jasmin ransomware sqli and dir travers (CVE-2024-30851) #19103
+441
−0
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
@chebuya wanted to bring this to your attention since you discovered it |
adfoster-r7
reviewed
Apr 17, 2024
documentation/modules/auxiliary/gather/jasmin_ransomware_sqli.md
Outdated
Show resolved
Hide resolved
jheysel-r7
reviewed
Apr 25, 2024
| [ | ||
| OptString.new('TARGETURI', [true, 'The relative URI of the Jasmin Ransomware webserver', '/']), | ||
| OptInt.new('DEPTH', [true, 'Depth of directory traversal to root ', 9]), | ||
| OptString.new('FILE', [true, 'File to retrieve', 'etc/passwd']) |
There was a problem hiding this comment.
Could this datastore option enable the module to grab multiple files at once?
There was a problem hiding this comment.
as an OptString in theory if there was a , or other delimiter, however I don't think any dir travers modules within MSF do multiple files unless its a 'static' device (like a network appliance) where things are in a set location and certain files are known to be of strategic value
There was a problem hiding this comment.
Thanks @h00die for these modules. I just left a few minor comments before it lands.
|
@cdelafuente-r7 this should be good now |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR adds an unauth dir traversal, and a sqli exploit (CVE-2024-30851) against the Jasmin ransomware web panel.
Verification
Install the application
Start msfconsole
Do:
use auxiliary/gather/jasmin_ransomware_dir_traversalDo:
set rhosts [ip]Do:
runYou should get the content of a file if it exists.
Install the application
Start msfconsole
Do:
use auxiliary/gather/jasmin_ransomware_sqliDo:
set rhosts [IP]Do:
runYou should contents from the SQL Database.