adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e7e40d3eebfca0a276bfb76734771d14ead83ea6
metasploit-gs/modules/exploits/windows/http
T
History
remmons-r7 12b78c086d Update commvault_rce_cve_2025_57790_cve_2025_57791.rb 
Remove an empty line that msftidy doesn't like
2025-09-15 11:19:49 -05:00
..
adobe_robohelper_authbypass.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
advantech_iview_networkservlet_cmd_inject.rb
…
advantech_iview_unauth_rce.rb
…
ajaxpro_deserialization_rce.rb
…
altn_securitygateway.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
altn_webadmin.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
amlibweb_webquerydll_app.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_activemq_traversal_upload.rb
…
apache_chunked.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_mod_rewrite_ldap.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_modjk_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_tika_jp2_jscript.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
avaya_ccr_imageupload_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
badblue_ext_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
badblue_passthru.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
bea_weblogic_jsessionid.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
bea_weblogic_post_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
bea_weblogic_transfer_encoding.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
belkin_bulldog.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ca_arcserve_rpc_authbypass.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ca_igateway_debug.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ca_totaldefense_regeneratereports.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cayin_xpost_sql_rce.rb
…
cogent_datahub_command.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
cogent_datahub_request_headers_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
coldfusion_fckeditor.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
commvault_rce_cve_2025_57790_cve_2025_57791.rb
Update commvault_rce_cve_2025_57790_cve_2025_57791.rb
2025-09-15 11:19:49 -05:00
cyclope_ess_sqli.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
desktopcentral_deserialization.rb
…
desktopcentral_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
desktopcentral_statusupdate_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
disk_pulse_enterprise_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
disk_pulse_enterprise_get.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
diskboss_get_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
disksavvy_get_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
disksorter_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dlink_central_wifimanager_rce.rb
…
dnn_cookie_deserialization_rce.rb
…
dup_scout_enterprise_login_bof.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
dupscts_bof.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
easychatserver_seh.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
easyfilesharing_post.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
easyfilesharing_seh.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
easyftp_list.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
edirectory_host.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
edirectory_imonitor.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
efs_easychatserver_username.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
efs_fmws_userid_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ektron_xslt_exec_ws.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ektron_xslt_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ericom_access_now_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
exchange_chainedserializationbinder_rce.rb
…
exchange_ecp_dlp_policy.rb
…
exchange_ecp_viewstate.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
exchange_proxylogon_rce.rb
…
exchange_proxynotshell_rce.rb
…
exchange_proxyshell_rce.rb
…
ezserver_http.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
fdm_auth_header.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
file_sharing_wizard_seh.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
flexdotnetcms_upload_exec.rb
…
forticlient_ems_fctid_sqli.rb
…
fortilogger_arbitrary_fileupload.rb
…
generic_http_dll_injection.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
geutebrueck_gcore_x64_rce_bo.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
git_lfs_rce.rb
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
gitstack_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
gladinet_viewstate_deserialization_cve_2025_30406.rb
update check method to detected other vulnerable services
2025-05-03 14:08:49 +00:00
hp_autopass_license_traversal.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_imc_bims_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_imc_java_deserialize.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_imc_mibfileupload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_loadrunner_copyfiletoserver.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_mpa_job_acct.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
hp_nnm_getnnmdata_hostname.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_getnnmdata_icount.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_getnnmdata_maxage.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_nnmrptconfig_nameparams.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_nnmrptconfig_schdparams.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_openview5.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovalarm_lang.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovas.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovbuildpath_textfile.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovwebhelp.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovwebsnmpsrv_main.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovwebsnmpsrv_ovutil.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_ovwebsnmpsrv_uro.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_snmp.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_snmpviewer_actapp.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_toolbar_01.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_toolbar_02.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_webappmon_execvp.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_nnm_webappmon_ovjavalocale.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_openview_insight_backdoor.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_pcm_snac_update_certificates.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_pcm_snac_update_domain.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_power_manager_filename.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_power_manager_login.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_sitescope_dns_tool.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_sitescope_runomagentcommand.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hpe_sim_76_amf_deserialization.rb
…
httpdx_handlepeer.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
httpdx_tolog_format.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ia_webmail.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ibm_tivoli_endpoint_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ibm_tpmfosd_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ibm_tsm_cad_header.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
icecast_header.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
integard_password_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
intersystems_cache.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
