Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add module: Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386 #19441

Open
wants to merge 26 commits into
base: master
Choose a base branch
from
Open

Add module: Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386 #19441

wants to merge 26 commits into from
+526 −0

Commits on Sep 5, 2024

  1. Add module: 

    Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386
    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    3d20dd6 View commit details
    Browse the repository at this point in the history

  2. Add last blank line

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    216590f View commit details
    Browse the repository at this point in the history

  3. Strip comments

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    afb8c6c View commit details
    Browse the repository at this point in the history

  4. Make timeout user configurable

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    dc81711 View commit details
    Browse the repository at this point in the history

  5. Update modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb 

    use linux/x64/meterpreter_reverse_tcp

Co-authored-by: Brendan <bwatters@rapid7.com>
    @Takahiro-Yoko @bwatters-r7
    Takahiro-Yoko and bwatters-r7 committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    b243b86 View commit details
    Browse the repository at this point in the history

Commits on Sep 6, 2024

  1. Exploit dir existing check

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    920ef70 View commit details
    Browse the repository at this point in the history

  2. Use mkdir function

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    1cc562c View commit details
    Browse the repository at this point in the history

  3. Move C code to separate file

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    cd97b08 View commit details
    Browse the repository at this point in the history

  4. Update modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb 

    Use kernel_version.btween

Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
    @Takahiro-Yoko @jvoisin
    Takahiro-Yoko and jvoisin committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    7a921bb View commit details
    Browse the repository at this point in the history

  5. Update external/source/exploits/CVE-2023-0386/exploit.c 

    Avoid recursively delete files indiscriminate.

Co-authored-by: bcoles <bcoles@gmail.com>
    @Takahiro-Yoko @bcoles
    Takahiro-Yoko and bcoles committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    ccc4727 View commit details
    Browse the repository at this point in the history

  6. Fix typo

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    d4ac300 View commit details
    Browse the repository at this point in the history

  7. Remove unnecessary check

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    a40fbb2 View commit details
    Browse the repository at this point in the history

  8. Remove unnecessary directory existing check

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    b34e807 View commit details
    Browse the repository at this point in the history

  9. Update pre-compiled binary

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    72a9164 View commit details
    Browse the repository at this point in the history

  10. Strip_comments

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    fd7321d View commit details
    Browse the repository at this point in the history

Commits on Sep 7, 2024

  1. Use exploit_path variable

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    9e832eb View commit details
    Browse the repository at this point in the history

  2. Formatting

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    731780c View commit details
    Browse the repository at this point in the history

  3. Rename exploit

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    2b63f8b View commit details
    Browse the repository at this point in the history

  4. Call payload directory

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    692531b View commit details
    Browse the repository at this point in the history

  5. Not call payload directory

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    8366252 View commit details
    Browse the repository at this point in the history

  6. Add last blank line

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    212c96d View commit details
    Browse the repository at this point in the history

  7. Remove options

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    8ddf8a0 View commit details
    Browse the repository at this point in the history

Commits on Sep 8, 2024

  1. Remove unused variables

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 8, 2024
    Configuration menu
    Copy the full SHA
    dd93284 View commit details
    Browse the repository at this point in the history

  2. Update doc

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 8, 2024
    Configuration menu
    Copy the full SHA
    b8f1bc3 View commit details
    Browse the repository at this point in the history

Commits on Sep 9, 2024

  1. Update doc

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 9, 2024
    Configuration menu
    Copy the full SHA
    6b64640 View commit details
    Browse the repository at this point in the history

Commits on Sep 15, 2024

  1. Remove unnecessary strip_comments

    @Takahiro-Yoko
    Takahiro-Yoko committed Sep 15, 2024
    Configuration menu
    Copy the full SHA
    30704c4 View commit details
    Browse the repository at this point in the history