-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::SMB::Client def initialize(info = {}) super(update_info(info, 'Name' => 'IBM DB2 db2rcmd.exe Command Execution Vulnerability', 'Description' => %q{ This module exploits a vulnerability in the Remote Command Server component in IBM's DB2 Universal Database 8.1. An authenticated attacker...
-
Aug 31, 2024 | 
packetstormsecurity.com | Spencer McIntyre |Jay Turla |Kris Katterjohn
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'ruby_smb/dcerpc/client' class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::SMB::Client::Authenticated include Msf::Exploit::Remote::DCERPC include Msf::Auxiliary::Report include Msf::Exploit::Remote::MsSamr::Computer include Msf::OptionalSession::SMB def initialize(info = {}) super( update_info( info, 'Name' => 'SAMR Computer...
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Exploit::Remote::TcpServer include Msf::Auxiliary::Report def initialize(info = {}) super(update_info(info, 'Name' => 'Yokogawa BKBCopyD.exe Client', 'Description' => %q{ This module allows an unauthenticated user to interact with the Yokogawa CENTUM CS3000 BKBCopyD.exe...
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::TNS include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner include Msf::Auxiliary::AuthBrute # Actually, doesn't use much here, but there's a couple handy functions.
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::SunRPCdef initialize super( 'Name' => 'Solaris KCMS + TTDB Arbitrary File Read', 'Description' => %q{ This module targets a directory traversal vulnerability in the kcms_server component from the Kodak Color Management System.
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Rex::Socket::Tcpdef initialize(info = {}) super(update_info(info, 'Name' => 'PhoenixContact PLC Remote START/STOP Command', 'Version' => '1', 'Description' => %q{ PhoenixContact Programmable Logic Controllers are built upon a variant of ProConOS.
-
Aug 31, 2024 | 
packetstormsecurity.com | Kris Katterjohn |Jay Turla
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::Tcpdef initialize(info = {}) super(update_info(info, 'Name' => 'Motorola WR850G v4.03 Credentials', 'Description' => %q{ Login credentials to the Motorola WR850G router with firmware v4.03 can be obtained via a simple GET request if issued while the administrator is logged in.
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Auxiliary::Report include Msf::Exploit::Remote::TNSdef initialize(info = {}) super(update_info(info, 'Name' => 'Oracle TNS Listener SID Brute Forcer', 'Description' => %q{ This module simply attempts to discover the protected SID.
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'rexml/document' class MetasploitModule < Msf::Auxiliary include Msf::Auxiliary::Report include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'HP ProCurve SNAC Domain Controller Credential Dumper', 'Description' => %q{ This module will extract Domain Controller credentials from vulnerable installations...
-
Aug 31, 2024 | 
packetstormsecurity.com | Jay Turla |Kris Katterjohn
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Scanner include Msf::Auxiliary::Report # TODO: figure out what these do: # o: valid command, takes no args, does nothing # B, c, F, G, I, M, U, x: all require an "instance id" and possibly other args ALLOWED_COMMANDS = %w(a A i g l p t T u w Z) def initialize...