intrasrv_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ipswitch_wug_maincfgret.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ivanti_avalanche_filestoreconfig_upload.rb
…
ivanti_epm_recordgoodapp_sqli_rce.rb
…
jira_collector_traversal.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kaseya_uploader.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kaseya_uploadimage_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kentico_staging_syncserver.rb
…
kolibri_http.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
landesk_thinkmanagement_upload_asp.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
lexmark_markvision_gfd_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
lg_simple_editor_rce_uploadvideo.rb
Added TARGETURI option
2024-08-13 20:29:30 +01:00
lg_simple_editor_rce.rb
…
magicinfo_traversal.rb
Modules: Convert SSL default option to Boolean in several modules
2025-06-23 19:38:36 +10:00
mailenable_auth_header.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
manage_engine_opmanager_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
manageengine_adaudit_plus_authenticated_rce.rb
…
manageengine_adaudit_plus_cve_2022_28219.rb
Suggestion and rubocop fixes
2024-09-05 08:49:32 -07:00
manageengine_admanager_plus_cve_2023_29084_auth_cmd_injection.rb
…
manageengine_adselfservice_plus_cve_2021_40539.rb
…
manageengine_adselfservice_plus_cve_2022_28810.rb
…
manageengine_adshacluster_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
manageengine_appmanager_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
manageengine_apps_mngr.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
manageengine_connectionid_write.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
manageengine_endpoint_central_saml_rce_cve_2022_47966.rb
…
manageengine_servicedesk_plus_cve_2021_44077.rb
…
maxdb_webdbm_database.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
maxdb_webdbm_get_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mcafee_epolicy_source.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mdaemon_worldclient_form2raw.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
minishare_get_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
miniweb_upload_wbem.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
moveit_cve_2023_34362.rb
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
navicopa_get_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netdecision_http_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netgear_nms_rce.rb
…
netmotion_mobility_mvcutil_deserialization.rb
…
northstar_c2_xss_to_agent_rce.rb
…
novell_imanager_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
novell_mdm_lfi.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
novell_messenger_acceptlang.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
nowsms.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
nscp_authenticated_rce.rb
…
oats_weblogic_console.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
octopusdeploy_deploy.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
oracle9i_xdb_pass.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
oracle_beehive_evaluation.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
oracle_beehive_prepareaudiotoplay.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
oracle_btm_writetofile.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
oracle_endeca_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
oracle_event_processing_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
osb_uname_jlist.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
peercast_url.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pgadmin_binary_path_api.rb
Refactor pgAdmin modules to use new lib
2025-04-11 15:55:46 -07:00
php_apache_request_headers_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
php_cgi_arg_injection_rce_cve_2024_4577.rb
…
plesk_mylittleadmin_viewstate.rb
…
plex_unpickle_dict_rce.rb
…
privatewire_gateway.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
prtg_authenticated_rce_cve_2023_32781.rb
…
prtg_authenticated_rce.rb
…
psoproxy91_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rabidhamster_r4_log.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rejetto_hfs_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rejetto_hfs_rce_cve_2024_23692.rb
…
sambar6_search_results.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sap_configservlet_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sap_host_control_cmd_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
sapdb_webtools.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
savant_31_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sepm_auth_bypass_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
serviio_checkstreamurl_cmd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
servu_session_cookie.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sharepoint_data_deserialization.rb
…
sharepoint_dynamic_proxy_generator_auth_bypass_rce.rb
…
sharepoint_ssi_viewstate.rb
…
sharepoint_toolpane_rce.rb
reword the language around our usage of CVE-2025-53770 to make it clear that this module is leveraging the authentication bypass for both CVE-2025-49706 and CVE-2025-53771, and the unsafe deserialization for CVE-2025-49704.
2025-08-06 15:33:57 +01:00
sharepoint_unsafe_control.rb
…
sharepoint_workflows_xoml.rb
…
shoutcast_format.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
shttpd_post.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sitecore_xp_cve_2021_42237.rb
…
sitecore_xp_cve_2025_27218.rb
Update author, rubocop, msftidy_docs
2025-03-27 09:36:10 -07:00
sitecore_xp_cve_2025_34510.rb
Uses between? for version check, clearer webshell upload
2025-09-11 11:04:34 +02:00
sitecore_xp_cve_2025_34511.rb
Uses between? for version check, clearer webshell upload
2025-09-11 11:04:34 +02:00
smartermail_rce.rb
…
softing_sis_rce.rb
…
solarwinds_fsm_userlogin.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
solarwinds_storage_manager_sql.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sonicwall_scrutinizer_sqli.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ssrs_navcorrector_viewstate.rb
…
steamcast_useragent.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sws_connection_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sybase_easerver.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
syncbreeze_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sysax_create_folder.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
telerik_rau_deserialization.rb
…
telerik_report_server_deserialization.rb
…
tomcat_cgi_cmdlineargs.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
trackercam_phparg_overflow.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trackit_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trendmicro_officescan_widget_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trendmicro_officescan.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ultraminihttp_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
umbraco_upload_aspx.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
vmware_vcenter_chargeback_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vxsrchs_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
webster_http.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ws_ftp_rce_cve_2023_40044.rb
…
xampp_webdav_upload_php.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
xitami_if_mod_since.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zentao_pro_rce.rb
…
zenworks_assetmgmt_uploadservlet.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zenworks_uploadservlet.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zoho_password_manager_pro_xml_rpc_rce.rb
…