CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...

CVE-2022-24990-TerraMaster-TOS--PHP-

This repository does not have a README...

CVE-2020-15568

CVE-2020-15568 A quick and easy POC for CVE-2020-15568. Not tested but going off of information found here: https://ssd-disclosure.com/ssd-advisory-terramaster-os-exportuser-php-remote-code-execution/...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...

terraMaster-CVE-2022-24990

terraMaster-CVE-2022-24990 Tool Introduction A rapid exploitation tool for CVE-2022-24990. Novice code. Feel free to raise issues if you have any problems. Usage main -u http://127.0.0.1:8181 -t pocexp poc Only detect information disclosure vulnerabilities. exp Attempt to upload WebShell...

CVE-2022-24990

CVE-2022-24990 Description - POC for CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation. - create by antx at 2022-04-12. Detail - The vulnerability allows a remote attacker to execute arbitrary commands on the target system. - The vulnerability...

TerraMaster TOS < 4.2.30 Server Information Disclosure

TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure. id: CVE-2022-24990 info: name: TerraMaster TOS 4.2.30 Server Information Disclosure author: dwisiswant0 severity: high description: TerraMaster NAS devices running TOS prior to version 4.2.30 are...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

TerraMaster TOS <.1.29 - Remote Code Execution

TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...

TerraMaster TOS - Unauthenticated Remote Command Execution

TerraMaster TOS = 4.2.06 is susceptible to a remote code execution vulnerability which could allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php via the Event parameter. id: CVE-2020-28188 info: name: TerraMaster TOS - Unauthenticated Remote Command Execution...

TerraMaster TOS Info Disclosure (CVE-2022-24990)

Exploits CVE-2022-24990 in TerraMaster TOS 4.2.30: User-Agent TNAS on webNasIPS leaks firmware, network config, and admin password hash PWD. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS webNasIPS info disclosure CVE-2022-24990.""" import re from kittysploit import from...

TerraMaster TOS - GetTest.php RCE Detection (CVE-2017-9328)

Detects CVE-2017-9328 by injecting a PHP webshell write via /include/ajax/GetTest.php and executing id. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS GetTest.php unauthenticated RCE CVE-2017-9328.""" import re from kittysploit import from lib.protocols.http.httpclient import...

TerraMaster NAS - makecvs.php Info Disclosure (CVE-2019-18385)

Detects CVE-2019-18385 by requesting /include/makecvs.php?Event=http and looking for Client-PORT / Client-IP headers in the response. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster NAS makecvs.php Event=http info disclosure CVE-2019-18385.""" from kittysploit import from...

TerraMaster TOS - GetTest.php RCE (CVE-2017-9328)

Exploits command injection in TerraMaster /include/ajax/GetTest.php to drop a PHP shell and open an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS GetTest.php RCE CVE-2017-9328 — opens execute session.""" import re from kittysploit import from...

TerraMaster TOS - makecvs.php Command Injection (CVE-2020-28187)

Exploits CVE-2020-28187 by writing a temporary PHP webshell via /include/makecvs.php?Event= and executing OS commands. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS makecvs.php Event RCE CVE-2020-28187 — opens execute session.""" import re impo...

TerraMaster TOS - exportUser.php Command Injection (CVE-2020-15568)

Exploits CVE-2020-15568 by injecting OS commands via /include/exportUser.php func=exec and reading redirected stdout from /include/.txt. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS exportUser.php exec RCE CVE-2020-15568 — opens execute...

TerraMaster TOS - exportUser.php RCE Detection (CVE-2020-15568)

Detects CVE-2020-15568 by executing id via /include/exportUser.php?type=3&cla=application&func=exec&opt= and reading output from /include/.txt. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS exportUser.php exec RCE CVE-2020-15568.""" import re import secrets from kittysploit import...

TerraMaster TOS - makecvs.php RCE Detection (CVE-2020-28187)

Detects CVE-2020-28187 by injecting via /include/makecvs.php?Event= to write a PHP webshell under /usr/www/.php and executing id. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS makecvs.php Event RCE CVE-2020-28187.""" import re import secrets from kittysploit import from...

Terramaster Login Panel - Detect

Terramaster login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Terramaster login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Terramaster Login Panel - Detect', 'description...

TerraMaster TOS < 4.2.30 Server Information Disclosure Detection

TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster NAS devices running TOS prior to version 4.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...