adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
30c333b30d43c49e47a42fc978cedb59cd82f1a0
metasploit-gs/modules/exploits/linux/http
T
History
Grant Willcox 7b7e521d6c Fix up a wrong type field value and set it back to 1 from 2 in the send_exploit() function, since this was causing the exploit to fail
2021-04-20 17:45:51 -05:00
..
accellion_fta_getstatus_oauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
advantech_switch_bash_env_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
airties_login_cgi_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
alcatel_omnipcx_mastercgi_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
alienvault_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
alienvault_sqli_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
apache_continuum_cmd_exec.rb
Update DisclosureDate to ISO 8601 in my modules
2018-11-16 12:18:28 -06:00
apache_couchdb_cmd_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
apache_ofbiz_deserialization_soap.rb
remove spare comma
2021-04-05 09:33:20 -05:00
apache_ofbiz_deserialization.rb
Remove the CmdStager allow list and randomize the domain
2021-03-31 08:54:37 -04:00
artica_proxy_auth_bypass_service_cmds_peform_command_injection.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
astium_sqli_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
asuswrt_lan_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
atutor_filemanager_traversal.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
axis_srv_parhand_rce.rb
Consolidate CmdStager flavors to symbols
2020-04-15 15:47:51 -05:00
belkin_login_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
bludit_upload_images_exec.rb
Fix typos and format
2019-11-11 14:47:56 -06:00
cayin_cms_ntp.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
centreon_pollers_auth_rce.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
centreon_sqli_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
centreon_useralias_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
cfme_manageiq_evm_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cisco_firepower_useradd.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
cisco_prime_inf_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
cisco_rv32x_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
cisco_ucs_cloupia_script_rce.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
cisco_ucs_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
cpi_tararchive_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
crypttech_cryptolog_login_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
cve_2019_1663_cisco_rmi_rce.rb
Add latest rubocop rules
2021-02-12 13:31:51 +00:00
dcos_marathon.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
ddwrt_cgibin_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
denyall_waf_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_authentication_cgi_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_command_php_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dcs931l_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dcs_930l_authenticated_remote_command_execution.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_diagnostic_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dir300_exec_telnet.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dir605l_captcha_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dir615_up_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dir850l_unauth_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dsl2750b_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dspw110_cookie_noauth_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dspw215_info_cgi_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_dwl_2600_command_injection.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
dlink_hedwig_cgi_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_hnap_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_hnap_header_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_hnap_login_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dlink_upnp_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dnalims_admin_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
docker_daemon_tcp.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dolibarr_cmd_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dreambox_openpli_shell.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
efw_chpasswd_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
empire_skywalker.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
esva_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
eyesofnetwork_autodiscovery_rce.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
f5_bigip_tmui_rce.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
f5_icall_cmd.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
f5_icontrol_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
f5_icontrol_rest_ssrf_rce.rb
Add F5 iControl REST CVE-2021-22986 exploit
2021-03-31 14:02:32 -05:00
foreman_openstack_satellite_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
fritzbox_echo_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
geutebruck_testaction_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
github_enterprise_secret.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
gitlist_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
goahead_ldpreload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
goautodial_3_rce_command_injection.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
gpsd_format_string.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
groundwork_monarch_cmd_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
hadoop_unauth_exec.rb
Describe the Hadoop vuln as not-a-vuln clearly
2020-11-16 11:31:59 -06:00
hp_system_management.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
hp_van_sdn_cmd_inject.rb
Migrate old uses of manual autocheck to use the new prepend autocheck
2021-02-02 10:15:46 +00:00
huawei_hg532n_cmdinject.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
ibm_drm_rce.rb
Rubocop recently landed modules continued
2021-02-25 14:13:40 +00:00
ibm_qradar_unauth_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
imperva_securesphere_exec.rb
Migrate old uses of manual autocheck to use the new prepend autocheck
2021-02-02 10:15:46 +00:00
ipfire_bashbug_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
ipfire_oinkcode_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
ipfire_proxy_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
jenkins_cli_deserialization.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
kaltura_unserialize_cookie_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
kaltura_unserialize_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
klog_server_authenticate_user_unauth_command_injection.rb
Add Klog Server authenticate.php user Unauthenticated Command Injection
2021-02-12 17:07:52 +00:00
kloxo_sqli.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
librenms_addhost_cmd_inject.rb
Update date format
2019-06-04 12:24:00 -05:00
librenms_collectd_cmd_inject.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
lifesize_uvc_ping_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linksys_apply_cgi.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linksys_e1500_apply_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linksys_themoon_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linksys_wrt54gl_apply_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linksys_wrt110_cmd_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linksys_wrt160nv2_apply_exec.rb
Zeitwerk rex folder
2021-02-08 12:24:12 +00:00
linksys_wvbr0_user_agent_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linuxki_rce.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
logsign_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
mailcleaner_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
microfocus_secure_messaging_gateway.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
mida_solutions_eframework_ajaxreq_rce.rb
resolve qa comments
2020-09-11 17:16:10 +00:00
mobileiron_mdm_hessian_rce.rb
Randomize strings
2021-01-22 16:15:16 -06:00
multi_ncc_ping_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
mutiny_frontend_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
mvpower_dvr_shell_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
nagios_xi_chained_rce_2_electric_boogaloo.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
nagios_xi_chained_rce.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
nagios_xi_magpie_debug.rb
nagios_xi_magpie_debug: add writable paths, improvements, cleanup, fixes
2021-03-16 07:13:55 +00:00
nagios_xi_mibs_authenticated_rce.rb
Fix up a wrong type field value and set it back to 1 from 2 in the send_exploit() function, since this was causing the exploit to fail
2021-04-20 17:45:51 -05:00
nagios_xi_plugins_check_plugin_authenticated_rce.rb
Add in Regex fix to ensure that really old versions of NagiosXI will still be detected as vulnerable despite unusual version naming convention
2021-04-19 14:17:05 -05:00
nagios_xi_plugins_filename_authenticated_rce.rb
Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.
