|
89052 | 89052 | "needs_cleanup": true, |
89053 | 89053 | "actions": [] |
89054 | 89054 | }, |
89055 | | - "exploit_linux/local/autostart_persistence": { |
89056 | | - "name": "Autostart Desktop Item Persistence", |
89057 | | - "fullname": "exploit/linux/local/autostart_persistence", |
89058 | | - "aliases": [], |
89059 | | - "rank": 600, |
89060 | | - "disclosure_date": "2006-02-13", |
89061 | | - "type": "exploit", |
89062 | | - "author": [ |
89063 | | - "Eliott Teissonniere" |
89064 | | - ], |
89065 | | - "description": "This module will create an autostart entry to execute a payload.\n The payload will be executed when the users logs in.", |
89066 | | - "references": [], |
89067 | | - "platform": "Linux,Unix", |
89068 | | - "arch": "cmd", |
89069 | | - "rport": null, |
89070 | | - "autofilter_ports": [], |
89071 | | - "autofilter_services": [], |
89072 | | - "targets": [ |
89073 | | - "Automatic" |
89074 | | - ], |
89075 | | - "mod_time": "2025-06-23 12:43:46 +0000", |
89076 | | - "path": "/modules/exploits/linux/local/autostart_persistence.rb", |
89077 | | - "is_install_path": true, |
89078 | | - "ref_name": "linux/local/autostart_persistence", |
89079 | | - "check": false, |
89080 | | - "post_auth": false, |
89081 | | - "default_credential": false, |
89082 | | - "notes": { |
89083 | | - "Reliability": [ |
89084 | | - "unknown-reliability" |
89085 | | - ], |
89086 | | - "Stability": [ |
89087 | | - "unknown-stability" |
89088 | | - ], |
89089 | | - "SideEffects": [ |
89090 | | - "unknown-side-effects" |
89091 | | - ] |
89092 | | - }, |
89093 | | - "session_types": [ |
89094 | | - "shell", |
89095 | | - "meterpreter" |
89096 | | - ], |
89097 | | - "needs_cleanup": null, |
89098 | | - "actions": [] |
89099 | | - }, |
89100 | 89055 | "exploit_linux/local/blueman_set_dhcp_handler_dbus_priv_esc": { |
89101 | 89056 | "name": "blueman set_dhcp_handler D-Bus Privilege Escalation", |
89102 | 89057 | "fullname": "exploit/linux/local/blueman_set_dhcp_handler_dbus_priv_esc", |
|
95969 | 95924 | "needs_cleanup": true, |
95970 | 95925 | "actions": [] |
95971 | 95926 | }, |
| 95927 | + "exploit_linux/persistence/autostart": { |
| 95928 | + "name": "Autostart Desktop Item Persistence", |
| 95929 | + "fullname": "exploit/linux/persistence/autostart", |
| 95930 | + "aliases": [ |
| 95931 | + "exploits/linux/local/autostart_persistence" |
| 95932 | + ], |
| 95933 | + "rank": 600, |
| 95934 | + "disclosure_date": "2006-02-13", |
| 95935 | + "type": "exploit", |
| 95936 | + "author": [ |
| 95937 | + "Eliott Teissonniere" |
| 95938 | + ], |
| 95939 | + "description": "This module will create an autostart .desktop entry to execute a payload.\n The payload will be executed when the users logs in.\n Verified on Ubuntu 22.04 desktop with Gnome, and 18.04.3.\n The following payloads were used in testing:\n - cmd/unix/reverse_netcat\n - linux/x64/meterpreter/reverse_tcp\n - cmd/linux/http/x64/meterpreter/reverse_tcp", |
| 95940 | + "references": [ |
| 95941 | + "ATT&CK-T1547.013", |
| 95942 | + "URL-https://specifications.freedesktop.org/autostart-spec/latest/" |
| 95943 | + ], |
| 95944 | + "platform": "Linux,Unix", |
| 95945 | + "arch": "cmd, x86, x64, armle, aarch64, ppc, mipsle, mipsbe", |
| 95946 | + "rport": null, |
| 95947 | + "autofilter_ports": [], |
| 95948 | + "autofilter_services": [], |
| 95949 | + "targets": [ |
| 95950 | + "Automatic" |
| 95951 | + ], |
| 95952 | + "mod_time": "2025-09-10 13:59:23 +0000", |
| 95953 | + "path": "/modules/exploits/linux/persistence/autostart.rb", |
| 95954 | + "is_install_path": true, |
| 95955 | + "ref_name": "linux/persistence/autostart", |
| 95956 | + "check": true, |
| 95957 | + "post_auth": false, |
| 95958 | + "default_credential": false, |
| 95959 | + "notes": { |
| 95960 | + "Stability": [ |
| 95961 | + "crash-safe" |
| 95962 | + ], |
| 95963 | + "Reliability": [ |
| 95964 | + "repeatable-session", |
| 95965 | + "event-dependent" |
| 95966 | + ], |
| 95967 | + "SideEffects": [ |
| 95968 | + "artifacts-on-disk", |
| 95969 | + "config-changes" |
| 95970 | + ] |
| 95971 | + }, |
| 95972 | + "session_types": [ |
| 95973 | + "shell", |
| 95974 | + "meterpreter" |
| 95975 | + ], |
| 95976 | + "needs_cleanup": true, |
| 95977 | + "actions": [] |
| 95978 | + }, |
95972 | 95979 | "exploit_linux/persistence/bash_profile": { |
95973 | 95980 | "name": "Bash Profile Persistence", |
95974 | 95981 | "fullname": "exploit/linux/persistence/bash_profile", |
|
0 commit comments