📄 Mara CMS 7.5 Shell Upload

Python exploit for CVE-2020-25042 targeting Mara CMS version 7.5. The script automates the complete authenticated attack chain by retrieving the login shash, requesting the server-generated login salt, computing the required authentication hashes, logging in as an administrator or manager,...

Arbitrary Code Injection Over HTTP Traffic (CVE-2020-21176; CVE-2020-25042; CVE-2020-26248; CVE-2020-26712; CVE-2020-28994; CVE-2020-29284; CVE-2020-6308; CVE-2021-25912)

Arbitrary Code Injections Over HTTP Traffic...

Metasploit Wrap-Up

Windows secrets dump The following provided by Christophe De La Fuente! A common pen testing pattern is to compromise a local administrative account on a host and use it to grab Windows password hashes, kerberos tickets, and other secrets stored locally. The most common technique is to run tools...

MaraCMS 7.5 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MaraCMS Arbitrary PHP File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability in MaraCMS 7.5 and prior in...

CVE-2020-25042

creationtimestamp| type| source ---|---|--- 2020-09-25 18:36:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/maracmsuploadexec.rb 2023-12-18 05:34:47+00:00| seen| https://t.me/arpsyndicate/1923 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-25042

CVE-2020-25042 concerns Mara CMS 7.5 where an authenticated admin/manager can upload PHP via codebase/handler.php after invoking codebase/dir.php?type=filenew, enabling arbitrary code execution. The vulnerability is triggered by an authenticated session and a crafted request; public exploit detai...