Drazen Popovic

Aug 31, 2024 | packetstormsecurity.com | Bojan Zdrnja |Brandon Perry |Metasploit Module |Drazen Popovic

### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##require 'nexpose'class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient include Msf::Auxiliary::Reportdef initialize(info = {}) super( update_info( info, 'Name' => 'Nexpose XXE Arbitrary File Read', 'Description' => %q{ Nexpose v5.7.2 and prior is vulnerable to a XML External Entity attack via a number of vectors.