AlienVault OSSIM SQL Injection and Remote Code Execution

This module exploits an unauthenticated SQL injection vulnerability affecting AlienVault OSSIM versions 4.3.1 and lower. The SQL injection issue can be abused in order to retrieve an active admin session ID. If an administrator level user is identified, remote code execution can be gained by...

MS08_067 vulnerability-vulnerability warning-the black bar safety net

This vulnerability has been exposed for a long time, here I will not say the principles, and I won't, so the direct use of metasploit operation of the bit, and large cattle, please bypass root@bt: genlist-s 10.10.10. 10.10.10.1 10.10.10.2 10.10.10.128 10.10.10.130 10.10.10.254 root@bt: nmap-sS-Pn...

mRemote Offline Password Decrypt

mRemote Offline Password Decrypt Based on Metasploit Module enummremotepwds.rb from David Maloney Autor: Adriano Marcio Monteiro E-mail: [email protected] Blog: adrianomarciomonteiro.blogspot.com.br Usage: ruby mRemoteOffPwdsDecrypt.rb confCons.xml require 'rexml/document' require...

Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

Multiplatform WLAN Enumeration and Geolocation

Enumerate wireless networks visible to the target device. Optionally geolocate the target by gathering local wireless networks and performing a lookup against Google APIs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

Adobe Flash Player Regular Expression Heap Overflow

This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger an memory corruption, which results in remote code execution under the context of...

Adobe Flash Player Regular Expression Heap Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

Cisco SSL VPN Bruteforce Login Utility

This module scans for Cisco SSL VPN web login portals and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco SSL VPN Bruteforce Logi...

vtiger CRM远程代码执行漏洞

Bugtraq ID:65758 CVE ID:CVE-2014-2268 vTiger CRM是一款基于Web以销售能力自动化SFA为主的客户关系管理系统CRM。 vTiger CRM安装脚本存在安全漏洞，允许攻击者利用漏洞提交特殊的请求，以WEB上下文执行任意命令。 0 vtiger CRM 6.0 目前没有详细解决方案： http://www.securityfocus.com/bid/66757/www.vtiger.de This module requires Metasploit: http//metasploit.com/download Current source:...

MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free

This Metasploit module exploits an use after free condition on Internet Explorer as used in the wild on the "Operation SnowMan" in February 2014. The module uses Flash Player 12 in order to bypass ASLR and finally DEP. This module requires Metasploit: http//metasploit.com/download Current source:...

Microsoft Internet Explorer - CMarkup Use-After-Free (MS14-012) (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free", 'Description' = %q This module exploits an use after free condition on...

Unitrends Enterprise Backup 7.3.0 - Root Remote Code Execution (Metasploit)

Unitrends Enterprise Backup 7.3.0 - Root Remote Code Execution Metasploit Unitrends Enterprise Backup 7.3.0 Multiple vulnerabilities exist within this piece of software. The largest one is likely the fact that the ‘auth’ string used for authorization isn’t random at all. After authentication, any...

Unitrends Enterprise Backup 7.3.0 - Root Remote Code Execution (Metasploit)

Unitrends Enterprise Backup 7.3.0 Multiple vulnerabilities exist within this piece of software. The largest one is likely the fact that the ‘auth’ string used for authorization isn’t random at all. After authentication, any requests made by the browser send no cookies and only check this ‘auth’...

Unitrends Unauthenticated Root Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Unitrends Unauthenticated Root RCE", 'Description' = %q , 'License' = MSFLICENSE, 'Author' = 'Brandon Perry ' discovery/metasploit...

Kvasir - Penetration Testing Data Management Tool

Penetration Testing Data Management can be a nightmware, because well you generate a LOT of data and some information when conducing a penetration test, especially using tools – they return lots of actual and potential vulnerabilitites to review. Port scanners can return thousands of ports for ju...

PhpMyAdmin exploits concludes With Metasploit-vulnerability warning-the black bar safety net

A: affects versions: 3.5. x 3.5.8.1 and 4.0.0 4.0.0-rc3 Overview: PhpMyAdmin presence of a PREGREPLACEEVAL vulnerability Use module: exploit/multi/http/phpmyadminpregreplace CVE: CVE-2 0 1 3-3 2 3 8 II: effects version: phpMyAdmin v3. 5. 2. 2 Overview: PhpMyAdmin存在serversync.php Backdoor...

Adobe Reader for Android addJavascriptInterface Exploit

Adobe Reader versions less than 11.2.0 exposes insecure native interfaces to untrusted javascript in a PDF. This module embeds the browser exploit from android/webviewaddjavascriptinterface into a PDF to get a command shell on vulnerable versions of Reader. Module Options msf use...

Firefox Gather Passwords from Privileged JavaScript Shell

This module allows collection of passwords from a Firefox Privileged JavaScript Shell. Module Options msf use post/firefox/gather/passwords msf undefinedpasswords show actions ...actions... msf undefinedpasswords set ACTION msf undefinedpasswords show options ...show and set options... msf...

Mac OS X NFS Mount Privilege Escalation Exploit

This exploit leverages a stack buffer overflow vulnerability to escalate privileges. The vulnerable function nfsconvertoldnfsargs does not verify the size of a user-provided argument before copying it to the stack. As a result, by passing a large size as an argument, a local user can overwrite th...

eScan Web Management Console Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "eScan Web Management Console Command Injection", 'Description' = %q This module exploits a command injection vulnerability found in t...