adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2d4ab992efe12aad949b22eeb1ffc13a6c3dcec4
metasploit-gs/modules/exploits/multi/http
T
History
bwatters-r7 76ee5556b8 Land #11833, moodle_cmd_exec nil check 
Merge branch 'land-11833' into upstream-master
2019-05-20 11:10:19 -07:00
..
activecollab_chat.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ajaxplorer_checkinstall_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
apache_activemq_upload_jsp.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
apache_jetspeed_file_upload.rb
Land #11483, update various modules to reflect current best practices
2019-02-25 12:21:57 -08:00
apache_mod_cgi_bash_env_exec.rb
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
apache_roller_ognl_injection.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
apprain_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
atutor_sqli.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
auxilium_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
axis2_deployer.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
bassmaster_js_injection.rb
Fix #9307, credit to @r0610205
2017-12-18 03:55:01 -06:00
bolt_file_upload.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
builderengine_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
caidao_php_backdoor_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cisco_dcnm_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
clipbucket_fileupload_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
cmsms_showtime2_rce.rb
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
2019-03-27 13:23:35 -07:00
cmsms_upload_rename_rce.rb
Land #10405, Cleanup dropped files for CMSMS
2018-08-01 12:46:44 -07:00
coldfusion_ckeditor_file_upload.rb
Land #11206, add coldfusion ckeditor file upload
2019-01-10 05:30:05 -08:00
coldfusion_rds.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
confluence_widget_connector.rb
Land #11717, exploit/multi/http/confluence_widget_connector
2019-04-18 10:17:00 -07:00
cups_bash_env_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
cuteflow_upload_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
dexter_casinoloader_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
drupal_drupageddon.rb
Fix #9215, minor style nitpick
2018-01-03 23:11:51 -06:00
eaton_nsm_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
eventlog_file_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
extplorer_upload_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
familycms_less_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
freenas_exec_raw.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
gestioip_exec.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
getsimplecms_unauth_code_exec.rb
Land #11802, add GetSimple CMS RCE module
2019-05-16 09:33:27 -07:00
git_client_command_exec.rb
Land #10828, git submodule url exec CVE-2018-17456
2018-11-14 10:51:16 -08:00
git_submodule_command_exec.rb
Land #11635, Authors check for msftidy
2019-03-29 08:51:00 -07:00
git_submodule_url_exec.rb
Land #11635, Authors check for msftidy
2019-03-29 08:51:00 -07:00
gitlab_shell_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
gitlist_arg_injection.rb
Land #10278, gitlist_arg_injection fixes
2018-07-12 17:05:33 -07:00
gitorious_graph.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
glassfish_deployer.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
glossword_upload_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
glpi_install_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
horde_form_file_upload.rb
Land #11657, add Horde form file upload
2019-04-09 11:50:36 -07:00
horde_href_backdoor.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
hp_sitescope_issuesiebelcmd.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
hp_sitescope_uploadfileshandler.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
hp_sys_mgmt_exec.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
hyperic_hq_script_console.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
ibm_openadmin_tool_soap_welcomeserver_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
ispconfig_php_exec.rb
40% done
2017-08-28 20:17:58 -04:00
jboss_bshdeployer.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
jboss_deploymentfilerepository.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
jboss_invoke_deploy.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
jboss_maindeployer.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
jboss_seam_upload_exec.rb
40% done
2017-08-28 20:17:58 -04:00
jenkins_metaprogramming.rb
Land #11606, jenkins_metaprogramming fixes
2019-03-21 09:23:45 -07:00
jenkins_script_console.rb
Land #10873, Add notes to exploit modules
2018-11-02 12:13:37 -07:00
jenkins_xstream_deserialize.rb
Land #9423, PSH for jenkins_xstream_deserialize
2018-03-27 14:21:47 -05:00
jira_hipchat_template.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
jira_plugin_upload.rb
Land #11784, Fix NoMethodError in jira_plugin_upload exploit module
2019-04-29 09:02:34 -07:00
joomla_http_header_rce.rb
40% done
2017-08-28 20:17:58 -04:00
kordil_edms_upload_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
