deardaniel/secdata-raw huggingface dataset:
Metasploit Module: F5 Networks Devices Management Interface Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/f5_mgmt_scanner.rb

Description:
This module attempts to identify the web management interfaces of the following
          F5 Networks devices:
          BigIP, BigIQ, Enterprise Manager, ARX, and FirePass.
Metasploit Module: ManageEngine ServiceDesk Plus Path Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/servicedesk_plus_traversal.rb
Disclosure date: 2015-10-03
Authors: xistence <xistence[at]0x90.nl>
References: CVE-2011-2757, URL-https://www.manageengine.com/products/service-desk/readme-9.1.html

Description:
This module exploits an unauthenticated path traversal vulnerability found in ManageEngine
          ServiceDesk Plus build 9110 and lower. The module will retrieve any file on the filesystem
          with the same privileges as Support Center Plus is running. On Windows, files can be retrieved
          with SYSTEM privileges. The issue has been resolved in ServiceDesk Plus build 91111 (issue SD-60283).
Metasploit Module: Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database
Type: auxiliary
Path: modules/auxiliary/scanner/http/gavazzi_em_login_loot.rb
References: URL-https://www.cisa.gov/uscert/ics/advisories/ICSA-17-012-03, CVE-2017-5146

Description:
This module scans for Carlo Gavazzi Energy Meters login portals, performs a login brute force attack, enumerates device firmware version, and attempt to extract the SMTP configuration. A valid, admin privileged user is required to extract the SMTP password. In some older firmware versions, the SMTP config can be retrieved without any authentication. The module also exploits an access control vulnerability which allows an unauthenticated user to remotely dump the database file EWplant.db. This db file contains information such as power/energy utilization data, tariffs, and revenue statistics. Vulnerable firmware versions include - VMU-C EM prior to firmware Version A11_U05 and VMU-C PV prior to firmware Version A17.
Metasploit Module: WordPress Plugin Perfect Survey 1.5.1 SQLi (Unauthenticated)
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_perfect_survey_sqli.rb
Disclosure date: 2021-10-05
References: EDB-50766, CVE-2021-24762

Description:
This module exploits a SQL injection vulnerability in the Perfect Survey
          plugin for WordPress (version 1.5.1). An unauthenticated attacker can
          exploit the SQLi to retrieve sensitive information such as usernames,
          emails, and password hashes from the `wp_users` table.

Check method (fingerprinting):
@sqli = get_sqli_object
    return Exploit::CheckCode::Unknown(GET_SQLI_OBJECT_FAILED_ERROR_MSG) if @sqli == GET_SQLI_OBJECT_FAILED_ERROR_MSG
    return Exploit::CheckCode::Vulnerable('SQL injection test succeeded') if @sqli.test_vulnerable

    Exploit::CheckCode::Safe('Perfect Survey plugin is not vulnerable to SQL injection')
  end

  # Run method
Metasploit Module: GlassFish Brute Force Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/glassfish_login.rb
References: CVE-2011-0807, OSVDB-71948

Description:
This module attempts to login to GlassFish instance using username and password
        combinations indicated by the USER_FILE, PASS_FILE, and USERPASS_FILE options.
        It will also try to do an authentication bypass against older versions of GlassFish.
        Note: by default, GlassFish 4.0 requires HTTPS, which means you must set the SSL option
        to true, and SSLVersion to TLS1. It also needs Secure Admin to access the DAS remotely.
Metasploit Module: HTTP SOAP Verb/Noun Brute Force Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/soap_xml.rb
Authors: aushack

Description:
This module attempts to brute force SOAP/XML requests to uncover
          hidden methods.
Metasploit Module: WordPress WPS Hide Login Login Page Revealer
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_wps_hide_login_revealer.rb
Disclosure date: 2021-10-27
References: CVE-2021-24917, URL-https://wordpress.org/support/topic/bypass-security-issue/

Description:
This module exploits a bypass issue with WPS Hide Login version <= 1.9.  WPS Hide Login
          is used to make a new secret path to the login page, however a 'GET' request to
          '/wp-admin/options.php' with a referer will reveal the hidden path.
Metasploit Module: Intel AMT Digest Authentication Bypass Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/intel_amt_digest_bypass.rb
Disclosure date: May 05 2017
Authors: hdm
References: CVE-2017-5689, URL-http://web.archive.org/web/[PII_REDACTED]4314/https://www.embedi.com/news/what-you-need-know-about-intel-amt-vulnerability, URL-http://web.archive.org/web/[PII_REDACTED]0258/https://www.intel.com/content/www/us/en/security-center/default.html?intelid=INTEL-SA-00075

Description:
This module scans for Intel Active Management Technology endpoints and attempts
        to bypass authentication using a blank HTTP digest (CVE-2017-5689). This service
        can be found on ports 16992, 16993 (tls), 623, and 624 (tls).
Metasploit Module: Joomla Page Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/joomla_pages.rb

Description:
This module scans a Joomla install for common pages.
Metasploit Module: WordPress Simple Backup File Read Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_simple_backup_file_read.rb
References: CVE-2015-10134

Description:
This module exploits a directory traversal vulnerability in WordPress Plugin
          "Simple Backup" version 2.7.10, allowing to read arbitrary files with the
          web server privileges.

