Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add VMware vRealize Log Insight unauthenticated RCE exploit #18273

Merged
merged 15 commits into from
Sep 8, 2023
Merged

Add VMware vRealize Log Insight unauthenticated RCE exploit #18273

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
d1f9f54
Add VMware vRealize Log Insight RCE exploit
EgeBalci Aug 7, 2023
340e4c0
Make rubocop happy
EgeBalci Aug 8, 2023
86c8f11
Update modules/exploits/linux/http/vmware_vrli_rce.rb
EgeBalci Aug 18, 2023
1a97b11
Update modules/exploits/linux/http/vmware_vrli_rce.rb
EgeBalci Aug 18, 2023
4fe15ee
Update modules/exploits/linux/http/vmware_vrli_rce.rb
EgeBalci Aug 18, 2023
d8d5049
Update modules/exploits/linux/http/vmware_vrli_rce.rb
EgeBalci Aug 18, 2023
20ca3b8
Update modules/exploits/linux/http/vmware_vrli_rce.rb
EgeBalci Aug 18, 2023
e97183e
Update modules/exploits/linux/http/vmware_vrli_rce.rb
EgeBalci Aug 18, 2023
e0f5456
Add files for cleanup, fix serve address, add retry_until_truthy
EgeBalci Aug 18, 2023
eaeb202
Merge branch 'master' into vmware_vrli_rce
EgeBalci Aug 26, 2023
44dd843
Add low version guard and token check
EgeBalci Aug 29, 2023
9a5dd4e
Refactor thrift usage, add extra SRVHOST check, switch to decoded mf_…
EgeBalci Sep 7, 2023
5b6ee0c
Add extra sleep during PakUpgrade for stabilization
EgeBalci Sep 7, 2023
2cda3fa
Update options
EgeBalci Sep 7, 2023
21dde19
Make some final tweaks
smcintyre-r7 Sep 8, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update modules/exploits/linux/http/vmware_vrli_rce.rb 
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
  • Loading branch information
@EgeBalci @jheysel-r7
EgeBalci and jheysel-r7 authored Aug 18, 2023
commit 4fe15ee788245326faeaec6871dd98e79bb5da7a
2 changes: 1 addition & 1 deletion modules/exploits/linux/http/vmware_vrli_rce.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -245,7 +245,7 @@ def exploit
send_request(pak_upgrade_req)
upgrade_resp = recv_response(datastore['THRIFT_TIMEOUT'])
fail_with(Failure::UnexpectedReply, 'PakUpgradeCommand thrift call failed') if upgrade_resp.nil? || !upgrade_resp.to_s =~ 'The PAK file is corrupted'
print_good 'PakUpgrade is successfull'
print_good 'PakUpgrade is successful'

# Step 5 trigger the JSP payload.
print_status "#{peer} - Triggering JSP payload..."
Expand Down