lcms_php_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
log1cms_ajax_create_folder.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
magento_unserialize.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
makoserver_cmd_exec.rb
Bump ranking to Excellent
2017-11-15 15:00:47 -06:00
manage_engine_dc_pmp_sqli.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
manageengine_auth_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
manageengine_sd_uploader.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
manageengine_search_sqli.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
mantisbt_manage_proj_page_rce.rb
Land #9878, Add MSF module for EDB 6768, Mantis <= v1.1.3 Post-auth RCE
2018-05-09 17:48:53 -07:00
mantisbt_php_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
mediawiki_syntaxhighlight.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
mediawiki_thumb.rb
40% done
2017-08-28 20:17:58 -04:00
metasploit_static_secret_key_base.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
metasploit_webui_console_command_execution.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
mma_backdoor_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
mobilecartly_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
monstra_fileupload_exec.rb
Land #10231, Monstra Fileupload Exec
2018-07-12 11:24:02 -05:00
moodle_cmd_exec.rb
Land #11833, moodle_cmd_exec nil check
2019-05-20 11:10:19 -07:00
movabletype_upgrade_exec.rb
40% done
2017-08-28 20:17:58 -04:00
mutiny_subnetmask_exec.rb
Land #11107, double negative logic cleanup
2018-12-11 18:32:32 -08:00
nas4free_php_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
navigate_cms_rce.rb
Land #10704, Navigate CMS Unauthenticated RCE
2018-10-04 04:48:35 -07:00
netwin_surgeftp_exec.rb
Land #10873, Add notes to exploit modules
2018-11-02 12:13:37 -07:00
nibbleblog_file_upload.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
novell_servicedesk_rce.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
nuuo_nvrmini_upgrade_rce.rb
Land #11072, Add nuuo_nvrmini_upgrade_rce
2019-02-06 20:32:33 -08:00
op5_license.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
op5_welcome.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
openfire_auth_bypass.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
openmediavault_cmd_exec.rb
40% done
2017-08-28 20:17:58 -04:00
openx_backdoor_php.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
opmanager_socialit_file_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
oracle_ats_file_upload.rb
Land #11483, update various modules to reflect current best practices
2019-02-25 12:21:57 -08:00
oracle_reports_rce.rb
40% done
2017-08-28 20:17:58 -04:00
oracle_weblogic_wsat_deserialization_rce.rb
Land #9379, Oracle Weblogic RCE exploit and documentation
2018-01-26 18:08:56 -06:00
orientdb_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
oscommerce_installer_unauth_code_exec.rb
Land #10207, msftidy fixes
2018-06-26 12:40:50 -07:00
pandora_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
phoenix_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
php_cgi_arg_injection.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
php_utility_belt_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
php_volunteer_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
phpfilemanager_rce.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
phpldapadmin_query_engine.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
phpmailer_arg_injection.rb
Land #10873, Add notes to exploit modules
2018-11-02 12:13:37 -07:00
phpmoadmin_exec.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
phpmyadmin_3522_backdoor.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
phpmyadmin_lfi_rce.rb
Land #10487, add php5 session file target
2018-08-27 08:49:42 -07:00
phpmyadmin_null_termination_exec.rb
Land #10527, Fix msftdiy EDB link check, enable HTTPS
2018-08-27 08:53:05 -07:00
phpmyadmin_preg_replace.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
phpscheduleit_start_date.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
phptax_exec.rb
40% done
2017-08-28 20:17:58 -04:00
phpwiki_ploticus_exec.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
pimcore_unserialize_rce.rb
Land #11697, add Pimcore unserialize RCE
2019-04-29 06:55:48 -07:00
playsms_filename_exec.rb
Land #9944, playsms_filename_exec.rb
2018-05-07 09:35:08 -07:00
playsms_uploadcsv_exec.rb
Land #9988, playsms_uploadcsv_exec
2018-05-07 09:35:08 -07:00
plone_popen2.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pmwiki_pagelist.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
polarcms_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
processmaker_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
processmaker_plugin_upload.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
qdpm_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
rails_actionpack_inline_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
rails_double_tap.rb
Land #11779, add Rails Doubletap Dev mode RCE
2019-05-01 06:38:41 -07:00
rails_dynamic_render_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
rails_json_yaml_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
