automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -6487,6 +6487,44 @@
     "notes": {
     }
   },
+  "auxiliary_admin/smb/webexec_command": {
+    "name": "WebEx Remote Command Execution Utility",
+    "full_name": "auxiliary/admin/smb/webexec_command",
+    "rank": 300,
+    "disclosure_date": null,
+    "type": "auxiliary",
+    "author": [
+      "Ron Bowes <ron@skullsecurity.net>"
+    ],
+    "description": "This module enables the execution of a single command as System by exploiting a remote\n        code execution vulnerability in Cisco's WebEx client software.",
+    "references": [
+      "URL-https://webexec.org",
+      "CVE-2018-15442"
+    ],
+    "is_server": false,
+    "is_client": false,
+    "platform": "",
+    "arch": "",
+    "rport": 445,
+    "autofilter_ports": [
+      139,
+      445
+    ],
+    "autofilter_services": [
+      "netbios-ssn",
+      "microsoft-ds"
+    ],
+    "targets": null,
+    "mod_time": "2018-10-24 16:18:17 +0000",
+    "path": "/modules/auxiliary/admin/smb/webexec_command.rb",
+    "is_install_path": true,
+    "ref_name": "admin/smb/webexec_command",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+    }
+  },
   "auxiliary_admin/sunrpc/solaris_kcms_readfile": {
     "name": "Solaris KCMS + TTDB Arbitrary File Read",
     "full_name": "auxiliary/admin/sunrpc/solaris_kcms_readfile",
@@ -114983,6 +115021,46 @@
     "notes": {
     }
   },
+  "exploit_windows/local/webexec": {
+    "name": "WebEx Local Service Permissions Exploit",
+    "full_name": "exploit/windows/local/webexec",
+    "rank": 400,
+    "disclosure_date": "2018-10-09",
+    "type": "exploit",
+    "author": [
+      "Jeff McJunkin <jeff.mcjunkin@gmail.com>"
+    ],
+    "description": "This module exploits a flaw in the 'webexservice' Windows service, which runs as SYSTEM,\n        can be used to run arbitrary commands locally, and can be started by limited users in\n        default installations.",
+    "references": [
+      "URL-https://webexec.org",
+      "CVE-2018-15442"
+    ],
+    "is_server": true,
+    "is_client": false,
+    "platform": "Windows",
+    "arch": "",
+    "rport": null,
+    "autofilter_ports": [
+
+    ],
+    "autofilter_services": [
+
+    ],
+    "targets": [
+      "Automatic",
+      "Windows x86",
+      "Windows x64"
+    ],
+    "mod_time": "2018-10-24 16:13:47 +0000",
+    "path": "/modules/exploits/windows/local/webexec.rb",
+    "is_install_path": true,
+    "ref_name": "windows/local/webexec",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+    }
+  },
   "exploit_windows/local/wmi": {
     "name": "Windows Management Instrumentation (WMI) Remote Command Execution",
     "full_name": "exploit/windows/local/wmi",
@@ -124254,6 +124332,47 @@
     "notes": {
     }
   },
+  "exploit_windows/smb/webexec": {
+    "name": "WebExec Authenticated User Code Execution",
+    "full_name": "exploit/windows/smb/webexec",
+    "rank": 0,
+    "disclosure_date": "2018-10-24",
+    "type": "exploit",
+    "author": [
+      "Ron <ron@skullsecurity.net>"
+    ],
+    "description": "This module uses a valid username and password of any level (or\n        password hash) to execute an arbitrary payload. This module is similar\n        to the \"psexec\" module, except allows any non-guest account by default.",
+    "references": [
+      "URL-https://webexec.org",
+      "CVE-2018-15442"
+    ],
+    "is_server": false,
+    "is_client": false,
+    "platform": "Windows",
+    "arch": "x86, x64",
+    "rport": 445,
+    "autofilter_ports": [
+      139,
+      445
+    ],
+    "autofilter_services": [
+      "netbios-ssn",
+      "microsoft-ds"
+    ],
+    "targets": [
+      "Automatic",
+      "Native upload"
+    ],
+    "mod_time": "2018-10-24 09:46:00 +0000",
+    "path": "/modules/exploits/windows/smb/webexec.rb",
+    "is_install_path": true,
+    "ref_name": "windows/smb/webexec",
+    "check": false,
+    "post_auth": true,
+    "default_credential": false,
+    "notes": {
+    }
+  },
   "exploit_windows/smtp/mailcarrier_smtp_ehlo": {
     "name": "TABS MailCarrier v2.51 SMTP EHLO Overflow",
     "full_name": "exploit/windows/smtp/mailcarrier_smtp_ehlo",