Jack Heysel 281fce0c94 Cisco HyperFlex File Upload RCE module ...

beta draft

RCE working with linux/x64/meterpreter_reverse_tcp

rubocop

Updated title, removed newlines

Responded to comments

Rubo cop offenses

Update documentation/modules/exploit/linux/http/cisco_hyperflex_file_upload_rce.md

Co-authored-by: wvu <wvu-r7@users.noreply.github.com>

Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb

Co-authored-by: wvu <wvu-r7@users.noreply.github.com>

Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb

Co-authored-by: wvu <wvu-r7@users.noreply.github.com>

Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb

Co-authored-by: wvu <wvu-r7@users.noreply.github.com>

Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb

Co-authored-by: wvu <wvu-r7@users.noreply.github.com>

Responded to comments

Rubocop offenses

Added support for Java Dropper

Made changes to Linux Dropper

Rubocop

Improved check method, changed to default staged paylod, removed TODO

Switched to single-quoted strings

2021-06-17 12:38:47 -04:00

..

alienvault_exec.md

adress a spelling problem

2019-10-05 14:22:18 -04:00

apache_couchdb_cmd_exec.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

apache_druid_js_rce.md

Update apache_druid_js_rce.md

2021-04-10 10:43:00 +08:00

apache_ofbiz_deserialization_soap.md

remove spare comma

2021-04-05 09:33:20 -05:00

apache_ofbiz_deserialization.md

Fix "apache_ofbiz_deserialiation" typo in its doc

2021-05-01 17:23:52 -05:00

artica_proxy_auth_bypass_service_cmds_peform_command_injection.md

Remove AUTH_BYPASS target

2020-09-15 01:51:34 +02:00

asuswrt_lan_rce.md

Add sploit doc

2018-02-20 19:35:10 +00:00

axis_srv_parhand_rce.md

Add documentation and a new reference

2018-07-25 14:44:44 -05:00

bludit_upload_images_exec.md

Fix typos and format

2019-11-11 14:47:56 -06:00

cayin_cms_ntp.md

cleanup

2020-06-12 10:46:44 -04:00

centreon_pollers_auth_rce.md

fix somes code review comments.

2020-03-15 13:30:23 +04:00

centreon_useralias_exec.md

Fix uneven quotes in various documentation files

2017-08-26 19:12:48 -05:00

cisco_firepower_useradd.md

typo fixes in cisco_firepower_useradd.md

2019-01-10 10:47:53 +01:00

cisco_hyperflex_file_upload_rce.md

Cisco HyperFlex File Upload RCE module

2021-06-17 12:38:47 -04:00

cisco_hyperflex_hx_data_platform_cmd_exec.md

Add Cisco HyperFlex HX Data Platform exploit

2021-06-03 00:43:56 -05:00

cisco_prime_inf_rce.md

Update cisco_prime_inf_rce.md

2018-10-15 22:37:47 +07:00

cisco_rv32x_rce.md

scenario to scenarios

2020-01-16 10:36:38 -05:00

cisco_rv130_rmi_rce.md

Fix numbering.

2019-03-24 17:52:11 +01:00

cisco_ucs_cloupia_script_rce.md

Add Cisco UCS Director Cloupia script RCE

2020-06-02 22:13:07 -05:00

cisco_ucs_rce.md

module doc standardizations

2020-01-20 21:26:59 -05:00

cpi_tararchive_upload.md

Add module doc for Cisco TarArchive exploit

2019-06-07 13:09:28 -05:00

cve_2019_1663_cisco_rmi_rce.md

Updated documentation.

2019-07-27 11:09:34 +02:00

dcos_marathon.md

example output to scenarios

2020-01-16 11:41:12 -05:00

denyall_waf_exec.md

Fixing typos and replacing double quotes with single

2017-09-21 23:48:12 +03:00

dlink_dir850l_unauth_exec.md

Clean up module

2017-11-10 18:15:22 -06:00

dlink_dsl2750b_exec_noauth.md

Fixing documentation, improving exploits code

2018-05-20 12:55:46 -04:00

dlink_dwl_2600_command_injection.md

Fixing DLINK DWL-2600 Scenarios

2020-03-27 11:57:39 -05:00

docker_daemon_tcp.md

example output to scenarios

2020-01-16 11:41:12 -05:00

epmp1000_get_chart_cmd_shell.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

epmp1000_ping_cmd_shell.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

eyesofnetwork_autodiscovery_rce.md

Minor doc changes, add module notes and SQLi progress output

2020-05-21 16:31:45 -04:00

f5_bigip_tmui_rce.md

Update TMSH escape reliability notes

2020-07-17 06:26:00 -05:00

f5_icontrol_rest_ssrf_rce.md

Add module doc

2021-03-31 14:02:32 -05:00

geutebruck_testaction_exec.md

Minor updates to the documentation to reflect the fact that the username and password could be something other than root/admin