Check method (fingerprinting):
check_plugin_version_from_readme('simple-backup', '2.7.11')
  end
Metasploit Module: InfoVista VistaPortal Application Bruteforce Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/infovista_enum.rb

Description:
This module attempts to scan for InfoVista VistaPortal Web Application, finds its
          version and performs login brute force to identify valid credentials.
Metasploit Module: DirectAdmin Web Control Panel Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/directadmin_login.rb

Description:
This module will attempt to authenticate to a DirectAdmin Web Control Panel.
Metasploit Module: Symantec Messaging Gateway 9.5 Log File Download Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/symantec_brightmail_logfile.rb
Disclosure date: 2012-11-30
References: CVE-2012-4347, EDB-23110, OSVDB-88165, BID-56789, URL-https://www.broadcom.com/support/security-center/securityupdates/detail?fid=security_advisory&pvid=security_advisory&suid=20120827_00&year=2012

Description:
This module will download a file of your choice against Symantec Messaging
          Gateway.  This is possible by exploiting a directory traversal vulnerability
          when handling the 'logFile' parameter, which will load an arbitrary file as
          an attachment.  Note that authentication is required in order to successfully
          download your file.
Metasploit Module: ThinVNC Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/thinvnc_traversal.rb
Disclosure date: 2019-10-16
References: CVE-2019-17662, URL-https://github.com/bewest/thinvnc/issues/5, URL-https://github.com/shashankmangal2/Exploits/blob/master/ThinVNC-RemoteAccess/POC.py, URL-https://redteamzone.com/ThinVNC/

Description:
This module exploits a directory traversal vulnerability in ThinVNC
          versions 1.0b1 and prior which allows unauthenticated users to retrieve
          arbitrary files, including the ThinVNC configuration file.

          This module has been tested successfully on ThinVNC versions 1.0b1
          and "ThinVNC_Latest" (2018-12-07).
Metasploit Module: Telerik Report Server Auth Bypass
Type: auxiliary
Path: modules/auxiliary/scanner/http/telerik_report_server_auth_bypass.rb
Disclosure date: 2024-06-04
References: CVE-2024-4358, URL-https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/

Description:
This module exploits an authentication bypass vulnerability in Telerik Report Server versions 10.0.24.305 and
          prior which allows an unauthenticated attacker to create a new account with administrative privileges. The
          vulnerability leverages the initial setup page which is still accessible once the setup process has completed.

          If either USERNAME or PASSWORD are not specified, then a random value will be selected. The module will fail if
          the specified USERNAME already exists.
Metasploit Module: VICIdial Multiple Authenticated SQLi
Type: auxiliary
Path: modules/auxiliary/scanner/http/vicidial_multiple_sqli.rb
Disclosure date: 2022-04-19
References: URL-https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=4&t=41300&sid=aacb27a29fefd85265b4d55fe51122af, CVE-2022-34876, CVE-2022-34877, CVE-2022-34878

Description:
This module exploits several authenticated SQL Inject vulnerabilities in VICIdial 2.14b0.5 prior to
          svn/trunk revision 3555 (VICIBox 10.0.0, prior to January 20 is vulnerable).
          Injection point 1 is on vicidial/admin.php when adding a user, in the modify_email_accounts parameter.
          Injection point 2 is on vicidial/admin.php when adding a user, in the access_recordings parameter.
          Injection point 3 is on vicidial/admin.php when adding a user, in the agentcall_email parameter.
          Injection point 4 is on vicidial/AST_agent_time_sheet.php when adding a user, in the agent parameter.
          Injection point 5 is on vicidial/user_stats.php when adding a user, in the file_download parameter.
          VICIdial does not encrypt passwords by default.
Metasploit Module: Abandoned Cart for WooCommerce SQLi Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_abandoned_cart_sqli.rb
Disclosure date: 2020-11-05
References: CVE-2025-47608, URL-https://wpdeeply.com/woocommerce-abandoned-cart-before-5-8-2-sql-injection/, URL-https://plugins.trac.wordpress.org/changeset/2413885

Description:
Abandoned Cart, a plugin for WordPress which extends the WooCommerce plugin,
          prior to 5.8.2 is affected by an unauthenticated SQL injection via the
          billing_first_name parameter of the save_data AJAX call.  A valid
          wp_woocommerce_session cookie is required, which has at least one item in the
          cart.
Metasploit Module: Wordpress Secure Copy Content Protection and Content Locking sccp_id Unauthenticated SQLi
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_secure_copy_content_protection_sqli.rb
Disclosure date: 2021-11-08
References: CVE-2021-24931, URL-https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24931/README.md, URL-https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html, EDB-50733

Description:
Secure Copy Content Protection and Content Locking, a WordPress plugin,
          prior to 2.8.2 is affected by an unauthenticated SQL injection via the
          `sccp_id[]` parameter.

