adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
0fa674cc676eeefd04ea6ff688bf89eff076eae3
metasploit-gs/modules/exploits/linux/http
T
History
bwatters-r7 0f3084aa6e Land #12189, Add module for LibreNMS CVE-2019-10669 
Merge branch 'land-12189' into upstream-master
2019-09-06 12:04:21 -05:00
..
accellion_fta_getstatus_oauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
advantech_switch_bash_env_exec.rb
Land #10570, AKA Metadata Refactor
2018-09-17 20:31:07 -07:00
airties_login_cgi_bof.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
alcatel_omnipcx_mastercgi_exec.rb
Change author name to nick.
2017-11-09 03:00:24 +11:00
alienvault_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
alienvault_sqli_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
apache_continuum_cmd_exec.rb
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
apache_couchdb_cmd_exec.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
astium_sqli_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
asuswrt_lan_rce.rb
Land #12205, prefer https always
2019-08-15 16:48:23 -07:00
atutor_filemanager_traversal.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
axis_srv_parhand_rce.rb
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
belkin_login_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
centreon_sqli_exec.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
centreon_useralias_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cfme_manageiq_evm_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cisco_firepower_useradd.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cisco_prime_inf_rce.rb
Land #10767, Add Cisco Prime Infrastructure remote root exploit
2018-11-10 09:00:37 -08:00
cisco_rv32x_rce.rb
Land #11482, RV320 Unauthenticated RCE
2019-03-28 15:55:23 -07:00
cisco_ucs_rce.rb
Land #12243, cisco_ucs_rce exploit
2019-08-30 14:08:42 -05:00
cpi_tararchive_upload.rb
Land #11956 - Add Cisco Prime Infrastructure Health Monitor Tar RCE
2019-06-19 08:50:44 -07:00
crypttech_cryptolog_login_exec.rb
40% done
2017-08-28 20:17:58 -04:00
cve_2019_1663_cisco_rmi_rce.rb
Land #12133, CVE-2019-1663 RV{110,215}W targets
2019-08-30 14:06:53 -05:00
dcos_marathon.rb
40% done
2017-08-28 20:17:58 -04:00
ddwrt_cgibin_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
denyall_waf_exec.rb
Land #12205, prefer https always
2019-08-15 16:48:23 -07:00
dlink_authentication_cgi_bof.rb
40% done
2017-08-28 20:17:58 -04:00
dlink_command_php_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dcs931l_upload.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
dlink_dcs_930l_authenticated_remote_command_execution.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_diagnostic_exec_noauth.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
dlink_dir300_exec_telnet.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dir605l_captcha_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dir615_up_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dir850l_unauth_exec.rb
Clean up module
2017-11-10 18:15:22 -06:00
dlink_dsl2750b_exec_noauth.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
dlink_dspw110_cookie_noauth_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dspw215_info_cgi_bof.rb
40% done
2017-08-28 20:17:58 -04:00
dlink_hedwig_cgi_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_hnap_bof.rb
40% done
2017-08-28 20:17:58 -04:00
dlink_hnap_header_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_hnap_login_bof.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
dlink_upnp_exec_noauth.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
dnalims_admin_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
docker_daemon_tcp.rb
bypass user namespaces
2017-11-15 15:14:58 +01:00
dolibarr_cmd_exec.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
dreambox_openpli_shell.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
efw_chpasswd_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
empire_skywalker.rb
Land #10873, Add notes to exploit modules
2018-11-02 12:13:37 -07:00
esva_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
f5_icall_cmd.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
f5_icontrol_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
foreman_openstack_satellite_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
fritzbox_echo_exec.rb
Land #10275, Update missing CVE references for exploit modules
2018-07-12 11:24:01 -05:00
github_enterprise_secret.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
gitlist_exec.rb
40% done
2017-08-28 20:17:58 -04:00
goahead_ldpreload.rb
Land #9349, GoAhead LD_PRELOAD CGI Module
2018-01-24 17:12:47 -06:00
goautodial_3_rce_command_injection.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
gpsd_format_string.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
groundwork_monarch_cmd_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
hadoop_unauth_exec.rb
Land #12175, hadoop_unauth_exec NoMethodError fix
2019-08-07 20:47:11 -07:00
hp_system_management.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
hp_van_sdn_cmd_inject.rb
Land #12007, true 0s timeout in send_request_*
2019-06-28 10:34:35 -07:00
huawei_hg532n_cmdinject.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
ibm_qradar_unauth_rce.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
imperva_securesphere_exec.rb
Land #11210, imperva_securesphere_exec exploit
2019-03-05 19:53:54 -08:00
ipfire_bashbug_exec.rb
Land #10570, AKA Metadata Refactor
2018-09-17 20:31:07 -07:00
ipfire_oinkcode_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
ipfire_proxy_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
kaltura_unserialize_cookie_rce.rb
Land #9114, Add module for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
2018-01-24 17:13:00 -06:00
kaltura_unserialize_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
kloxo_sqli.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
librenms_addhost_cmd_inject.rb
Land #11895, CVE-2018-20434 LibreNMS cmd injection exploit
2019-06-04 10:42:45 -07:00
librenms_collectd_cmd_inject.rb
Land #12189, Add module for LibreNMS CVE-2019-10669
2019-09-06 12:04:21 -05:00
lifesize_uvc_ping_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
linksys_apply_cgi.rb
40% done
2017-08-28 20:17:58 -04:00
linksys_e1500_apply_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
linksys_themoon_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
linksys_wrt54gl_apply_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
linksys_wrt110_cmd_exec.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
