metasploit-gs

activecollab_chat.rb

…

agent_tesla_panel_rce.rb

Update autocheck to use prepend instead of include, add ForceExploit functionality

2020-06-30 11:40:46 +01:00

ajaxplorer_checkinstall_exec.rb

…

apache_activemq_upload_jsp.rb

…

apache_jetspeed_file_upload.rb

…

apache_mod_cgi_bash_env_exec.rb

…

apache_roller_ognl_injection.rb

…

apprain_upload_exec.rb

…

atutor_sqli.rb

…

atutor_upload_traversal.rb

Update recent modules to use prepend

2020-07-01 14:43:15 -05:00

auxilium_upload_exec.rb

…

axis2_deployer.rb

…

bassmaster_js_injection.rb

…

bolt_file_upload.rb

…

builderengine_upload_exec.rb

…

caidao_php_backdoor_exec.rb

…

cisco_dcnm_upload_2019.rb

…

cisco_dcnm_upload.rb

…

clipbucket_fileupload_exec.rb

…

cmsms_object_injection_rce.rb

…

cmsms_showtime2_rce.rb

…

cmsms_upload_rename_rce.rb

…

coldfusion_ckeditor_file_upload.rb

…

coldfusion_rds_auth_bypass.rb

…

confluence_widget_connector.rb

…

cups_bash_env_exec.rb

…

cuteflow_upload_exec.rb

…

dexter_casinoloader_exec.rb

…

drupal_drupageddon.rb

…

eaton_nsm_code_exec.rb

…

eventlog_file_upload.rb

…

extplorer_upload_exec.rb

…

familycms_less_exec.rb

…

freenas_exec_raw.rb

…

gestioip_exec.rb

…

getsimplecms_unauth_code_exec.rb

…

git_client_command_exec.rb

…

git_submodule_command_exec.rb

…

git_submodule_url_exec.rb

…

gitlab_shell_exec.rb

…

gitlist_arg_injection.rb

…

gitorious_graph.rb

…

glassfish_deployer.rb

…

glossword_upload_exec.rb

…

glpi_install_rce.rb

…

horde_csv_rce.rb

…

horde_form_file_upload.rb

…

horde_href_backdoor.rb

…

hp_sitescope_issuesiebelcmd.rb

…

hp_sitescope_uploadfileshandler.rb

…

hp_sys_mgmt_exec.rb

…

hyperic_hq_script_console.rb

…

ibm_openadmin_tool_soap_welcomeserver_exec.rb

Base64 enc payload to bypass escaping quotes etc.

2020-06-12 13:44:00 +08:00

ispconfig_php_exec.rb

…

jboss_bshdeployer.rb

…

jboss_deploymentfilerepository.rb

…

jboss_invoke_deploy.rb

…

jboss_maindeployer.rb

…

jboss_seam_upload_exec.rb

…

jenkins_metaprogramming.rb

…

jenkins_script_console.rb

…

jenkins_xstream_deserialize.rb

…

jira_hipchat_template.rb

…

jira_plugin_upload.rb

…

joomla_http_header_rce.rb

…

kordil_edms_upload_exec.rb

…

lcms_php_exec.rb

…

liferay_java_unmarshalling.rb

Update autocheck to use prepend instead of include, add ForceExploit functionality

