|
89084 | 89084 | "needs_cleanup": null,
|
89085 | 89085 | "actions": []
|
89086 | 89086 | },
|
89087 |
| - "exploit_linux/local/bash_profile_persistence": { |
89088 |
| - "name": "Bash Profile Persistence", |
89089 |
| - "fullname": "exploit/linux/local/bash_profile_persistence", |
89090 |
| - "aliases": [], |
89091 |
| - "rank": 300, |
89092 |
| - "disclosure_date": "1989-06-08", |
89093 |
| - "type": "exploit", |
89094 |
| - "author": [ |
89095 |
| - "Michael Long < [email protected]>" |
89096 |
| - ], |
89097 |
| - "description": "This module writes an execution trigger to the target's Bash profile.\n The execution trigger executes a call back payload whenever the target\n user opens a Bash terminal. A handler is not run automatically, so you\n must configure an appropriate exploit/multi/handler to receive the callback.", |
89098 |
| - "references": [ |
89099 |
| - "URL-https://attack.mitre.org/techniques/T1156/" |
89100 |
| - ], |
89101 |
| - "platform": "Linux,Unix", |
89102 |
| - "arch": "cmd", |
89103 |
| - "rport": null, |
89104 |
| - "autofilter_ports": [], |
89105 |
| - "autofilter_services": [], |
89106 |
| - "targets": [ |
89107 |
| - "Automatic" |
89108 |
| - ], |
89109 |
| - "mod_time": "2021-12-24 03:06:37 +0000", |
89110 |
| - "path": "/modules/exploits/linux/local/bash_profile_persistence.rb", |
89111 |
| - "is_install_path": true, |
89112 |
| - "ref_name": "linux/local/bash_profile_persistence", |
89113 |
| - "check": false, |
89114 |
| - "post_auth": false, |
89115 |
| - "default_credential": false, |
89116 |
| - "notes": { |
89117 |
| - "Reliability": [ |
89118 |
| - "repeatable-session" |
89119 |
| - ], |
89120 |
| - "Stability": [ |
89121 |
| - "crash-safe" |
89122 |
| - ], |
89123 |
| - "SideEffects": [ |
89124 |
| - "artifacts-on-disk", |
89125 |
| - "config-changes" |
89126 |
| - ] |
89127 |
| - }, |
89128 |
| - "session_types": [ |
89129 |
| - "meterpreter", |
89130 |
| - "shell" |
89131 |
| - ], |
89132 |
| - "needs_cleanup": null, |
89133 |
| - "actions": [] |
89134 |
| - }, |
89135 | 89087 | "exploit_linux/local/blueman_set_dhcp_handler_dbus_priv_esc": {
|
89136 | 89088 | "name": "blueman set_dhcp_handler D-Bus Privilege Escalation",
|
89137 | 89089 | "fullname": "exploit/linux/local/blueman_set_dhcp_handler_dbus_priv_esc",
|
|
95903 | 95855 | "session_types": false,
|
95904 | 95856 | "needs_cleanup": null
|
95905 | 95857 | },
|
| 95858 | + "exploit_linux/persistence/bash_profile": { |
| 95859 | + "name": "Bash Profile Persistence", |
| 95860 | + "fullname": "exploit/linux/persistence/bash_profile", |
| 95861 | + "aliases": [ |
| 95862 | + "exploits/linux/local/bash_profile_persistence" |
| 95863 | + ], |
| 95864 | + "rank": 600, |
| 95865 | + "disclosure_date": "1989-06-08", |
| 95866 | + "type": "exploit", |
| 95867 | + "author": [ |
| 95868 | + "Michael Long < [email protected]>" |
| 95869 | + ], |
| 95870 | + "description": "This module writes an execution trigger to the target's Bash profile.\n The execution trigger executes a call back payload whenever the target\n user opens a Bash terminal.\n Verified on Ubuntu 22.04 and 18.04 desktop with Gnome", |
| 95871 | + "references": [ |
| 95872 | + "ATT&CK-T1546.004" |
| 95873 | + ], |
| 95874 | + "platform": "Linux,Unix", |
| 95875 | + "arch": "cmd, x86, x64, armle, aarch64, ppc, mipsle, mipsbe", |
| 95876 | + "rport": null, |
| 95877 | + "autofilter_ports": [], |
| 95878 | + "autofilter_services": [], |
| 95879 | + "targets": [ |
| 95880 | + "Automatic" |
| 95881 | + ], |
| 95882 | + "mod_time": "2025-09-01 18:09:25 +0000", |
| 95883 | + "path": "/modules/exploits/linux/persistence/bash_profile.rb", |
| 95884 | + "is_install_path": true, |
| 95885 | + "ref_name": "linux/persistence/bash_profile", |
| 95886 | + "check": true, |
| 95887 | + "post_auth": false, |
| 95888 | + "default_credential": false, |
| 95889 | + "notes": { |
| 95890 | + "Reliability": [ |
| 95891 | + "repeatable-session", |
| 95892 | + "event-dependent" |
| 95893 | + ], |
| 95894 | + "Stability": [ |
| 95895 | + "crash-safe" |
| 95896 | + ], |
| 95897 | + "SideEffects": [ |
| 95898 | + "artifacts-on-disk", |
| 95899 | + "config-changes" |
| 95900 | + ] |
| 95901 | + }, |
| 95902 | + "session_types": [ |
| 95903 | + "meterpreter", |
| 95904 | + "shell" |
| 95905 | + ], |
| 95906 | + "needs_cleanup": null, |
| 95907 | + "actions": [] |
| 95908 | + }, |
95906 | 95909 | "exploit_linux/pop3/cyrus_pop3d_popsubfolders": {
|
95907 | 95910 | "name": "Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow",
|
95908 | 95911 | "fullname": "exploit/linux/pop3/cyrus_pop3d_popsubfolders",
|
|
0 commit comments