exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files Date: 2016-07-09

MS16-016 mrxdav.sys WebDav Local Privilege Escalation

Posted Jul 9, 2016

Authored by Tamas Koczka | Site metasploit.com

This Metasploit module exploits the vulnerability in mrxdav.sys described by MS16-016. The module will spawn a process on the target system and elevate it's privileges to NT AUTHORITY\SYSTEM before executing the specified payload within the context of the elevated process.

tags | exploit

advisories | CVE-2016-0051

SHA-256 | e24a8e1576709a98239c9285822b5b942b6fa9f480df031f0d2f8071ad7bc1bc

Download | Favorite | View

Ruby On Rails ActionPack Inline ERB Code Execution

Posted Jul 9, 2016

Authored by RageLtMan | Site metasploit.com

This Metasploit module exploits a remote code execution vulnerability in the inline request processor of the Ruby on Rails ActionPack component. This vulnerability allows an attacker to process ERB to the inline JSON processor, which is then rendered, permitting full RCE within the runtime, without logging an error condition.

tags | exploit, remote, code execution, ruby

advisories | CVE-2016-2098

SHA-256 | d2de2c6b1bb4cb5ee53de8e0c3f1d39c69fd1da76899559c6c2efabc0fe0d5bb

Download | Favorite | View