adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ae59c4ae74242ff514b42965c8d2f63784c33af4
metasploit-gs/modules/exploits/multi/http
T
History
William Vu 3b13adba70 Hint about incorrect RAILSVERSION 
If the secret doesn't match, you might have set the wrong RAILSVERSION.
The difference is secret_token (Rails 3) vs. secret_key_base (Rails 4).
2016-08-01 09:36:25 -07:00
..
activecollab_chat.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
ajaxplorer_checkinstall_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
apache_jetspeed_file_upload.rb
Fix typo
2016-04-26 15:26:22 -05:00
apache_mod_cgi_bash_env_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
apache_roller_ognl_injection.rb
Land #6669, remove debug code from apache_roller_ognl_injection that breaks Windows
2016-03-13 14:14:10 -05:00
apprain_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
atutor_sqli.rb
remove overwritten keys from hashes
2016-04-20 07:43:57 -04:00
auxilium_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
axis2_deployer.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
bolt_file_upload.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
caidao_php_backdoor_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
cisco_dcnm_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
coldfusion_rds.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
cups_bash_env_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
cuteflow_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
dexter_casinoloader_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
drupal_drupageddon.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
eaton_nsm_code_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
eventlog_file_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
extplorer_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
familycms_less_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
freenas_exec_raw.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
gestioip_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
git_client_command_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
gitlab_shell_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
gitorious_graph.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
glassfish_deployer.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
glossword_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
glpi_install_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
horde_href_backdoor.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
hp_sitescope_issuesiebelcmd.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
hp_sitescope_uploadfileshandler.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
hp_sys_mgmt_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
hyperic_hq_script_console.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
ispconfig_php_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
jboss_bshdeployer.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
jboss_deploymentfilerepository.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
jboss_invoke_deploy.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
jboss_maindeployer.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
jboss_seam_upload_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
jenkins_script_console.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
jira_hipchat_template.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
joomla_http_header_rce.rb
Land #6644, datastore validation on assignment
2016-03-17 11:16:12 -05:00
kordil_edms_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
lcms_php_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
log1cms_ajax_create_folder.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
magento_unserialize.rb
Add vendor patch info
2016-06-02 16:41:06 -05:00
manage_engine_dc_pmp_sqli.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
manageengine_auth_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
manageengine_sd_uploader.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
manageengine_search_sqli.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
mantisbt_php_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
mediawiki_thumb.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
mma_backdoor_upload.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
mobilecartly_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
moodle_cmd_exec.rb
doesn't look like we're using the tcp mixin
2016-05-17 03:15:26 -05:00
movabletype_upgrade_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
mutiny_subnetmask_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
nas4free_php_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
netwin_surgeftp_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
nibbleblog_file_upload.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
novell_servicedesk_rce.rb
Add bugtraq reference
2016-04-14 10:23:53 +01:00
op5_license.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
op5_welcome.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
openfire_auth_bypass.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
openmediavault_cmd_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
openx_backdoor_php.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
opmanager_socialit_file_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
oracle_ats_file_upload.rb
Add Oracle Application Testing Suite exploit
2016-04-26 15:41:27 -05:00
oracle_reports_rce.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pandora_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
php_cgi_arg_injection.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
php_utility_belt_rce.rb
update php_utility_belt_rce to use MetasploitModule
2016-03-13 13:59:47 -05:00
php_volunteer_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
phpfilemanager_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
phpldapadmin_query_engine.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
phpmoadmin_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
phpmyadmin_3522_backdoor.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
phpmyadmin_preg_replace.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
phpscheduleit_start_date.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
phptax_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
phpwiki_ploticus_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
plone_popen2.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
pmwiki_pagelist.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
polarcms_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
processmaker_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
qdpm_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
rails_actionpack_inline_exec.rb
Update rails_actionpack_inline_exec
2016-07-07 15:56:50 -05:00
rails_json_yaml_code_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
rails_secret_deserialization.rb
Hint about incorrect RAILSVERSION
2016-08-01 09:36:25 -07:00
rails_web_console_v2_code_exec.rb
Fix up the disclosure date
2016-05-11 00:18:22 -05:00
rails_xml_yaml_code_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
rocket_servergraph_file_requestor_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
sflog_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
simple_backdoors_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
sit_file_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
snortreport_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
solarwinds_store_manager_auth_filter.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
sonicwall_gms_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
sonicwall_scrutinizer_methoddetail_sqli.rb
Fix some comments
2016-05-12 00:19:18 -05:00
splunk_mappy_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
splunk_upload_app_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
spree_search_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
spree_searchlogic_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
struts_code_exec_classloader.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
struts_code_exec_exception_delegator.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
struts_code_exec_parameters.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
struts_code_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
struts_default_action_mapper.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
struts_dev_mode.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
struts_dmi_exec.rb
Deprecate exploits/linux/http/struts_dmi_exec
2016-05-02 15:03:25 -05:00
struts_dmi_rest_exec.rb
Fix module desc
2016-06-06 10:40:36 -05:00
struts_include_params.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
stunshell_eval.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
stunshell_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
sun_jsws_dav_options.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
sysaid_auth_file_upload.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
sysaid_rdslogs_file_upload.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
testlink_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
tomcat_mgr_deploy.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
tomcat_mgr_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
traq_plugin_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
uptime_file_upload_1.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
uptime_file_upload_2.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
v0pcr3w_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
vbseo_proc_deutf.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
vbulletin_unserialize.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
visual_mining_netcharts_upload.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
vtiger_install_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
vtiger_php_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
vtiger_soap_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
webpagetest_upload_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
werkzeug_debug_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
wikka_spam_exec.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
x7chat2_php_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
zabbix_script_exec.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
zemra_panel_rce.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
zenworks_configuration_management_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
zenworks_control_center_upload.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00
zpanel_information_disclosure_rce.rb
Revert "Land #6812, remove broken OSVDB references"
2016-07-15 12:00:31 -05:00