adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
6e4ec6fbf335e99fe00843f15fc9eebb2e75cfcb
metasploit-gs/modules/exploits/linux/http
T
History
William Vu de5f335618 Fix formatting
2020-08-17 11:53:39 -05:00
..
accellion_fta_getstatus_oauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
advantech_switch_bash_env_exec.rb
This fixes broken links to the community.rapid7.com blog
2020-02-18 09:06:11 -06:00
airties_login_cgi_bof.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
alcatel_omnipcx_mastercgi_exec.rb
Change author name to nick.
2017-11-09 03:00:24 +11:00
alienvault_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
alienvault_sqli_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
apache_continuum_cmd_exec.rb
Update DisclosureDate to ISO 8601 in my modules
2018-11-16 12:18:28 -06:00
apache_couchdb_cmd_exec.rb
Correct false negative post_auth? status
2018-08-09 23:34:03 -05:00
apache_ofbiz_deserialiation.rb
Fix formatting
2020-08-17 11:53:39 -05:00
astium_sqli_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
asuswrt_lan_rce.rb
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
atutor_filemanager_traversal.rb
Fix atutor_filemanager_traversal credentials checks and clean up code
2020-06-15 12:15:00 -04:00
axis_srv_parhand_rce.rb
Consolidate CmdStager flavors to symbols
2020-04-15 15:47:51 -05:00
belkin_login_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
bludit_upload_images_exec.rb
Fix typos and format
2019-11-11 14:47:56 -06:00
cayin_cms_ntp.rb
remove debugging
2020-06-17 12:04:18 -04:00
centreon_pollers_auth_rce.rb
change message
2020-03-17 12:15:06 -05:00
centreon_sqli_exec.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
centreon_useralias_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cfme_manageiq_evm_upload_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cisco_firepower_useradd.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
cisco_prime_inf_rce.rb
Add warning about JSP deletion
2018-11-05 00:52:34 +09:00
cisco_rv32x_rce.rb
Unregister SSLCert option since it is never used in thisHTTPServer module.
2019-03-20 14:21:40 +01:00
cisco_ucs_cloupia_script_rce.rb
Backport miscellaneous fixes to my modules
2020-08-14 13:40:23 -05:00
cisco_ucs_rce.rb
make some adjustments
2019-08-29 19:49:37 +07:00
citrix_dir_traversal_rce.rb
Add Mikhail Klyuchnikov's writeup as a reference
2020-07-08 14:36:42 -05:00
cpi_tararchive_upload.rb
update checkcode
2019-06-18 15:58:57 -05:00
crypttech_cryptolog_login_exec.rb
40% done
2017-08-28 20:17:58 -04:00
cve_2019_1663_cisco_rmi_rce.rb
Move module to coldfusion_rds_auth_bypass
2019-10-27 11:25:56 -05:00
dcos_marathon.rb
40% done
2017-08-28 20:17:58 -04:00
ddwrt_cgibin_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
denyall_waf_exec.rb
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
dlink_authentication_cgi_bof.rb
40% done
2017-08-28 20:17:58 -04:00
dlink_command_php_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dcs931l_upload.rb
revisionism
2019-01-10 19:19:14 +00:00
dlink_dcs_930l_authenticated_remote_command_execution.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_diagnostic_exec_noauth.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
dlink_dir300_exec_telnet.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dir605l_captcha_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dir615_up_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dir850l_unauth_exec.rb
Clean up module
2017-11-10 18:15:22 -06:00
dlink_dsl2750b_exec_noauth.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
dlink_dspw110_cookie_noauth_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_dspw215_info_cgi_bof.rb
40% done
2017-08-28 20:17:58 -04:00
dlink_dwl_2600_command_injection.rb
remove mixins, add CVE
2020-03-27 12:37:40 -05:00
dlink_hedwig_cgi_bof.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_hnap_bof.rb
40% done
2017-08-28 20:17:58 -04:00
dlink_hnap_header_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
dlink_hnap_login_bof.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
dlink_upnp_exec_noauth.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
dnalims_admin_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
docker_daemon_tcp.rb
bypass user namespaces
2017-11-15 15:14:58 +01:00
dolibarr_cmd_exec.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
dreambox_openpli_shell.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
efw_chpasswd_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
empire_skywalker.rb
Add applicable notes to my exploit modules
2018-10-27 20:54:14 -04:00
esva_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
eyesofnetwork_autodiscovery_rce.rb
Rename the factory method for SQLi classes, and add a check on the class to instanciate
2020-06-27 14:51:54 +02:00
f5_bigip_tmui_rce.rb
Use WritableDir in execute_cmdstager, too
2020-08-14 21:07:08 -05:00
f5_icall_cmd.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
f5_icontrol_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
foreman_openstack_satellite_code_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
fritzbox_echo_exec.rb
Update CVE references for exploit modules
2018-07-08 18:46:04 -05:00
geutebruck_testaction_exec.rb
Update geutebruck_testaction_exec.rb
2020-08-15 00:56:53 +02:00
github_enterprise_secret.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
gitlist_exec.rb
40% done
2017-08-28 20:17:58 -04:00
goahead_ldpreload.rb
Small tweaks based on @bcoles feedback. Thanks!
