|
89286 | 89286 | "needs_cleanup": true, |
89287 | 89287 | "actions": [] |
89288 | 89288 | }, |
89289 | | - "exploit_linux/local/cron_persistence": { |
89290 | | - "name": "Cron Persistence", |
89291 | | - "fullname": "exploit/linux/local/cron_persistence", |
89292 | | - "aliases": [], |
89293 | | - "rank": 600, |
89294 | | - "disclosure_date": "1979-07-01", |
89295 | | - "type": "exploit", |
89296 | | - "author": [ |
89297 | | - |
89298 | | - ], |
89299 | | - "description": "This module will create a cron or crontab entry to execute a payload.\n The module includes the ability to automatically clean up those entries to prevent multiple executions.\n syslog will get a copy of the cron entry.", |
89300 | | - "references": [], |
89301 | | - "platform": "Linux,Unix", |
89302 | | - "arch": "cmd", |
89303 | | - "rport": null, |
89304 | | - "autofilter_ports": [], |
89305 | | - "autofilter_services": [], |
89306 | | - "targets": [ |
89307 | | - "Cron", |
89308 | | - "User Crontab", |
89309 | | - "System Crontab" |
89310 | | - ], |
89311 | | - "mod_time": "2025-06-23 12:43:46 +0000", |
89312 | | - "path": "/modules/exploits/linux/local/cron_persistence.rb", |
89313 | | - "is_install_path": true, |
89314 | | - "ref_name": "linux/local/cron_persistence", |
89315 | | - "check": false, |
89316 | | - "post_auth": false, |
89317 | | - "default_credential": false, |
89318 | | - "notes": { |
89319 | | - "Reliability": [ |
89320 | | - "unknown-reliability" |
89321 | | - ], |
89322 | | - "Stability": [ |
89323 | | - "unknown-stability" |
89324 | | - ], |
89325 | | - "SideEffects": [ |
89326 | | - "unknown-side-effects" |
89327 | | - ] |
89328 | | - }, |
89329 | | - "session_types": [], |
89330 | | - "needs_cleanup": true, |
89331 | | - "actions": [] |
89332 | | - }, |
89333 | 89289 | "exploit_linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe": { |
89334 | 89290 | "name": "Linux eBPF ALU32 32-bit Invalid Bounds Tracking LPE", |
89335 | 89291 | "fullname": "exploit/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe", |
@@ -125430,6 +125386,60 @@ |
125430 | 125386 | "needs_cleanup": true, |
125431 | 125387 | "actions": [] |
125432 | 125388 | }, |
| 125389 | + "exploit_multi/persistence/cron": { |
| 125390 | + "name": "Cron Persistence", |
| 125391 | + "fullname": "exploit/multi/persistence/cron", |
| 125392 | + "aliases": [ |
| 125393 | + "exploits/linux/local/cron_persistence" |
| 125394 | + ], |
| 125395 | + "rank": 600, |
| 125396 | + "disclosure_date": "1979-07-01", |
| 125397 | + "type": "exploit", |
| 125398 | + "author": [ |
| 125399 | + |
| 125400 | + ], |
| 125401 | + "description": "This module will create a cron or crontab entry to execute a payload.\n The module includes the ability to automatically clean up those entries to prevent multiple executions.\n syslog will get a copy of the cron entry.\n Verified on Ubuntu 22.04.1, MacOS 13.7.4", |
| 125402 | + "references": [ |
| 125403 | + "ATT&CK-T1053.003" |
| 125404 | + ], |
| 125405 | + "platform": "Linux,OSX,Unix", |
| 125406 | + "arch": "cmd, x86, x64, armle, aarch64, ppc, mipsle, mipsbe", |
| 125407 | + "rport": null, |
| 125408 | + "autofilter_ports": [], |
| 125409 | + "autofilter_services": [], |
| 125410 | + "targets": [ |
| 125411 | + "Cron", |
| 125412 | + "User Crontab", |
| 125413 | + "OSX User Crontab", |
| 125414 | + "System Crontab" |
| 125415 | + ], |
| 125416 | + "mod_time": "2025-09-18 11:48:17 +0000", |
| 125417 | + "path": "/modules/exploits/multi/persistence/cron.rb", |
| 125418 | + "is_install_path": true, |
| 125419 | + "ref_name": "multi/persistence/cron", |
| 125420 | + "check": true, |
| 125421 | + "post_auth": false, |
| 125422 | + "default_credential": false, |
| 125423 | + "notes": { |
| 125424 | + "Stability": [ |
| 125425 | + "crash-safe" |
| 125426 | + ], |
| 125427 | + "Reliability": [ |
| 125428 | + "repeatable-session", |
| 125429 | + "event-dependent" |
| 125430 | + ], |
| 125431 | + "SideEffects": [ |
| 125432 | + "artifacts-on-disk", |
| 125433 | + "config-changes" |
| 125434 | + ] |
| 125435 | + }, |
| 125436 | + "session_types": [ |
| 125437 | + "shell", |
| 125438 | + "meterpreter" |
| 125439 | + ], |
| 125440 | + "needs_cleanup": true, |
| 125441 | + "actions": [] |
| 125442 | + }, |
125433 | 125443 | "exploit_multi/persistence/obsidian_plugin": { |
125434 | 125444 | "name": "Obsidian Plugin Persistence", |
125435 | 125445 | "fullname": "exploit/multi/persistence/obsidian_plugin", |
|
0 commit comments