The EICAR Encoder

This encoder merely replaces the given payload with the EICAR test string. Note, this is sure to ruin your payload. Any content-aware firewall, proxy, IDS, or IPS that follows anti-virus standards should alert and do what it would normally do when malware is transmitted across the wire. This modu...

Hacker's Dome - Gamification the Information Security

When it comes to Information Security, there's a great way to learn, train and keep sharp your skills. This can be done using gamification mechanics to speed up the learning curve and improve retention rate. Capture The Flag competitions use gamification mechanics and represent one of the best wa...

Fitnesse Wiki Remote Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits a vulnerability found in Fitnesse Wiki, version...

Fitnesse Wiki - Remote Command Execution (Metasploit)

Fitnesse Wiki - Remote Command Execution Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits ...

Fitnesse Wiki - Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Fitnesse Wiki Remote Command Execution', 'Description' = %q This module exploits a vulnerability found in Fitnesse Wiki, version...

SePortal 2.5 SQL Injection / Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "SePortal SQLi Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in SePortal version 2.5. When...

Linux Execute Command

A very small shellcode for executing commands. This module is sometimes helpful for testing purposes. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 52 includ...

Firefox Gather Cookies from Privileged JavaScript Shell

This module allows collection of cookies from a Firefox Privileged JavaScript Shell. Module Options msf use post/firefox/gather/cookies msf undefinedcookies show actions ...actions... msf undefinedcookies set ACTION msf undefinedcookies show options ...show and set options... msf undefinedcookies...

Linux Execute Command

A very small shellcode for executing commands. This module is sometimes helpful for testing purposes as well as on targets with extremely limited buffer space. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source:...

FreePBX - 'config.php' Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "FreePBX config.php Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in FreePBX version 2.9, 2.10...

FreePBX config.php Remote Code Execution Vulnerability

This Metasploit module exploits a vulnerability found in FreePBX version 2.9, 2.10, and 2.11. It's possible to inject arbitrary PHP functions and commands in the "/admin/config.php" parameters "function" and "args". This module requires Metasploit: http//metasploit.com/download Current source:...

LifeSize UVC Authenticated Remote Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "LifeSize UVC Authenticated RCE via Ping", 'Description' = %q When authenticated as an administrator on LifeSize UVC 1.2.6, an attacke...

LifeSize UVC Authenticated Remote Command Execution

When authenticated as an administrator on LifeSize UVC 1.2.6, an attacker can abuse the ping diagnostic functionality to achieve remote command execution as the www-data user or equivalent. This module requires Metasploit: http//metasploit.com/download Current source:...

Horde Framework Unserialize PHP Code Execution

This Metasploit module exploits a php unserialize vulnerability in Horde versions 5.1.1 and below which could be abused to allow unauthenticated users to execute arbitrary code with the permissions of the web server. The dangerous unserialize exists in the 'lib/Horde/Variables.php' file. The...

Array Networks vAPV and vxAG - Private Key Privilege Escalation / Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class Metasploit3 "Array Networks vAPV and vxAG Private Key Privelege Escalation Code Execution", 'Description' = %q This module...

Horde Framework - Unserialize PHP Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Horde Framework Unserialize PHP Code Execution', 'Description' = %q This module exploits a php unserialize vulnerability in Horde...

FreePBX config.php Remote Code Execution

This module exploits a vulnerability found in FreePBX version 2.9, 2.10, and 2.11. It's possible to inject arbitrary PHP functions and commands in the "/admin/config.php" parameters "function" and "args". Module Options msf use exploit/unix/webapp/freepbx/configexec msf undefinedconfigexec show...

Linux Reboot

A very small shellcode for rebooting the system. This payload is sometimes helpful for testing purposes or executing other payloads that rely on initial startup procedures. This module requires Metasploit: https://metasploit.com/download Current source:...

MS14-012 Internet Explorer TextRange Use-After-Free

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-012 Internet Explorer TextRange Use-After-Free", 'Description' = %q This module exploits a use-after-free vulnerability found in...

Quantum DXi V1000 SSH Private Key Exposure

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class Metasploit3 'Quantum DXi V1000 SSH Private Key Exposure', 'Description' = %q Quantum ships a public/private key pair on DXi V100...