6467b7261d
Fix: Auto-provision admin user and fix filestore version downgrade in lab
2026-03-11 19:45:14 +01:00
c266e687c2
Add authenticated RCE module for FreePBX filestore (CVE-2025-64328)
2026-03-11 19:43:28 +01:00
641ab527aa
Merge pull request #20857 from msutovsky-r7/exploit/freepbx/sql_to_rce_chain
...
Adds exploit module for FreePBX (CVE-2025-66039, CVE-2025-61675)
2026-01-28 20:03:17 -08:00
63a66ee162
Improved CVE version range info in description
2026-01-28 20:15:25 -07:00
e6b97a79a4
Addresses comments
2026-01-28 11:33:54 +01:00
c5ffa557a7
Adds UID in documentation
2026-01-26 13:44:09 +01:00
d2af23a4a6
Adds additional installation step
2026-01-19 11:25:39 +01:00
4e36ff99ac
Adds additional installation step
2026-01-19 11:24:45 +01:00
b01353cc07
Code cleanup, removes line from documentation
2026-01-15 15:26:30 +01:00
85221800a4
Removes line from documentation, code cleanup
2026-01-15 15:23:54 +01:00
e8efe19598
Moves file upload module into separate PR
2026-01-09 11:19:37 +01:00
fcabe61271
Moves SQLi to RCE module into separate PR
2026-01-09 11:15:47 +01:00
d8c73f6684
replace bold options with h3
2025-11-07 15:42:23 -05:00
19074eef02
Add exploit for CVE-2025-57819
...
Added an exploit script for unauthenticated remote code execution targeting FreePBX
2025-09-21 22:56:19 +02:00
adff497bd2
Updates msf5 as well
2025-07-17 11:51:29 +01:00
469f102596
Updates docs to reflect new default prompt
2025-07-17 09:53:40 +01:00
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
ab9576f83d
Add changes
2023-12-01 10:55:04 +01:00
b2fa201a7d
Implement check
2023-11-28 16:45:44 +01:00
0146527e55
Add splunk_xslt_authenticated_rce
2023-11-28 15:40:05 +01:00
557a15a115
spelling fixes on docs
2023-10-10 14:46:18 -04:00
8717e66b14
Land #18280 , Add Maltrail Unauth RCE Module
...
This PR adds a module for an unauthenticated RCE vulnerability
in Maltrail, a malicious traffic detection system. This vuln
does not have a CVE associated with it.
2023-08-16 17:29:05 -04:00
a91f928d62
Update documentation/modules/exploit/unix/http/maltrail_rce.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-16 18:45:37 +00:00
99e78a4c00
Update documentaion file
2023-08-14 21:01:10 -04:00
4b7d98df07
Add Maltrail Unauthenticated RCE exploit
2023-08-10 23:02:20 +02:00
da9200819d
Update scenarios for new targets
2023-08-10 00:55:52 +02:00
41f0c30855
Add RaspAP Unauthenticated Command Injection (CVE-2022-39986) Exploit
2023-08-04 21:22:07 +02:00
34f25fbb65
pfSense Config Data Remote Command Execution as root (CVE-2023-27253) Module
2023-07-12 13:27:02 -04:00
6043d0ffba
Update all links from Wiki site to new docs site.
2023-01-27 09:58:53 -06:00
2a28af208d
Land #16992 , Syncovery For Linux - Auth. RCE (CVE-2022-36534)
2022-12-14 13:43:00 +01:00
04e5aa3033
apply suggestions
2022-12-02 16:05:01 +01:00
a3e32ffafa
Add TARGET 0 to documentation
2022-10-12 20:00:33 -05:00
e9f54aa5b8
Update documentation with better wording, and add randomization of parameter name to module along with cleanup code for deleting uploaded files
2022-10-12 19:16:52 -05:00
9652823393
Reverted check method to upload shell
2022-10-12 19:16:44 -05:00
3c27c8e5aa
Condensed payload, changed base64 encoding to hex
2022-10-12 19:12:35 -05:00
e4eac96b4b
Add Module for pfSense pfBlockerNG unauth RCE as root
2022-10-12 19:12:22 -05:00
01556b22d5
Syncovery For Linux - Auth. RCE (CVE-2022-36534)
2022-09-07 13:34:48 +02:00
65e16a1a72
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
2022-02-27 18:12:54 -08:00
809081bc5f
Land #15279 , add Pi-Hole lpe
2021-07-29 11:15:17 -05:00
598f925fd3
remove extra spaces
2021-06-01 11:37:45 -05:00
0c3a693bef
working exploit and docs
2021-05-30 14:37:11 -04:00
825cc9d284
upgraded to meterp
2021-05-29 15:55:24 -04:00
721a47ad7f
cacti 1.2.12 sql to rce
2021-05-29 15:55:24 -04:00
9a92ac87a1
Ensure documentation files have md extension
2021-03-15 10:24:50 +00:00
2c4d158086
Land #13170 , Blind RCE exploit for Zivif Cameras
2020-06-16 13:05:35 +01:00
5f29af114b
Added documentation and set default payload
2020-06-15 15:51:28 -04:00
f1c492fa2d
Land #13470 , Pi-Hole < 4.3.3 dhcp static address RCE
2020-05-28 16:57:22 +01:00
695f212d26
pihole default payload fix
2020-05-28 09:55:04 -04:00
cb06a4e731
Land #13455 , Pi-Hole < 3.3 whitelist RCE
...
Merge branch 'land-13455' into upstream-master
2020-05-22 15:35:16 -05:00
132a74295a
fix doc numbering
2020-05-16 01:39:20 -04:00
Valentin Lobstein