2020-08-17 09:12:02 -05:00

github_enterprise_secret.md

Update version info

2017-03-23 13:46:09 -05:00

goahead_ldpreload.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

goautodial_3_rce_code_injection.md

verification to verification steps

2020-01-16 10:41:12 -05:00

gravcms_exec.md

Update documentation

2021-05-04 14:12:48 +02:00

hadoop_unauth_exec.md

Change docs to reflect the truth of the "vuln"

2020-11-16 11:38:00 -06:00

hp_van_sdn_cmd_inject.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

huawei_hg532n_cmdinject.md

update documentation to point to meterpreter again

2017-04-26 17:49:08 -05:00

ibm_drm_rce.md

Update IBM DRM RCE docs

2020-06-26 11:29:59 +07:00

ibm_qradar_unauth_rce.md

add module docs

2018-07-10 11:51:57 -05:00

imperva_securesphere_exec.md

Update to use CmdStager

2019-01-08 20:07:35 -08:00

ipfire_bashbug_exec.md

…

ipfire_oinkcode_exec.md

module working and docs

2017-06-14 21:15:56 -04:00

ipfire_proxy_exec.md

md fix

2016-05-30 10:25:49 -04:00

jenkins_cli_deserialization.md

add steps for producing serialized object

2020-09-17 13:58:48 -05:00

kaltura_unserialize_cookie_rce.md

Updates to documentation per h00die

2018-01-23 12:44:39 -06:00

kaltura_unserialize_rce.md

Another minor grammer changes

2016-09-20 19:23:28 +03:00

klog_server_authenticate_user_unauth_command_injection.md

Add Klog Server authenticate.php user Unauthenticated Command Injection

2021-02-12 17:07:52 +00:00

librenms_addhost_cmd_inject.md

made suggested changes

2019-05-30 14:09:40 -05:00

librenms_collectd_cmd_inject.md

finish documentation and module

2019-08-13 09:47:24 -05:00

linksys_wvbr0_user_agent_exec_noauth.md

Clarification in product linkage and small syntax fixup in repro steps

2018-01-03 17:00:26 -06:00

linuxki_rce.md

Update linuxki_rce.md

2020-06-10 02:13:38 +03:00

logsign_exec.md

Fix uneven quotes in various documentation files

2017-08-26 19:12:48 -05:00

mailcleaner_exec.md

Update doc

2019-01-08 13:25:13 -06:00

microfocus_obr_cmd_injection.md

Update microfocus_obr_cmd_injection.md

2021-04-25 11:02:54 +08:00

microfocus_secure_messaging_gateway.md

fix install lines

2020-03-24 09:36:17 -04:00

mida_solutions_eframework_ajaxreq_rce.md

resolve qa comments

2020-09-11 17:16:10 +00:00

mobileiron_mdm_hessian_rce.md

Add module doc

2021-01-22 01:06:14 -06:00

mvpower_dvr_shell_exec.md

Add documentation

2017-02-23 07:44:45 +00:00

nagios_xi_chained_rce_2_electric_boogaloo.md

Update Docs

2018-06-29 11:08:31 -05:00

nagios_xi_chained_rce.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

nagios_xi_magpie_debug.md

nagios_xi_magpie_debug: add writable paths, improvements, cleanup, fixes

2021-03-16 07:13:55 +00:00

nagios_xi_mibs_authenticated_rce.md

Add in fixes to documentation and module from review

2021-04-16 13:14:17 -05:00

nagios_xi_plugins_check_plugin_authenticated_rce.md

Add in 5.6.5 exploitation scenario to documentation

2021-04-13 17:42:47 -05:00

nagios_xi_plugins_filename_authenticated_rce.md

Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.

2021-04-14 16:32:53 -05:00

nagios_xi_snmptrap_authenticated_rce.md

Add in CentOS 7 with NagiosXI 5.6.5 scenario

2021-04-20 14:12:56 -05:00

netgear_dgn1000_setup_unauth_exec.md

more standardizations

2020-01-16 11:32:02 -05:00

netgear_dnslookup_cmd_exec.md

Fix broken link

2018-02-02 20:08:38 -05:00

netgear_r7000_cgibin_exec.md

Update netgear_r7000_cgibin_exec docs

2018-02-02 20:23:43 -05:00

netgear_unauth_exec.md

Minor changes to module, updated documentation.

