HP OpenView OmniBack II Command Execution

This module uses a vulnerability in the OpenView Omniback II service to execute arbitrary commands. This vulnerability was discovered by DiGiT and his code was used as the basis for this module. For Microsoft Windows targets, due to module limitations, use the "unix/cmd/generic" payload and set C...

WinVNC Web Server GET Overflow

This module exploits a buffer overflow in the AT&T WinVNC version use exploit/windows/vnc/winvnc/httpget msf undefinedhttpget show actions ...actions... msf undefinedhttpget set ACTION msf undefinedhttpget show options ...show and set options... msf undefinedhttpget run This module requires...

MS00-094 Microsoft IIS Phone Book Service Overflow

This is an exploit for the Phone Book Service /pbserver/pbserver.dll described in MS00-094. By sending an overly long URL argument for phone book updates, it is possible to overwrite the stack. This module has only been tested against Windows 2000 SP1. Module Options msf use...

GAMSoft TelSrv 1.5 Username Buffer Overflow

This module exploits a username sprintf stack buffer overflow in GAMSoft TelSrv 1.5. Other versions may also be affected. The service terminates after exploitation, so you only get one chance! Module Options msf use exploit/windows/telnet/gamsoft/telsrvusername msf undefinedtelsrvusername show...

UoW pop2d Remote File Retrieval Vulnerability

This module exploits a vulnerability in the FOLD command of the University of Washington ipop2d service. By specifying an arbitrary folder name it is possible to retrieve any file which is world or group readable by the user ID of the POP account. This vulnerability can only be exploited with a...

WU-FTPD SITE EXEC/INDEX Format String Vulnerability

This module exploits a format string vulnerability in versions of the Washington University FTP server older than 2.6.1. By executing specially crafted SITE EXEC or SITE INDEX commands containing format specifiers, an attacker can corrupt memory and execute arbitrary code. Module Options msf use...

UoW IMAP Server LSUB Buffer Overflow

This module exploits a buffer overflow in the 'LSUB' command of the University of Washington IMAP service. This vulnerability can only be exploited with a valid username and password. Module Options msf use exploit/linux/imap/imap/uwlsub msf undefineduwlsub show actions ...actions... msf...

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

This module abuses two flaws - a metacharacter injection vulnerability in the HTTP management server of RedHat 6.2 systems running the Piranha LVS cluster service and GUI rpm packages: piranha and piranha-gui. The vulnerability allows an authenticated attacker to execute arbitrary commands as the...

Matt Wright guestbook.pl Arbitrary Command Execution

The Matt Wright guestbook.pl use exploit/unix/webapp/guestbook/ssiexec msf undefinedssiexec show actions ...actions... msf undefinedssiexec set ACTION msf undefinedssiexec show options ...show and set options... msf undefinedssiexec run This module requires Metasploit:...

War-FTPD 1.65 Username Overflow

This module exploits a buffer overflow found in the USER command of War-FTPD 1.65. Module Options msf use exploit/windows/ftp/warftpd/165user msf undefined165user show actions ...actions... msf undefined165user set ACTION msf undefined165user show options ...show and set options... msf...

War-FTPD 1.65 Password Overflow

This exploits the buffer overflow found in the PASS command in War-FTPD 1.65. This particular module will only work reliably against Windows 2000 targets. The server must be configured to allow anonymous logins for this exploit to succeed. A failed attempt will bring down the service completely...