|
89084 | 89084 | "needs_cleanup": null, |
89085 | 89085 | "actions": [] |
89086 | 89086 | }, |
89087 | | - "exploit_linux/local/bash_profile_persistence": { |
89088 | | - "name": "Bash Profile Persistence", |
89089 | | - "fullname": "exploit/linux/local/bash_profile_persistence", |
89090 | | - "aliases": [], |
89091 | | - "rank": 300, |
89092 | | - "disclosure_date": "1989-06-08", |
89093 | | - "type": "exploit", |
89094 | | - "author": [ |
89095 | | - "Michael Long < [email protected]>" |
89096 | | - ], |
89097 | | - "description": "This module writes an execution trigger to the target's Bash profile.\n The execution trigger executes a call back payload whenever the target\n user opens a Bash terminal. A handler is not run automatically, so you\n must configure an appropriate exploit/multi/handler to receive the callback.", |
89098 | | - "references": [ |
89099 | | - "URL-https://attack.mitre.org/techniques/T1156/" |
89100 | | - ], |
89101 | | - "platform": "Linux,Unix", |
89102 | | - "arch": "cmd", |
89103 | | - "rport": null, |
89104 | | - "autofilter_ports": [], |
89105 | | - "autofilter_services": [], |
89106 | | - "targets": [ |
89107 | | - "Automatic" |
89108 | | - ], |
89109 | | - "mod_time": "2021-12-24 03:06:37 +0000", |
89110 | | - "path": "/modules/exploits/linux/local/bash_profile_persistence.rb", |
89111 | | - "is_install_path": true, |
89112 | | - "ref_name": "linux/local/bash_profile_persistence", |
89113 | | - "check": false, |
89114 | | - "post_auth": false, |
89115 | | - "default_credential": false, |
89116 | | - "notes": { |
89117 | | - "Reliability": [ |
89118 | | - "repeatable-session" |
89119 | | - ], |
89120 | | - "Stability": [ |
89121 | | - "crash-safe" |
89122 | | - ], |
89123 | | - "SideEffects": [ |
89124 | | - "artifacts-on-disk", |
89125 | | - "config-changes" |
89126 | | - ] |
89127 | | - }, |
89128 | | - "session_types": [ |
89129 | | - "meterpreter", |
89130 | | - "shell" |
89131 | | - ], |
89132 | | - "needs_cleanup": null, |
89133 | | - "actions": [] |
89134 | | - }, |
89135 | 89087 | "exploit_linux/local/blueman_set_dhcp_handler_dbus_priv_esc": { |
89136 | 89088 | "name": "blueman set_dhcp_handler D-Bus Privilege Escalation", |
89137 | 89089 | "fullname": "exploit/linux/local/blueman_set_dhcp_handler_dbus_priv_esc", |
|
95903 | 95855 | "session_types": false, |
95904 | 95856 | "needs_cleanup": null |
95905 | 95857 | }, |
| 95858 | + "exploit_linux/persistence/bash_profile": { |
| 95859 | + "name": "Bash Profile Persistence", |
| 95860 | + "fullname": "exploit/linux/persistence/bash_profile", |
| 95861 | + "aliases": [ |
| 95862 | + "exploits/linux/local/bash_profile_persistence" |
| 95863 | + ], |
| 95864 | + "rank": 600, |
| 95865 | + "disclosure_date": "1989-06-08", |
| 95866 | + "type": "exploit", |
| 95867 | + "author": [ |
| 95868 | + "Michael Long < [email protected]>" |
| 95869 | + ], |
| 95870 | + "description": "This module writes an execution trigger to the target's Bash profile.\n The execution trigger executes a call back payload whenever the target\n user opens a Bash terminal.\n Verified on Ubuntu 22.04 and 18.04 desktop with Gnome", |
| 95871 | + "references": [ |
| 95872 | + "ATT&CK-T1546.004" |
| 95873 | + ], |
| 95874 | + "platform": "Linux,Unix", |
| 95875 | + "arch": "cmd, x86, x64, armle, aarch64, ppc, mipsle, mipsbe", |
| 95876 | + "rport": null, |
| 95877 | + "autofilter_ports": [], |
| 95878 | + "autofilter_services": [], |
| 95879 | + "targets": [ |
| 95880 | + "Automatic" |
| 95881 | + ], |
| 95882 | + "mod_time": "2025-09-01 18:09:25 +0000", |
| 95883 | + "path": "/modules/exploits/linux/persistence/bash_profile.rb", |
| 95884 | + "is_install_path": true, |
| 95885 | + "ref_name": "linux/persistence/bash_profile", |
| 95886 | + "check": true, |
| 95887 | + "post_auth": false, |
| 95888 | + "default_credential": false, |
| 95889 | + "notes": { |
| 95890 | + "Reliability": [ |
| 95891 | + "repeatable-session", |
| 95892 | + "event-dependent" |
| 95893 | + ], |
| 95894 | + "Stability": [ |
| 95895 | + "crash-safe" |
| 95896 | + ], |
| 95897 | + "SideEffects": [ |
| 95898 | + "artifacts-on-disk", |
| 95899 | + "config-changes" |
| 95900 | + ] |
| 95901 | + }, |
| 95902 | + "session_types": [ |
| 95903 | + "meterpreter", |
| 95904 | + "shell" |
| 95905 | + ], |
| 95906 | + "needs_cleanup": null, |
| 95907 | + "actions": [] |
| 95908 | + }, |
95906 | 95909 | "exploit_linux/pop3/cyrus_pop3d_popsubfolders": { |
95907 | 95910 | "name": "Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow", |
95908 | 95911 | "fullname": "exploit/linux/pop3/cyrus_pop3d_popsubfolders", |
|
0 commit comments