NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution

his Metasploit module abuses a lack of authorization in the NetIQ Privileged User Manager service unifid.exe to execute arbitrary perl code. The problem exists in the ldapagnt module. The module has been tested successfully on NetIQ PUM 2.3.1 over Windows 2003 SP2, which allows to execute arbitra...

NetIQ Privileged User Manager 2.3.1 - 'ldapagnt_eval()' Perl Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

Narcissus Image Configuration Passthru Vulnerability

Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Narcissus Image Configuration Passthru

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Narcissus Image...

Narcissus Image Configuration - Passthru (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Narcissus Image...

NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...

FormatFactory 3.0.1 Buffer Overflow

!/usr/bin/python Exploit Title: FormatFactory v3.0.1 Profile File Handling Buffer Overflow Version: = 3.0.1 Date: 2012-11-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.pcfreetime.com Tested on: Windows XP SP3 Professional German Notes: - Howto: Co...

KingView Log File Parsing Buffer Overflow

This module exploits a vulnerability found in KingView use exploit/windows/fileformat/kingview/kingmesskvl msf undefinedkingmesskvl show actions ...actions... msf undefinedkingmesskvl set ACTION msf undefinedkingmesskvl show options ...show and set options... msf undefinedkingmesskvl run This...

FormatFactory 3.0.1 - Profile File Handling Buffer Overflow

!/usr/bin/python Exploit Title: FormatFactory v3.0.1 Profile File Handling Buffer Overflow Version: = 3.0.1 Date: 2012-11-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.pcfreetime.com Tested on: Windows XP SP3 Professional German Notes: - Howto: Co...

FormatFactory 3.0.1 - Profile File Handling Buffer Overflow

FormatFactory 3.0.1 - Profile File Handling Buffer Overflow !/usr/bin/python Exploit Title: FormatFactory v3.0.1 Profile File Handling Buffer Overflow Version: = 3.0.1 Date: 2012-11-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.pcfreetime.com Test...

Format Factory v3.0.1 Profile File Handling Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: FormatFactory v3.0.1 Profile File Handling Buffer Overflow Version: = 3.0.1 Date: 2012-11-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.pcfreetime.com Tested o...

Novell File Reporter (NFR) Agent FSFUI Record - Arbitrary File Upload / Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'NFR Agent FSFUI Record File Upload...

NFR Agent FSFUI Record File Upload Remote Command Execution

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130. This Metasploit module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0...

SAP /sap/bc/soap/rfc SOAP Service TH_SAPREL Function Information Disclosure

This module attempts to identify software, OS and DB versions through the SAP function THSAPREL using the /sap/bc/soap/rfc SOAP service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspire...

NFR Agent FSFUI Record File Upload Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'NFR Agent FSFUI Record File Upload...

NFR Agent SRS Record Arbitrary Remote File Access

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to retrieve arbitrary files via a request to /FSF/CMD with a SRS Record with OPERATION 4 and CMD 103, specifying a full pathname. This module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0.2 a...

OpenVAS gsad Web Interface Login Utility

This module simply attempts to login to an OpenVAS gsad interface using a specific user/pass. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenVAS gsad Web Interface Login Utility',...

OpenVAS OMP Login Utility

This module attempts to authenticate to an OpenVAS OMP service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenVAS OMP Login Utility', 'Description' = 'This module attempts to authenticate...

NeXpose API Interface Login Utility

This module simply attempts to login to a NeXpose API interface using a specific user/pass. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NeXpose API Interface Login Utility', 'Description' =...

Metasploit RPC Interface Login Utility

This module simply attempts to login to a Metasploit RPC interface using a specific user/pass. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Metasploit RPC Interface Login Utility',...