rails_secret_deserialization.rb
Land #10275, Update missing CVE references for exploit modules
2018-07-12 11:24:01 -05:00
rails_web_console_v2_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
rails_xml_yaml_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
rocket_servergraph_file_requestor_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
sflog_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
shopware_createinstancefromnamedarguments_rce.rb
Land #11828, Add CVE-2017-18357: Shopware Object Instantiation
2019-05-17 16:25:07 -07:00
simple_backdoors_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
sit_file_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
snortreport_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
solarwinds_store_manager_auth_filter.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
sonicwall_gms_upload.rb
40% done
2017-08-28 20:17:58 -04:00
sonicwall_scrutinizer_methoddetail_sqli.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
splunk_mappy_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
splunk_upload_app_exec.rb
Land #11579, Add support for splunk 7.2.4 to splunk_upload_app_exec
2019-03-29 14:24:48 -07:00
spree_search_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
spree_searchlogic_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts2_code_exec_showcase.rb
Land #8727, CVE-2017-9791 exploit
2018-05-17 08:16:33 -07:00
struts2_content_type_ognl.rb
40% done
2017-08-28 20:17:58 -04:00
struts2_namespace_ognl.rb
Land #11127, Fix TARGETURI support in struts2_namespace_ognl
2018-12-15 07:35:20 -08:00
struts2_rest_xstream.rb
Land #11859, struts2_rest_xstream style fix
2019-05-20 10:42:49 -07:00
struts_code_exec_classloader.rb
Land #11330, Fix HTTP/SMB mixin order to restore SSL option
2019-01-29 15:56:24 -08:00
struts_code_exec_exception_delegator.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts_code_exec_parameters.rb
Land #10038, struts_code_exec_parameters EXE fix
2018-05-17 08:16:33 -07:00
struts_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts_default_action_mapper.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts_dev_mode.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts_dmi_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts_dmi_rest_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
struts_include_params.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
stunshell_eval.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
stunshell_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
sun_jsws_dav_options.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
sysaid_auth_file_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
sysaid_rdslogs_file_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
testlink_upload_exec.rb
Land #11234, @bcoles revisionism
2019-01-11 18:17:42 -08:00
tomcat_jsp_upload_bypass.rb
more style cleanup for tomcat_jsp_upload_bypass
2017-10-11 15:53:35 -05:00
tomcat_mgr_deploy.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
tomcat_mgr_upload.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
traq_plugin_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
trendmicro_threat_discovery_admin_sys_time_cmdi.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
uptime_file_upload_1.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
uptime_file_upload_2.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
v0pcr3w_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
vbseo_proc_deutf.rb
Land #10275, Update missing CVE references for exploit modules
2018-07-12 11:24:01 -05:00
vbulletin_unserialize.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
visual_mining_netcharts_upload.rb
Land #10505, post-auth and default creds info
2018-10-24 17:09:28 -05:00
vtiger_install_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
vtiger_logo_upload_exec.rb
Land #10060, vTiger CRM v6.3.0 Upload RCE
2018-07-30 10:34:17 -07:00
vtiger_php_exec.rb
Minor tweaks...
2017-09-08 10:04:47 -05:00
vtiger_soap_upload.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
webnms_file_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
webpagetest_upload_exec.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
werkzeug_debug_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
wikka_spam_exec.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
wp_crop_rce.rb
Land #11587, add Wordpress core RCE module
2019-04-04 13:25:48 -07:00
wp_ninja_forms_unauthenticated_file_upload.rb
Land #10728, metadata updates for @rastating
2018-10-02 11:46:30 -07:00
wp_responsive_thumbnail_slider_upload.rb
Land #10383, Add WP Responsive Thumbnail Slider Plugin Exploit Module
2018-07-26 21:56:35 -07:00
x7chat2_php_exec.rb
Land #10299, Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
zabbix_script_exec.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
zemra_panel_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
zenworks_configuration_management_upload.rb
Land #10649, https://seclists.org references
2018-09-17 15:09:39 -07:00
zenworks_control_center_upload.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00
zpanel_information_disclosure_rce.rb
55 pages of spelling done
2017-09-07 21:18:50 -04:00