F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation (Metasploit)

F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 "F5 BIG-IQ v4.1.0.2013.0 authenticated arbitrary user password...

Apache Struts - ClassLoader Manipulation Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Apache Struts ClassLoader Manipulation Remote Code Execution', 'Description' = %q This module exploits a remote command execution...

Alienvault Open Source SIEM (OSSIM) - SQL Injection / Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "AlienVault OSSIM SQL Injection and Remote Code Execution", 'Description' = %q This module exploits an unauthenticated SQL injection...

F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 "F5 BIG-IQ v4.1.0.2013.0 authenticated arbitrary user password change", 'Description' = %q F5 BIG-IQ v4.1.0.2013.0 is...

Docker Privileged Container Kernel Escape

This module performs a container escape onto the host as the daemon user. It takes advantage of the SYSMODULE capability. If that exists and the linux headers are available to compile on the target, then we can escape onto the host. Module Options msf use...

Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF

Document Title: =============== Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1262 Video: https://www.youtube.com/watch?v=ysc75yNrfyk Patch: http://www.vulnerability-lab.com/getcontent.php?id=1254 Check:...

Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF

Document Title: =============== Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1262 Video: https://www.youtube.com/watch?v=ysc75yNrfyk Patch: http://www.vulnerability-lab.com/getcontent.php?id=1254 Check:...

Cogent DataHub Command Injection

This module exploits an injection vulnerability in Cogent DataHub prior to 7.3.5. The vulnerability exists in the GetPermissions.asp page, which makes insecure use of the datahubcommand function with user controlled data, allowing execution of arbitrary datahub commands and scripts. This module h...

Wireshark 1.8.12/1.10.5 - wiretap/mpeg.c Stack Buffer Overflow (Metasploit)

Exploit Title: Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow Date: 24/04/2014 Exploit Author: j0sm1 Vendor Homepage: www.wireshark.org Software Link: http://wireshark.askapache.com/download/win32/all-versions/ Version: 'Wireshark %q This module triggers a stack buffer overflow in...

Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer Overflow

This Metasploit module triggers a stack buffer overflow in Wireshark versions 1.8.12/1.10.5 and below by generating an malicious file. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3...

Mac OS X NFS Mount Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X NFS Mount Privilege Escalation Exploit', 'Description' = %q This exploit leverage a stack overflow vulnerabili...

AlienVault OSSIM SQL Injection and Remote Code Execution

This module exploits an unauthenticated SQL injection vulnerability affecting AlienVault OSSIM versions 4.3.1 and lower. The SQL injection issue can be abused in order to retrieve an active admin session ID. If an administrator level user is identified, remote code execution can be gained by...

MS08_067 vulnerability-vulnerability warning-the black bar safety net

This vulnerability has been exposed for a long time, here I will not say the principles, and I won't, so the direct use of metasploit operation of the bit, and large cattle, please bypass root@bt: genlist-s 10.10.10. 10.10.10.1 10.10.10.2 10.10.10.128 10.10.10.130 10.10.10.254 root@bt: nmap-sS-Pn...

mRemote Offline Password Decrypt

mRemote Offline Password Decrypt Based on Metasploit Module enummremotepwds.rb from David Maloney Autor: Adriano Marcio Monteiro E-mail: [email protected] Blog: adrianomarciomonteiro.blogspot.com.br Usage: ruby mRemoteOffPwdsDecrypt.rb confCons.xml require 'rexml/document' require...

Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

Multiplatform WLAN Enumeration and Geolocation

Enumerate wireless networks visible to the target device. Optionally geolocate the target by gathering local wireless networks and performing a lookup against Google APIs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

Adobe Flash Player Regular Expression Heap Overflow

This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger an memory corruption, which results in remote code execution under the context of...

Adobe Flash Player Regular Expression Heap Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

Cisco SSL VPN Bruteforce Login Utility

This module scans for Cisco SSL VPN web login portals and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco SSL VPN Bruteforce Logi...

vtiger CRM远程代码执行漏洞

Bugtraq ID:65758 CVE ID:CVE-2014-2268 vTiger CRM是一款基于Web以销售能力自动化SFA为主的客户关系管理系统CRM。 vTiger CRM安装脚本存在安全漏洞，允许攻击者利用漏洞提交特殊的请求，以WEB上下文执行任意命令。 0 vtiger CRM 6.0 目前没有详细解决方案： http://www.securityfocus.com/bid/66757/www.vtiger.de This module requires Metasploit: http//metasploit.com/download Current source:...