adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
18fa4111894c119b6d29cd7c31ee4674777deecc
metasploit-gs/modules/exploits/linux/http
T
History
Ahmed S. Darwish e21504b22d huawei_hg532n_cmdinject: Use send_request_cgi() 'vars_get' key 
Instead of rolling our own GET parameters implementation.

Thanks @wvu-r7!
2017-04-17 09:11:50 +02:00
..
accellion_fta_getstatus_oauth.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
advantech_switch_bash_env_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
airties_login_cgi_bof.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
alcatel_omnipcx_mastercgi_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
alienvault_exec.rb
Update tested version numbers
2017-02-08 19:31:01 +03:00
alienvault_sqli_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
apache_continuum_cmd_exec.rb
Remove apache_continuum_cmd_exec CmdStager flavor
2016-12-27 16:24:16 -06:00
astium_sqli_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
atutor_filemanager_traversal.rb
Update atutor_filemanager_traversal
2016-03-22 14:44:07 -05:00
belkin_login_bof.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
centreon_sqli_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
centreon_useralias_exec.rb
gem version
2016-06-16 21:09:56 -04:00
cfme_manageiq_evm_upload_exec.rb
Re-ranking files
2017-04-02 18:33:46 -04:00
cisco_firepower_useradd.rb
Use Linux payloads instead of cmd/unix/interact
2017-01-09 11:11:17 -06:00
ddwrt_cgibin_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_authentication_cgi_bof.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_command_php_exec_noauth.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_dcs931l_upload.rb
Missed the HTTPUSERNAME fix
2016-05-27 18:37:04 -05:00
dlink_dcs_930l_authenticated_remote_command_execution.rb
Add missing ranks
2017-03-31 02:39:44 -04:00
dlink_diagnostic_exec_noauth.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_dir300_exec_telnet.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_dir605l_captcha_bof.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_dir615_up_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_dspw110_cookie_noauth_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
dlink_dspw215_info_cgi_bof.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_hedwig_cgi_bof.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dlink_hnap_bof.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
dlink_hnap_header_exec_noauth.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
dlink_hnap_login_bof.rb
remove whitespace at end of module name
2016-11-14 08:35:34 +00:00
dlink_upnp_exec_noauth.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dnalims_admin_exec.rb
updates per pr
2017-03-20 10:40:43 -04:00
dolibarr_cmd_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dreambox_openpli_shell.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
efw_chpasswd_exec.rb
Add missing ranks
2017-03-31 02:39:44 -04:00
empire_skywalker.rb
update architecture
2016-11-20 19:09:33 -06:00
esva_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
f5_icall_cmd.rb
Missed the HTTPUSERNAME fix
2016-05-27 18:37:04 -05:00
f5_icontrol_exec.rb
Missed the HTTPUSERNAME fix
2016-05-27 18:37:04 -05:00
foreman_openstack_satellite_code_exec.rb
Add missing ranks
2017-03-31 02:39:44 -04:00
fritzbox_echo_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
github_enterprise_secret.rb
Update version info
2017-03-23 13:46:09 -05:00
gitlist_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
gpsd_format_string.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
groundwork_monarch_cmd_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
hp_system_management.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
huawei_hg532n_cmdinject.rb
huawei_hg532n_cmdinject: Use send_request_cgi() 'vars_get' key
2017-04-17 09:11:50 +02:00
ipfire_bashbug_exec.rb
added Rank
2016-06-13 19:04:06 -04:00
ipfire_proxy_exec.rb
added Rank
2016-06-13 19:04:06 -04:00
kaltura_unserialize_rce.rb
Grammar changes again.
