pipe_listing
Break out of named pipe search to send less packets
|
2018-01-30 20:59:05 +07:00 |
|
Worawit Wang
|
78662cd7e6
|
Merge pull request #24 from zerosum0x0/xpsp0sp1
Fix offsets on XP SP0 and SP1
|
2018-01-30 20:58:25 +07:00 |
|
zerosum0x0
|
11b44fe941
|
break out of named pipe search to send less packets
|
2018-01-30 00:32:51 -07:00 |
|
zerosum0x0
|
59de6a0e13
|
small typo in doc
|
2018-01-30 00:27:48 -07:00 |
|
zerosum0x0
|
42af710431
|
added additional 0 checks and struct notes
|
2018-01-29 23:54:47 -07:00 |
|
zerosum0x0
|
f611d0e5da
|
comment out service_exec
|
2018-01-29 22:36:36 -07:00 |
|
zerosum0x0
|
8bd6f3760f
|
test restricted SID values instead of group count
|
2018-01-29 22:34:40 -07:00 |
|
zerosum0x0
|
67b258e3b4
|
remove pyc again... needs a gitignore maybe
|
2018-01-29 18:55:22 -07:00 |
|
zerosum0x0
|
c915c66d79
|
more complex fix
|
2018-01-29 18:54:30 -07:00 |
|
zerosum0x0
|
434b7a3eb3
|
restore line starts
|
2018-01-29 18:38:22 -07:00 |
|
zerosum0x0
|
03e0fcc87b
|
remove .pyc file
|
2018-01-29 18:34:24 -07:00 |
|
zerosum0x0
|
078d156a0d
|
fix offsets on XP SP0 and SP1
|
2018-01-29 18:32:20 -07:00 |
|
worawit
|
20301cc5a9
|
more exploit explanation with comment
|
2017-07-25 22:45:38 +07:00 |
|
worawit
|
a7e9d3d44d
|
fix typo
|
2017-07-25 21:26:55 +07:00 |
|
worawit
|
5c2bcc0364
|
add trivial comment
|
2017-07-25 21:22:37 +07:00 |
|
Worawit Wang
|
a725492a5a
|
Merge pull request #9 from cclauss/patch-1
Old style exceptions --> new style exceptions
|
2017-07-19 22:19:22 +07:00 |
|
cclauss
|
d032c97b35
|
Old style exceptions --> new style exceptions
|
2017-07-19 17:00:14 +02:00 |
|
Worawit Wang
|
f4b6b5ae80
|
Merge pull request #8 from cclauss/patch-1
Old style exceptions --> new style exceptions
|
2017-07-19 20:46:23 +07:00 |
|
cclauss
|
5ea7281a63
|
Old style exceptions --> new style exceptions
|
2017-07-19 14:17:20 +02:00 |
|
cclauss
|
15b1a91b07
|
Old style exceptions --> new style exceptions
|
2017-07-19 14:12:33 +02:00 |
|
worawit
|
b670b0d583
|
update info for support version
|
2017-07-18 22:51:56 +07:00 |
|
worawit
|
2835b82f84
|
support Windows 2000
|
2017-07-18 22:47:35 +07:00 |
|
worawit
|
873c545368
|
allow to exploit windows 10 <1607
|
2017-07-18 22:46:45 +07:00 |
|
worawit
|
eafb47d715
|
allow no tested target
|
2017-07-18 06:35:15 +07:00 |
|
worawit
|
6f47613603
|
find named pipe if it is omitted
|
2017-07-16 22:50:44 +07:00 |
|
worawit
|
3a4b8183b3
|
allow no test targets
|
2017-07-16 21:12:31 +07:00 |
|
worawit
|
4f7b840caf
|
Update README.md
|
2017-07-16 21:09:42 +07:00 |
|
worawit
|
ba85dca89e
|
add support target XP/2003
|
2017-07-16 21:08:09 +07:00 |
|
worawit
|
395aff2bb2
|
add support Windows Server 2008
|
2017-07-15 21:16:04 +07:00 |
|
worawit
|
13ec945cde
|
prepare support more target
|
2017-07-15 20:03:07 +07:00 |
|
worawit
|
730e4e673a
|
Fix SMB signing error
|
2017-07-11 23:06:26 +07:00 |
|
worawit
|
abfa89dc31
|
Update README.md
|
2017-07-11 22:53:07 +07:00 |
|
worawit
|
2c39ef8c61
|
add smb_send_file() function
|
2017-07-11 22:49:00 +07:00 |
|
worawit
|
44d8dcccce
|
add checker.py script for finding accessible named pipe
|
2017-07-11 22:26:41 +07:00 |
|
worawit
|
af235b686e
|
add support Win8 x86
|
2017-07-11 15:48:06 +07:00 |
|
worawit
|
d787343067
|
fix fail to exploit Windows 2012 because of previous commit
|
2017-07-11 12:14:10 +07:00 |
|
worawit
|
ffef5e8163
|
support win7 32 bit target
|
2017-07-11 00:39:31 +07:00 |
|
worawit
|
a1fd34a1de
|
check KTHREAD.Queue before inserting APC
|
2017-07-10 10:17:15 +07:00 |
|
worawit
|
9dbe746860
|
Correct BUG.txt
|
2017-06-27 07:14:32 +07:00 |
|
worawit
|
1e4f55e5b5
|
fix misinformation and typo in BUG.txt
|
2017-06-26 23:39:48 +07:00 |
|
Worawit Wang
|
3e0c53279e
|
Update README.md
|
2017-06-26 06:39:04 +07:00 |
|
Worawit Wang
|
cd82be27e0
|
Update README.md
|
2017-06-25 23:50:56 +07:00 |
|
worawit
|
583871ecae
|
add poc to demonstrates large paged pool spraying method
|
2017-06-25 23:41:38 +07:00 |
|
worawit
|
acaa27cc80
|
typo and some comment
|
2017-06-22 22:16:20 +07:00 |
|
worawit
|
df6ff967cb
|
explain how to craft FEALIST for eternalblue exploit
|
2017-06-22 22:01:26 +07:00 |
|
Worawit Wang
|
667c57bd3d
|
Update README.md
|
2017-06-21 21:07:51 +07:00 |
|
worawit
|
5bb2cc075e
|
add exploit comment
|
2017-06-20 21:51:13 +07:00 |
|
worawit
|
6db1df8496
|
add comment on kshellcode about freeing corrupted buffer
|
2017-06-20 20:50:23 +07:00 |
|