|
90859 | 90859 | "needs_cleanup": true, |
90860 | 90860 | "actions": [] |
90861 | 90861 | }, |
90862 | | - "exploit_linux/local/motd_persistence": { |
90863 | | - "name": "update-motd.d Persistence", |
90864 | | - "fullname": "exploit/linux/local/motd_persistence", |
90865 | | - "aliases": [], |
90866 | | - "rank": 300, |
90867 | | - "disclosure_date": "1999-01-01", |
90868 | | - "type": "exploit", |
90869 | | - "author": [ |
90870 | | - "Julien Voisin" |
90871 | | - ], |
90872 | | - "description": "This module will add a script in /etc/update-motd.d/ in order to persist a payload.\n The payload will be executed with root privileges everytime a user logs in.", |
90873 | | - "references": [ |
90874 | | - "URL-https://manpages.ubuntu.com/manpages/oracular/en/man5/update-motd.5.html" |
90875 | | - ], |
90876 | | - "platform": "Linux,Unix", |
90877 | | - "arch": "cmd", |
90878 | | - "rport": null, |
90879 | | - "autofilter_ports": [], |
90880 | | - "autofilter_services": [], |
90881 | | - "targets": [ |
90882 | | - "Automatic" |
90883 | | - ], |
90884 | | - "mod_time": "2024-09-11 13:30:09 +0000", |
90885 | | - "path": "/modules/exploits/linux/local/motd_persistence.rb", |
90886 | | - "is_install_path": true, |
90887 | | - "ref_name": "linux/local/motd_persistence", |
90888 | | - "check": false, |
90889 | | - "post_auth": false, |
90890 | | - "default_credential": false, |
90891 | | - "notes": { |
90892 | | - "Stability": [], |
90893 | | - "Reliability": [ |
90894 | | - "event-dependent" |
90895 | | - ], |
90896 | | - "SideEffects": [ |
90897 | | - "artifacts-on-disk" |
90898 | | - ] |
90899 | | - }, |
90900 | | - "session_types": [ |
90901 | | - "shell", |
90902 | | - "meterpreter" |
90903 | | - ], |
90904 | | - "needs_cleanup": null, |
90905 | | - "actions": [] |
90906 | | - }, |
90907 | 90862 | "exploit_linux/local/ndsudo_cve_2024_32019": { |
90908 | 90863 | "name": "Netdata ndsudo privilege escalation", |
90909 | 90864 | "fullname": "exploit/linux/local/ndsudo_cve_2024_32019", |
|
96027 | 95982 | "needs_cleanup": null, |
96028 | 95983 | "actions": [] |
96029 | 95984 | }, |
| 95985 | + "exploit_linux/persistence/motd": { |
| 95986 | + "name": "update-motd.d Persistence", |
| 95987 | + "fullname": "exploit/linux/persistence/motd", |
| 95988 | + "aliases": [ |
| 95989 | + "exploits/linux/local/motd_persistence" |
| 95990 | + ], |
| 95991 | + "rank": 600, |
| 95992 | + "disclosure_date": "1999-01-01", |
| 95993 | + "type": "exploit", |
| 95994 | + "author": [ |
| 95995 | + "Julien Voisin" |
| 95996 | + ], |
| 95997 | + "description": "This module will add a script in /etc/update-motd.d/ in order to persist a payload.\n The payload will be executed with root privileges everytime a user logs in.\n Root privileges are likely required to write to /etc/update-motd.d/.\n Verified on Ubuntu 22.04", |
| 95998 | + "references": [ |
| 95999 | + "URL-https://manpages.ubuntu.com/manpages/oracular/en/man5/update-motd.5.html" |
| 96000 | + ], |
| 96001 | + "platform": "Linux,Unix", |
| 96002 | + "arch": "cmd, x86, x64, armle, aarch64, ppc, mipsle, mipsbe", |
| 96003 | + "rport": null, |
| 96004 | + "autofilter_ports": [], |
| 96005 | + "autofilter_services": [], |
| 96006 | + "targets": [ |
| 96007 | + "Automatic" |
| 96008 | + ], |
| 96009 | + "mod_time": "2025-09-09 14:29:07 +0000", |
| 96010 | + "path": "/modules/exploits/linux/persistence/motd.rb", |
| 96011 | + "is_install_path": true, |
| 96012 | + "ref_name": "linux/persistence/motd", |
| 96013 | + "check": true, |
| 96014 | + "post_auth": false, |
| 96015 | + "default_credential": false, |
| 96016 | + "notes": { |
| 96017 | + "Stability": [ |
| 96018 | + "crash-safe" |
| 96019 | + ], |
| 96020 | + "Reliability": [ |
| 96021 | + "repeatable-session", |
| 96022 | + "event-dependent" |
| 96023 | + ], |
| 96024 | + "SideEffects": [ |
| 96025 | + "artifacts-on-disk" |
| 96026 | + ] |
| 96027 | + }, |
| 96028 | + "session_types": [ |
| 96029 | + "shell", |
| 96030 | + "meterpreter" |
| 96031 | + ], |
| 96032 | + "needs_cleanup": null, |
| 96033 | + "actions": [] |
| 96034 | + }, |
96030 | 96035 | "exploit_linux/pop3/cyrus_pop3d_popsubfolders": { |
96031 | 96036 | "name": "Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow", |
96032 | 96037 | "fullname": "exploit/linux/pop3/cyrus_pop3d_popsubfolders", |
|
0 commit comments