2016-09-20 23:51:12 +03:00
kloxo_sqli.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
lifesize_uvc_ping_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
linksys_apply_cgi.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
linksys_e1500_apply_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
linksys_themoon_exec.rb
Update themoon exploit to use wget command stager
2017-01-03 15:50:57 -06:00
linksys_wrt54gl_apply_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
linksys_wrt110_cmd_exec.rb
Missed the HTTPUSERNAME fix
2016-05-27 18:37:04 -05:00
linksys_wrt160nv2_apply_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
logsign_exec.rb
Add iso link to md file and change CheckCode code
2017-03-10 13:00:49 +03:00
multi_ncc_ping_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
mutiny_frontend_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
mvpower_dvr_shell_exec.rb
Use query instead of uri in mvpower_dvr_shell_exec
2017-03-14 11:51:55 -05:00
nagios_xi_chained_rce.rb
Polish up USER_ID and API_TOKEN options
2016-11-30 17:10:52 -06:00
netgear_dgn1000b_setup_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
netgear_dgn2200b_pppoe_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
netgear_r7000_cgibin_exec.rb
Specify default resource in start_service
2017-03-09 03:00:51 -06:00
netgear_readynas_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
netgear_wnr2000_rce.rb
change platform time to unix (although it is linux in reality but whatevs)
2017-02-24 22:58:24 +00:00
nginx_chunked_size.rb
Add missing ranks
2017-03-31 02:39:44 -04:00
nuuo_nvrmini_auth_rce.rb
Add bugtraq reference
2016-08-05 21:53:08 +01:00
nuuo_nvrmini_unauth_rce.rb
Update nuuo_nvrmini_unauth_rce.rb
2016-08-05 21:53:25 +01:00
op5_config_exec.rb
Add setsid to persist the shell
2016-06-16 11:31:35 -05:00
openfiler_networkcard_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pandora_fms_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
pandora_fms_sqli.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
peercast_url.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pineapp_ldapsyncnow_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pineapp_livelog_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pineapp_test_li_conn_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pineapple_bypass_cmdinject.rb
Adding WiFi pineapple command injection via authenticaiton bypass.
2016-09-06 17:22:25 -07:00
pineapple_preconfig_cmdinject.rb
Adding WiFi pineapple preconfig command injection module.
2016-09-06 17:18:36 -07:00
piranha_passwd_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
raidsonic_nas_ib5220_exec_noauth.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
railo_cfml_rfi.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
realtek_miniigd_upnp_exec_noauth.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
riverbed_netprofiler_netexpress_exec.rb
Implement first pass of architecture/platform refactor
2016-10-28 07:16:05 +10:00
seagate_nas_php_exec_noauth.rb
fix check method
2016-10-30 14:57:42 -04:00
smt_ipmi_close_window_bof.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
sophos_wpa_iface_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
sophos_wpa_sblistpack_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
symantec_web_gateway_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
symantec_web_gateway_file_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
symantec_web_gateway_lfi.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
symantec_web_gateway_pbcontrol.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
symantec_web_gateway_restore.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
synology_dsm_sliceupload_exec_noauth.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
tiki_calendar_exec.rb
Fix #7158, tiki_calendar_exec incorrectly reports successful login
2016-07-28 17:03:31 -05:00
tp_link_sc2020n_authenticated_telnet_injection.rb
Add missing ranks
2017-03-31 02:39:44 -04:00
tr064_ntpserver_cmdinject.rb
Appease msftidy in tr064_ntpserver_cmdinject
2017-03-14 11:52:21 -05:00
trend_micro_imsva_exec.rb
Removing prefix
2017-03-16 00:49:55 +03:00
trendmicro_sps_exec.rb
report correct credential status as successful
2016-11-14 12:27:22 -06:00
trueonline_billion_5200w_rce.rb
Add full disclosure link
2017-01-17 11:09:44 +00:00
trueonline_p660hn_v1_rce.rb
Add full disclosure link
2017-01-17 11:09:29 +00:00
trueonline_p660hn_v2_rce.rb
msftidy error updated 2.4
2017-03-14 21:33:53 +05:30
vap2500_tools_command_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
vcms_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
wanem_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
webcalendar_settings_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
webid_converter.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
zabbix_sqli.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
zen_load_balancer_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
zenoss_showdaemonxmlconfig_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00