2021-04-14 16:32:53 -05:00
nagios_xi_snmptrap_authenticated_rce.rb
Apply review comments and fixes to documentation and the module
2021-04-20 12:38:34 -05:00
netgear_dgn1000_setup_unauth_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_dgn1000b_setup_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_dgn2200b_pppoe_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_dnslookup_cmd_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_r7000_cgibin_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_readynas_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_unauth_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
netgear_wnr2000_rce.rb
msftidy: Fix exploit module checks for author and stack buffer overflow
2021-02-13 04:10:13 +00:00
netsweeper_webadmin_unixlogin.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
nexus_repo_manager_el_injection.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
nginx_chunked_size.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
nuuo_nvrmini_auth_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
nuuo_nvrmini_unauth_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
op5_config_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
openfiler_networkcard_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pandora_fms_events_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
pandora_fms_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pandora_fms_sqli.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
pandora_ping_cmd_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
panos_readsessionvars.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
peercast_url.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
php_imap_open_rce.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
pineapp_ldapsyncnow_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pineapp_livelog_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pineapp_test_li_conn_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pineapple_bypass_cmdinject.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pineapple_preconfig_cmdinject.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
piranha_passwd_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
pulse_secure_cmd_exec.rb
Revert "remove ruby pulse_secure_cmd_exec"
2020-11-09 20:09:12 -05:00
pulse_secure_gzip_rce.rb
Fix Gem::Package NameError with Rex::Tar::Writer
2021-04-12 18:50:31 -05:00
qnap_qcenter_change_passwd_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
raidsonic_nas_ib5220_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
railo_cfml_rfi.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
rancher_server.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
rconfig_ajaxarchivefiles_rce.rb
Rubocop recently landed modules continued
2021-02-25 14:13:40 +00:00
realtek_miniigd_upnp_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
riverbed_netprofiler_netexpress_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
saltstack_salt_api_cmd_exec.rb
Remove unused vprint_status conditional
2020-12-09 22:45:41 -06:00
saltstack_salt_wheel_async_rce.rb
Update from code review
2021-03-31 17:48:35 +02:00
samsung_srv_1670d_upload_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
seagate_nas_php_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
smt_ipmi_close_window_bof.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
sophos_wpa_iface_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
sophos_wpa_sblistpack_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
spark_unauth_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
supervisor_xmlrpc_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
symantec_messaging_gateway_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
symantec_web_gateway_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
symantec_web_gateway_file_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
symantec_web_gateway_lfi.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
symantec_web_gateway_pbcontrol.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
symantec_web_gateway_restore.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
synology_dsm_sliceupload_exec_noauth.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
synology_dsm_smart_exec_auth.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
tiki_calendar_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
tp_link_ncxxx_bonjour_command_injection.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
tp_link_sc2020n_authenticated_telnet_injection.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
tr064_ntpserver_cmdinject.rb
Update DisclosureDate to ISO 8601 in my modules
2018-11-16 12:18:28 -06:00
trend_micro_imsva_exec.rb
Update DisclosureDate to ISO 8601 in my modules
2018-11-16 12:18:28 -06:00
trendmicro_imsva_widget_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
trendmicro_sps_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
trendmicro_websecurity_exec.rb
fixing up some styles and such
2020-06-20 12:05:48 -04:00
trueonline_billion_5200w_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
trueonline_p660hn_v1_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
trueonline_p660hn_v2_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
ubiquiti_airos_file_upload.rb
Move module to coldfusion_rds_auth_bypass
2019-10-27 11:25:56 -05:00
ueb_api_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
unraid_auth_bypass_exec.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
vap2500_tools_command_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
vcms_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
vestacp_exec.rb
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
vmware_view_planner_4_6_uploadlog_rce.rb
Fix bad style again
2021-03-15 01:33:32 -05:00
wanem_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
wd_mycloud_multiupload_upload.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
webcalendar_settings_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
webid_converter.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
webmin_backdoor.rb
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
webmin_packageup_rce.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
wepresent_cmd_injection.rb
Fix up last of the module that had incorrect disclosure dates
2020-10-07 12:09:35 -05:00
wipg1000_cmd_injection.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
xplico_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
zabbix_sqli.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
zen_load_balancer_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
zenoss_showdaemonxmlconfig_exec.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
zimbra_xxe_rce.rb
Fix words because words...
2019-04-01 17:21:23 -05:00