2018-10-09 20:39:00 +06:30

netsweeper_webadmin_unixlogin.md

Add Netsweeper WebAdmin unixlogin.php pre-auth RCE

2020-05-12 08:34:20 -05:00

nexus_repo_manager_el_injection.md

Fix nexus_repo_manager_el_injection.md scenario

2020-09-15 13:14:36 -05:00

op5_config_exec.md

fixes all previously identified issues

2016-06-15 20:58:04 -04:00

pandora_fms_events_exec.md

Add installation instructions to docs

2020-07-09 17:20:07 -04:00

pandora_ping_cmd_exec.md

Update documentation/modules/exploit/linux/http/pandora_ping_cmd_exec.md

2020-03-23 17:24:28 +03:00

panos_readsessionvars.md

Doc typo

2018-05-06 22:32:26 -05:00

php_imap_open_rce.md

horde imp h3 imap_open

2019-01-18 19:38:30 -05:00

pineapple_bypass_cmdinject.md

module doc standardizations

2020-01-20 21:26:59 -05:00

pineapple_preconfig_cmdinject.md

module doc standardizations

2020-01-20 21:26:59 -05:00

pulse_secure_cmd_exec.md

Code-block env(1)

2019-11-12 02:46:18 -06:00

pulse_secure_gzip_rce.md

Update the documentation

2020-12-07 10:54:20 -05:00

qnap_qcenter_change_passwd_exec.md

Fix password typo

2018-07-13 16:02:15 +10:00

rancher_server.md

example output to scenarios

2020-01-16 11:41:12 -05:00

rconfig_ajaxarchivefiles_rce.md

Correct broken or redundant CVE references

2021-04-05 13:06:50 -05:00

saltstack_salt_api_cmd_exec.md

Fix AutoCheck

2020-11-11 15:57:38 -06:00

saltstack_salt_wheel_async_rce.md

add wait time line to test output

2021-03-31 14:47:34 -05:00

samsung_srv_1670d_upload_exec.md

scenario to scenarios

2020-01-16 10:36:38 -05:00

spark_unauth_rce.md

module options to options

2020-01-16 10:49:22 -05:00

suitecrm_log_file_rce.md

Added module and documentation for SuiteCRM Log File RCE

2021-05-22 00:11:19 -05:00

supervisor_xmlrpc_exec.md

cleaned up version, and docs

2017-09-23 10:51:52 -04:00

symantec_messaging_gateway_exec.md

Adding Symantec messaging gateway rce

2017-06-10 12:23:12 +03:00

synology_dsm_smart_exec_auth.md

add docs for 410

2020-05-21 17:43:46 -04:00

tiki_calendar_exec.md

Update tiki_calendar_exec module and documentation

2016-06-22 11:17:45 -05:00

tp_link_ncxxx_bonjour_command_injection.md

msftidy_docs changes

2020-09-18 09:42:14 -05:00

trend_micro_imsva_exec.md

Adding Trend Micro IMSVA module

2017-01-18 11:34:16 +03:00

trendmicro_imsva_widget_exec.md

Fixing grammer issue

2017-10-09 22:31:13 +03:00

trendmicro_websecurity_exec.md

fixing up some styles and such

2020-06-20 12:05:48 -04:00

ueb_api_rce.md

finish up docs and 10 exploit

2018-09-10 21:08:30 -04:00

unraid_auth_bypass_exec.md

Update Unraid 6.8.0 exploit module

2020-03-21 11:44:35 +01:00

vestacp_exec.md

Fix up clarity and spelling issues in module and documentation

2020-04-13 16:28:39 -05:00

vmware_view_planner_4_6_uploadlog_rce.md

Update the exploit to use Python as its payload since this is a lot more flexible, allows Meterpreter, returns a shell faster, and we are already injecting into and executing a Python file

2021-03-14 00:00:06 -06:00

vmware_vrops_mgr_ssrf_rce.md

Update vmware_vrops_mgr_ssrf_rce documentation

2021-05-06 18:30:20 -05:00

wd_mycloud_multiupload_upload.md

Add wd_mycloud_multiupload_upload exploit

2017-11-28 07:12:00 -06:00

webmin_backdoor.md

Move unix/webapp/webmin_backdoor to linux/http

2020-01-14 00:50:04 -06:00

webmin_packageup_rce.md

removed some whitespace, added a check

2019-06-17 15:29:08 -05:00

wepresent_cmd_injection.md

Switched to vars_post in send_request_cgi and removed unnecessary documentation

2020-01-14 05:42:06 -05:00

wipg1000_cmd_injection.md

added version numbers

2017-04-22 09:45:55 -04:00

xplico_exec.md

Updatig documentation and tweaking initiate_session

2017-11-15 01:04:06 +03:00

zimbra_xxe_rce.md

Fix words because words...

2019-04-01 17:21:23 -05:00