2017-12-29 16:17:53 -06:00
goautodial_3_rce_command_injection.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
gpsd_format_string.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
groundwork_monarch_cmd_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
hadoop_unauth_exec.rb
Fix whitespace
2019-08-07 22:44:38 -05:00
hp_system_management.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
hp_van_sdn_cmd_inject.rb
Update logic for ForceExploit in my modules
2020-02-19 01:06:50 -06:00
huawei_hg532n_cmdinject.rb
Correct false negative post_auth? status
2018-08-09 23:34:03 -05:00
ibm_drm_rce.rb
Update ibm_drm_rce.rb
2020-06-26 11:38:55 +07:00
ibm_qradar_unauth_rce.rb
Fix advisory link in Qradar sploit
2020-05-09 14:59:43 +07:00
imperva_securesphere_exec.rb
Fix required USERNAME and PASSWORD
2019-03-05 21:57:42 -06:00
ipfire_bashbug_exec.rb
Refactor AKA references for modules
2018-08-31 16:56:05 -05:00
ipfire_oinkcode_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
ipfire_proxy_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
kaltura_unserialize_cookie_rce.rb
Use stylistic suggestions from rubocop
2017-11-21 14:30:13 +01:00
kaltura_unserialize_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
kloxo_sqli.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
librenms_addhost_cmd_inject.rb
Update date format
2019-06-04 12:24:00 -05:00
librenms_collectd_cmd_inject.rb
add default payload, check login
2019-08-13 13:39:15 -05:00
lifesize_uvc_ping_rce.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
linksys_apply_cgi.rb
40% done
2017-08-28 20:17:58 -04:00
linksys_e1500_apply_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
linksys_themoon_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
linksys_wrt54gl_apply_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
linksys_wrt110_cmd_exec.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
linksys_wrt160nv2_apply_exec.rb
40% done
2017-08-28 20:17:58 -04:00
linksys_wvbr0_user_agent_exec_noauth.rb
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
linuxki_rce.rb
Update linuxki_rce.rb
2020-06-10 01:59:00 +03:00
logsign_exec.rb
40% done
2017-08-28 20:17:58 -04:00
mailcleaner_exec.rb
Remove duplicate CVE for Mailcleaner module
2019-04-02 12:51:09 -05:00
microfocus_secure_messaging_gateway.rb
Set needs_cleanup flag for exploits that need it
2019-08-02 10:23:53 -05:00
multi_ncc_ping_exec.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
mutiny_frontend_upload.rb
This fixes broken links to the community.rapid7.com blog
2020-02-18 09:06:11 -06:00
mvpower_dvr_shell_exec.rb
revisionism
2019-01-10 19:19:14 +00:00
nagios_xi_authenticated_rce.rb
Incorporate additional suggestions from code review.
2020-03-09 11:56:15 +02:00
nagios_xi_chained_rce_2_electric_boogaloo.rb
Replace WsfDelay with WfsDelay - Fixes #11018
2018-11-25 04:22:11 +00:00
nagios_xi_chained_rce.rb
Set needs_cleanup flag for exploits that need it
2019-08-02 10:23:53 -05:00
nagios_xi_magpie_debug.rb
Replace multibyte
2020-05-18 16:30:40 +08:00
netgear_dgn1000_setup_unauth_exec.rb
Clean up module
2017-11-10 18:15:22 -06:00
netgear_dgn1000b_setup_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
netgear_dgn2200b_pppoe_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
netgear_dnslookup_cmd_exec.rb
Correct false negative post_auth? status
2018-08-09 23:34:03 -05:00
netgear_r7000_cgibin_exec.rb
fix msftidy errors
2018-08-28 13:12:43 +02:00
netgear_readynas_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
netgear_unauth_exec.rb
Fixing indentation.
2018-11-12 13:24:00 +08:00
netgear_wnr2000_rce.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
netsweeper_webadmin_unixlogin.rb
Backport miscellaneous fixes to my modules
2020-08-14 13:40:23 -05:00
nexus_repo_manager_el_injection.rb
Backport miscellaneous fixes to my modules
2020-08-14 13:40:23 -05:00
nginx_chunked_size.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
nuuo_nvrmini_auth_rce.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
nuuo_nvrmini_unauth_rce.rb
Fix http://seclists.org links to https://
2018-09-15 18:54:45 -05:00
op5_config_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
openfiler_networkcard_exec.rb
revisionism
2019-01-10 19:19:14 +00:00
pandora_fms_events_exec.rb
Nuke redundant force-exploit advanced option
2020-07-09 17:24:19 -04:00
pandora_fms_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pandora_fms_sqli.rb
Correct false negative post_auth? status
2018-08-09 23:34:03 -05:00
pandora_ping_cmd_exec.rb
Rubocop recently landed modules
2020-04-17 11:55:04 +01:00
panos_readsessionvars.rb
return unless res
2019-03-23 08:51:25 +00:00
peercast_url.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
php_imap_open_rce.rb
horde imp h3 imap_open
2019-01-18 19:43:45 -05:00
pineapp_ldapsyncnow_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pineapp_livelog_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
pineapp_test_li_conn_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
pineapple_bypass_cmdinject.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
pineapple_preconfig_cmdinject.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
piranha_passwd_exec.rb
Change author name to nick.