linksys_wrt160nv2_apply_exec.rb
40% done
2017-08-28 20:17:58 -04:00
linksys_wvbr0_user_agent_exec_noauth.rb
Land #12205, prefer https always
2019-08-15 16:48:23 -07:00
logsign_exec.rb
40% done
2017-08-28 20:17:58 -04:00
mailcleaner_exec.rb
Land #11679, duplicate mailcleaner_exec CVE fix
2019-04-02 12:58:18 -07:00
microfocus_secure_messaging_gateway.rb
Revert "Land #12158, needs_cleanup for on_new_session"
2019-08-02 15:39:19 -05:00
multi_ncc_ping_exec.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
mutiny_frontend_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
mvpower_dvr_shell_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
nagios_xi_chained_rce_2_electric_boogaloo.rb
Land #11019, Replace WsfDelay with WfsDelay
2018-11-26 09:01:16 -08:00
nagios_xi_chained_rce.rb
Revert "Land #12158, needs_cleanup for on_new_session"
2019-08-02 15:39:19 -05:00
nagios_xi_magpie_debug.rb
Land #11987, Add Nagios XI 5.5.6 magpie_debug Root Exploit
2019-06-25 14:20:15 -07:00
netgear_dgn1000_setup_unauth_exec.rb
Clean up module
2017-11-10 18:15:22 -06:00
netgear_dgn1000b_setup_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
netgear_dgn2200b_pppoe_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
netgear_dnslookup_cmd_exec.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
netgear_r7000_cgibin_exec.rb
Land #10536, https:// reference check for msftidy
2018-08-29 09:18:46 -07:00
netgear_readynas_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
netgear_unauth_exec.rb
Land #10768, Exploit for Netgear CVE-2016-1555
2018-11-26 09:48:41 -08:00
netgear_wnr2000_rce.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
nginx_chunked_size.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
nuuo_nvrmini_auth_rce.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
nuuo_nvrmini_unauth_rce.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
op5_config_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
openfiler_networkcard_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
pandora_fms_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pandora_fms_sqli.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
panos_readsessionvars.rb
Land #11619, improve error handling with exploits/linux/http/panos_readsessionvars
2019-03-23 16:10:09 -07:00
peercast_url.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
php_imap_open_rce.rb
Land #11279, improve imap_open exploit to be more robust
2019-02-08 16:30:14 -08:00
pineapp_ldapsyncnow_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pineapp_livelog_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pineapp_test_li_conn_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
pineapple_bypass_cmdinject.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
pineapple_preconfig_cmdinject.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
piranha_passwd_exec.rb
Change author name to nick.
2017-11-09 03:00:24 +11:00
qnap_qcenter_change_passwd_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
raidsonic_nas_ib5220_exec_noauth.rb
Land #11103, CreateSession option for aux modules
2018-12-12 14:32:26 -08:00
railo_cfml_rfi.rb
40% done
2017-08-28 20:17:58 -04:00
rancher_server.rb
Payload space, error handling and style"
2017-10-07 01:12:24 +02:00
realtek_miniigd_upnp_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
riverbed_netprofiler_netexpress_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
samsung_srv_1670d_upload_exec.rb
Update module and add documentation
2018-01-10 20:13:42 -06:00
seagate_nas_php_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
smt_ipmi_close_window_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
sophos_wpa_iface_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
sophos_wpa_sblistpack_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
spark_unauth_rce.rb
Land #11255, Assign CVE number to spark unauth rce
2019-01-14 19:21:41 -08:00
supervisor_xmlrpc_exec.rb
Land #12205, prefer https always
2019-08-15 16:48:23 -07:00
symantec_messaging_gateway_exec.rb
40% done
2017-08-28 20:17:58 -04:00
symantec_web_gateway_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
symantec_web_gateway_file_upload.rb
Revert "Land #12158, needs_cleanup for on_new_session"
2019-08-02 15:39:19 -05:00
symantec_web_gateway_lfi.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
symantec_web_gateway_pbcontrol.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
symantec_web_gateway_restore.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
synology_dsm_sliceupload_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
tiki_calendar_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
tp_link_sc2020n_authenticated_telnet_injection.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
tr064_ntpserver_cmdinject.rb
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
trend_micro_imsva_exec.rb
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
trendmicro_imsva_widget_exec.rb
Land #12205, prefer https always
2019-08-15 16:48:23 -07:00
trendmicro_sps_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
trueonline_billion_5200w_rce.rb
Land #11957, CVE references for TrueOnline modules
2019-06-08 11:34:54 -07:00
trueonline_p660hn_v1_rce.rb
Land #11957, CVE references for TrueOnline modules
2019-06-08 11:34:54 -07:00
trueonline_p660hn_v2_rce.rb
Land #11957, CVE references for TrueOnline modules
2019-06-08 11:34:54 -07:00
ubiquiti_airos_file_upload.rb
Land #12223, module deprecation by alias
2019-08-30 12:16:27 -05:00
ueb_api_rce.rb
Land #11223 - ueb priv esc suggestion
2019-01-10 08:36:44 -08:00
vap2500_tools_command_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
vcms_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
wanem_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
wd_mycloud_multiupload_upload.rb
add cve reference
2017-12-13 18:50:21 -06:00
webcalendar_settings_exec.rb
40% done
2017-08-28 20:17:58 -04:00
webid_converter.rb
Revert "Land #12158, needs_cleanup for on_new_session"
2019-08-02 15:39:19 -05:00
webmin_packageup_rce.rb
Land #11983, add Webmin package update rce
2019-06-19 06:38:39 -07:00
wipg1000_cmd_injection.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
xplico_exec.rb
Updatig documentation and tweaking initiate_session
2017-11-15 01:04:06 +03:00
zabbix_sqli.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
zen_load_balancer_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
zenoss_showdaemonxmlconfig_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
zimbra_xxe_rce.rb
Land #11672, Zimbra XXE and SSRF exploit
2019-04-10 10:32:11 -07:00