H2 Web Interface Create Alias RCE

The H2 database contains an alias function which allows for arbitrary Java code to be used. This functionality can be abused to create an exec functionality to pull our payload down and execute it. H2's web interface contains restricts MANY characters, so injecting a payload directly is not...

ABB MicroSCADA Detection (Windows SMB Login)

Detects the installed version of ABB MicroSCADA on Windows. The script logs in via smb, searches for MicroSCADA in the registry and gets the version from registry. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

ASP.NET Core/.NET Core SDK Detection (Windows SMB Login)

Detects the installed version of ASP.NET Core. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Acrobat DC (Classic Track) Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Acrobat DC Classic Track. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Acrobat Reader DC (Classic Track) Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Acrobat Reader DC Classic Track. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Acrobat DC (Continuous Track) Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Acrobat DC Continuous Track. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Brocade Fabric OS Detection (Telnet)

Detection of Brocade Fabric OS. The script sends a telnet connection request to the device and attempts to detect the presence of devices running Fabric OS and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...

U.S. Dept Of Defense: Blind SQL injection on ████████

Summary: I discovered that a post request made to https://████████/elist/viewem6.php is vulnerable to SQL injection and is quite clearly vulnerable as I was able to induce a 2 second hang on the web page. Additionally I was able to discover the mysql version with a true/false condition...

IBM Rational DOORS Web Access Detection

Detection of IBM Rational DOORS Web Access. The script sends a connection request to the server and attempts to detect IBM Rational DOORS Web Access and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

SuperAntiSpyware Product detection

The script checks if SuperAntiSpyware is installed on the target host, and, if so, detects the installed version. This is done by searching the registry using SMB SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

PowerShell Detection (Linux/Unix SSH Login)

SSH login-based detection of PowerShell. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.812746";...

PowerShell Core Detection (Windows SMB Login)

Detects the installed version of PowerShell Core. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Citrix NetScaler Detection (SSH Login)

SSH login-based detection of Citrix NetScaler. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Flir Brickstream Sensors Detection

Detection of running version of Flir Brickstream Sensors. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

RPi Cam Control Detection

Detects the installed version of RPi Cam Control. This script sends an HTTP GET request and tries to ensure the presence of RPi Cam Control SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Western Digital ShareSpace WEB GUI Detect

Detects the installed version of Western Digital ShareSpace. This script sends an HTTP GET request and tries to ensure the presence of Western Digital ShareSpace SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

TIBCO tibbr Detection

Detection of TIBCO tibbr. The script sends a connection request to the server and attempts to detect TIBCO tibbr and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cambium Networks Services Server Detection

This scripts sends an HTTP GET request to figure out whether Cambium Networks Services Server is installed on the target host, and, if so, which version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Opencast Detection (HTTP)

HTTP based detection of Opencast. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

pfSense 2.3.1_1 Remote Command Execution Exploit

pfSense versions 2.3.11 and below contain a remote command execution vulnerability post authentication in the systemgroupmanager.php page. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'pfSens...