tags | exploit, web, code execution, ruby SHA-256 | 0aed762884874a2a56109540ad0db42b6eefad643e2cf8d5c9179b0f1d8783a6 Download | Favorite | View Metasploit Web UI Diagnostic Console Command Execution Posted Authored by Justin Steven | Site This Metasploit module is based on exploits/multi/http/rails_secret_deserialization.

Knowledge of the static secret_key_base value allows for deserialization of a crafted Ruby Object, achieving code execution. These Weekly Releases introduced a static secret_key_base value. This Metasploit module exploits the Web UI for Metasploit Community, Express and Pro where one of a certain set of Weekly Releases have been applied. tags | exploit advisories | CVE-2020-7384 SHA-256 | 47170fa2c6f60c3fc00bcf7d141f9846d5a4832fd8d4f861bb23346abf01ef02 Download | Favorite | View Metasploit Web UI Static secret_key_base Value Posted Authored by joernchen, Justin Steven | Site Affected includes Metasploit Framework versions 6.0.11 and below and Metasploit Pro versions 4.18.0 and below. This Metasploit module exploits a command injection vulnerability in Metasploit Framework's msfvenom payload generator when using a crafted APK file as an Android payload template. tags | exploit advisories | CVE-2020-7384 SHA-256 | 0d9c5f7dc903dd1d7e2dd33b50690e3be7b460458dacf13578f2a28fa5ba3ec3 Download | Favorite | View Rapid7 Metasploit Framework msfvenom APK Template Command Injection Posted Authored by Justin Steven | Site Metasploit Framework version 6.0.11 msfvenom APK template command injection exploit. tags | exploit, shell, perl advisories | CVE-2021-22204 SHA-256 | 6faaab2f2450fabd11bd922db38c56424cff69369eb7b6d4c402f570e3a96b13 Download | Favorite | View Metasploit Framework 6.0.11 Command Injection Posted Authored by Justin Steven The DjVu image can be embedded in a wrapper image using the HasselbladExif EXIF field.

The injection is used to execute a shell command using Perl backticks. This Metasploit module exploits a Perl injection vulnerability in the DjVu ANT parsing code of ExifTool versions 7.44 through 12.23 inclusive. ExifTool DjVu ANT Perl Injection Posted Authored by Justin Steven, William Bowling | Site

Exiftool apk