2017-11-09 03:00:24 +11:00
pulse_secure_cmd_exec.rb
Update my module documentation to the new standard
2020-04-20 20:06:52 -05:00
qnap_qcenter_change_passwd_exec.rb
revisionism
2019-01-10 19:19:14 +00:00
raidsonic_nas_ib5220_exec_noauth.rb
Remove CommandShell mixin in exploits
2018-12-12 15:43:13 -06:00
railo_cfml_rfi.rb
40% done
2017-08-28 20:17:58 -04:00
rancher_server.rb
Payload space, error handling and style"
2017-10-07 01:12:24 +02:00
rconfig_ajaxarchivefiles_rce.rb
Fix Travis-CI errors
2020-03-13 10:42:40 +01:00
realtek_miniigd_upnp_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
riverbed_netprofiler_netexpress_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
samsung_srv_1670d_upload_exec.rb
Update module and add documentation
2018-01-10 20:13:42 -06:00
seagate_nas_php_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
smt_ipmi_close_window_bof.rb
This fixes broken links to the community.rapid7.com blog
2020-02-18 09:06:11 -06:00
sophos_wpa_iface_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
sophos_wpa_sblistpack_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
spark_unauth_rce.rb
Add Imran Rashid to CVE-2018-11770 credit
2019-01-14 15:28:08 -06:00
supervisor_xmlrpc_exec.rb
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
symantec_messaging_gateway_exec.rb
40% done
2017-08-28 20:17:58 -04:00
symantec_web_gateway_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
symantec_web_gateway_file_upload.rb
Set needs_cleanup flag for exploits that need it
2019-08-02 10:23:53 -05:00
symantec_web_gateway_lfi.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
symantec_web_gateway_pbcontrol.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
symantec_web_gateway_restore.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
synology_dsm_sliceupload_exec_noauth.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
synology_dsm_smart_exec_auth.rb
add forcexploit
2020-05-21 17:39:54 -04:00
tiki_calendar_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
tp_link_sc2020n_authenticated_telnet_injection.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
tr064_ntpserver_cmdinject.rb
Update DisclosureDate to ISO 8601 in my modules
2018-11-16 12:18:28 -06:00
trend_micro_imsva_exec.rb
Update DisclosureDate to ISO 8601 in my modules
2018-11-16 12:18:28 -06:00
trendmicro_imsva_widget_exec.rb
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
trendmicro_sps_exec.rb
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
trendmicro_websecurity_exec.rb
fixing up some styles and such
2020-06-20 12:05:48 -04:00
trueonline_billion_5200w_rce.rb
add cve to billion module
2019-06-08 17:37:05 +07:00
trueonline_p660hn_v1_rce.rb
add cve to p660hn v1
2019-06-08 17:38:44 +07:00
trueonline_p660hn_v2_rce.rb
add cve to trueonline v2
2019-06-08 17:41:04 +07:00
ubiquiti_airos_file_upload.rb
Move module to coldfusion_rds_auth_bypass
2019-10-27 11:25:56 -05:00
ueb_api_rce.rb
ueb priv esc suggestion
2019-01-09 20:28:53 -05:00
unraid_auth_bypass_exec.rb
Automated Rubocop fixes
2020-04-16 17:17:02 -05:00
vap2500_tools_command_exec.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
vcms_upload.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
vestacp_exec.rb
Rubocop recently landed modules
2020-04-17 11:55:04 +01:00
wanem_exec.rb
revisionism
2019-01-10 19:19:14 +00:00
wd_mycloud_multiupload_upload.rb
add cve reference
2017-12-13 18:50:21 -06:00
webcalendar_settings_exec.rb
40% done
2017-08-28 20:17:58 -04:00
webid_converter.rb
Set needs_cleanup flag for exploits that need it
2019-08-02 10:23:53 -05:00
webmin_backdoor.rb
Update logic for ForceExploit in my modules
2020-02-19 01:06:50 -06:00
webmin_packageup_rce.rb
modified version check
2019-06-19 08:31:48 -05:00
wepresent_cmd_injection.rb
Use string interpolation and removed rundant namespace and return statement
2020-01-14 07:52:30 -05:00
wipg1000_cmd_injection.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
xplico_exec.rb
Updatig documentation and tweaking initiate_session
2017-11-15 01:04:06 +03:00
zabbix_sqli.rb
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
zen_load_balancer_exec.rb
revisionism
2019-01-10 19:19:14 +00:00
zenoss_showdaemonxmlconfig_exec.rb
Fix msftidy warnings
2020-02-26 14:56:08 +00:00
zimbra_xxe_rce.rb
Fix words because words...
2019-04-01 17:21:23 -05:00