2020-06-30 11:40:46 +01:00

log1cms_ajax_create_folder.rb

…

magento_unserialize.rb

…

makoserver_cmd_exec.rb

…

manage_engine_dc_pmp_sqli.rb

…

manageengine_auth_upload.rb

…

manageengine_sd_uploader.rb

…

manageengine_search_sqli.rb

…

mantisbt_manage_proj_page_rce.rb

…

mantisbt_php_exec.rb

…

mediawiki_syntaxhighlight.rb

…

mediawiki_thumb.rb

…

metasploit_static_secret_key_base.rb

…

metasploit_webui_console_command_execution.rb

…

mma_backdoor_upload.rb

…

mobilecartly_upload_exec.rb

…

monstra_fileupload_exec.rb

…

moodle_cmd_exec.rb

…

movabletype_upgrade_exec.rb

…

mutiny_subnetmask_exec.rb

…

nas4free_php_exec.rb

…

navigate_cms_rce.rb

…

netwin_surgeftp_exec.rb

…

nibbleblog_file_upload.rb

…

nostromo_code_exec.rb

…

novell_servicedesk_rce.rb

…

nuuo_nvrmini_upgrade_rce.rb

…

october_upload_bypass_exec.rb

…

op5_license.rb

…

op5_welcome.rb

…

openfire_auth_bypass.rb

…

openmediavault_cmd_exec.rb

…

openmrs_deserialization.rb

…

openx_backdoor_php.rb

…

opmanager_socialit_file_upload.rb

…

oracle_ats_file_upload.rb

…

oracle_reports_rce.rb

…

oracle_weblogic_wsat_deserialization_rce.rb

…

orientdb_exec.rb

…

oscommerce_installer_unauth_code_exec.rb

…

pandora_upload_exec.rb

…

phoenix_exec.rb

…

php_cgi_arg_injection.rb

…

php_fpm_rce.rb

…

php_utility_belt_rce.rb

…

php_volunteer_upload_exec.rb

…

phpfilemanager_rce.rb

…

phpldapadmin_query_engine.rb

…

phpmailer_arg_injection.rb

…

phpmoadmin_exec.rb

…

phpmyadmin_3522_backdoor.rb

…

phpmyadmin_lfi_rce.rb

…

phpmyadmin_null_termination_exec.rb

…

phpmyadmin_preg_replace.rb

…

phpscheduleit_start_date.rb

…

phpstudy_backdoor_rce.rb

…

phptax_exec.rb

…

phpwiki_ploticus_exec.rb

…

pimcore_unserialize_rce.rb

…

playsms_filename_exec.rb

…

playsms_template_injection.rb

…

playsms_uploadcsv_exec.rb

…

plone_popen2.rb

…

pmwiki_pagelist.rb

…

polarcms_upload_exec.rb

…

processmaker_exec.rb

…

processmaker_plugin_upload.rb

…

qdpm_upload_exec.rb

…

rails_actionpack_inline_exec.rb

…

rails_double_tap.rb

…

rails_dynamic_render_code_exec.rb

…

rails_json_yaml_code_exec.rb

…

rails_secret_deserialization.rb

…

rails_web_console_v2_code_exec.rb

…

rails_xml_yaml_code_exec.rb

…

rocket_servergraph_file_requestor_rce.rb

…

sflog_upload_exec.rb

…

shiro_rememberme_v124_deserialize.rb

Update Apache Shiro RCE module docs

2020-04-28 14:24:17 -04:00

shopware_createinstancefromnamedarguments_rce.rb

…

simple_backdoors_exec.rb

…

sit_file_upload.rb

…

snortreport_exec.rb

…

solarwinds_store_manager_auth_filter.rb

…

solr_velocity_rce.rb

…

sonicwall_gms_upload.rb

…

sonicwall_scrutinizer_methoddetail_sqli.rb

…

splunk_mappy_exec.rb

…

splunk_upload_app_exec.rb

…

spree_search_exec.rb

…

spree_searchlogic_exec.rb

…

struts2_code_exec_showcase.rb

…

struts2_content_type_ognl.rb

…

struts2_namespace_ognl.rb

…

struts2_rest_xstream.rb

…

struts_code_exec_classloader.rb

…

struts_code_exec_exception_delegator.rb

…

struts_code_exec_parameters.rb

…

struts_code_exec.rb

…

struts_default_action_mapper.rb

…

struts_dev_mode.rb

…

struts_dmi_exec.rb

…

struts_dmi_rest_exec.rb

…

struts_include_params.rb

…

stunshell_eval.rb

…

stunshell_exec.rb

…

sun_jsws_dav_options.rb

…

sysaid_auth_file_upload.rb

…

sysaid_rdslogs_file_upload.rb

…

testlink_upload_exec.rb

…

tomcat_jsp_upload_bypass.rb

…

tomcat_mgr_deploy.rb

…

tomcat_mgr_upload.rb

…

totaljs_cms_widget_exec.rb

…

traq_plugin_exec.rb

…

trendmicro_threat_discovery_admin_sys_time_cmdi.rb

…

uptime_file_upload_1.rb

…

uptime_file_upload_2.rb

…

v0pcr3w_exec.rb

…

vbseo_proc_deutf.rb

…

vbulletin_getindexablecontent.rb

Update autocheck to use prepend instead of include, add ForceExploit functionality

2020-06-30 11:40:46 +01:00

vbulletin_unserialize.rb

…

vbulletin_widgetconfig_rce.rb

…

visual_mining_netcharts_upload.rb

…

vtiger_install_rce.rb

…

vtiger_logo_upload_exec.rb

…

vtiger_php_exec.rb

…

vtiger_soap_upload.rb

…

webnms_file_upload.rb

…

webpagetest_upload_exec.rb

…

werkzeug_debug_rce.rb

…

wikka_spam_exec.rb

…

wp_crop_rce.rb

…

wp_db_backup_rce.rb

…

wp_dnd_mul_file_rce.rb

add session_created, fix typo

2020-06-04 10:32:17 -05:00

wp_ninja_forms_unauthenticated_file_upload.rb

…

wp_responsive_thumbnail_slider_upload.rb

…

x7chat2_php_exec.rb

…

zabbix_script_exec.rb

…

zemra_panel_rce.rb

…

zenworks_configuration_management_upload.rb

…

zenworks_control_center_upload.rb

…

zpanel_information_disclosure_rce.rb

…