Jacob 7e91235551 Adding new Postgres_cmd_execution module ...

PostgreSQL from 9.3 to latest has functionality allowing the database superuser & users in the 'pg_read_server_files' group to execute OS commands. 

Explanation:
https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5

This is my first run through of a Metasploit module so I would appreciate anyone helping me clean it up. It currently works on OSX & Linux by providing a cmd stager (like cmd/unix/reverse_perl), and on windows by first starting up a PowerShell download cradle, then putting the command in the COMMAND parameter. It feels a little hacky though 😁

2019-03-20 17:38:12 +00:00

..

postgres_cmd_execution_nine_three.rb

Adding new Postgres_cmd_execution module

2019-03-20 17:38:12 +00:00

postgres_createlang.rb

use https for metaploit.com links

2017-07-24 06:26:21 -07:00