          Remote attackers can exploit this vulnerability to dump usernames and password hashes
          from the`wp_users` table of the affected WordPress installation. These password hashes
          can then be cracked offline using tools such as Hashcat to obtain valid login
          credentials for the affected WordPress installation.
Metasploit Module: cgit Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/cgit_traversal.rb
Disclosure date: 2018-08-03
References: CVE-2018-14912, URL-https://bugs.chromium.org/p/project-zero/issues/detail?id=1627, EDB-45148

Description:
This module exploits a directory traversal vulnerability which
          exists in cgit < 1.2.1 cgit_clone_objects(), reachable when the
          configuration flag enable-http-clone is set to 1 (default).
Metasploit Module: WordPress Email Subscribers and Newsletter Hash SQLi Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_email_sub_news_sqli.rb
Disclosure date: 2019-11-13
References: EDB-48699, CVE-2019-20361, URL-https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/

Description:
Email Subscribers & Newsletters plugin contains an unauthenticated timebased SQL injection in
          versions before 4.3.1.  The hash parameter is vulnerable to injection.
Metasploit Module: Jenkins-CI Unauthenticated Script-Console Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/jenkins_command.rb
References: CVE-2015-8103, URL-https://www.jenkins.io/security/advisory/2015-11-11/, URL-https://www.pentestgeek.com/penetration-testing/hacking-jenkins-servers-with-no-password/, URL-https://www.jenkins.io/doc/book/managing/script-console/

Description:
This module scans for unauthenticated Jenkins-CI script consoles and
          executes the specified command.
Metasploit Module: Cisco SSL VPN Bruteforce Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/cisco_ssl_vpn.rb

Description:
This module scans for Cisco SSL VPN web login portals and
          performs login brute force to identify valid credentials.
Metasploit Module: Squiz Matrix User Enumeration Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/squiz_matrix_user_enum.rb
Disclosure date: 2011-11-08
References: URL-https://www.osi.security/advisories.html

Description:
This module attempts to enumerate remote users that exist within
          the Squiz Matrix and MySource Matrix CMS by sending GET requests for asset IDs
          e.g. ?a=14 and searching for a valid username eg "~root" or "~test" which
          is prefixed by a "~" in the response. It will also try to GET the users
          full name or description, or other information. You may wish to modify
          ASSETBEGIN and ASSETEND values for greater results, or set VERBOSE.
          Information gathered may be used for later bruteforce attacks.
Metasploit Module: WordPress WP Fastest Cache Unauthenticated SQLi (CVE-2023-6063)
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_fastest_cache_sqli.rb
Disclosure date: 2023-11-14
References: CVE-2023-6063, URL-https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/

Description:
WP Fastest Cache, a WordPress plugin,
          prior to version 1.2.2, is vulnerable to an unauthenticated SQL injection
          vulnerability via the 'wordpress_logged_in' cookie. This can be exploited via a blind SQL injection attack without requiring any authentication.
Metasploit Module: Jenkins-CI Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/jenkins_enum.rb
Authors: Jeff McCutchan

Description:
This module enumerates a remote Jenkins-CI installation in an unauthenticated manner, including
          host operating system and Jenkins installation details.
Metasploit Module: Yaws Web Server Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/yaws_traversal.rb
Disclosure date: 2011-11-25
References: CVE-2011-4350, OSVDB-77581, URL-https://bugzilla.redhat.com/show_bug.cgi?id=757181

Description:
This module exploits a directory traversal bug in Yaws v1.9.1 or less.
          The module can only be used to retrieve files. However, code execution might
          be possible. Because when the malicious user sends a PUT request, a file is
          actually created, except no content is written.
Metasploit Module: pfSense Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/pfsense_login.rb

Description:
This module performs login attempts against a Netgate pfSense router webpage to bruteforce possible credentials.
Metasploit Module: Apache Flink JobManager Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/apache_flink_jobmanager_traversal.rb
Disclosure date: 2021-01-05
References: CVE-2020-17519, EDB-49398, URL-https://www.openwall.com/lists/oss-security/2021/01/05/2, URL-https://www.tenable.com/cve/CVE-2020-17519

Description:
This module exploits an unauthenticated directory traversal vulnerability
          in Apache Flink versions 1.11.0 <= 1.11.2. The JobManager REST API fails
          to validate user-supplied log file paths, allowing retrieval of arbitrary
          files with the privileges of the web server user.

          This module has been tested successfully on Apache Flink version 1.11.2
          on Ubuntu 18.04.4.
Metasploit Module: D-Link DIR-300A / DIR-320 / DIR-615D HTTP Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/dlink_dir_300_615_http_login.rb
References: CVE-1999-0502

Description:
This module attempts to authenticate to different D-Link HTTP management
        services. It has been tested on D-Link DIR-300 Hardware revision A, D-Link DIR-615
        Hardware revision D and D-Link DIR-320 devices. It is possible that this module
        also works with other models.
Metasploit Module: HP Intelligent Management IctDownloadServlet Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/hp_imc_ictdownloadservlet_traversal.rb
References: CVE-2012-5204, OSVDB-91029, BID-58676, ZDI-13-053

Description:
This module exploits a lack of authentication and a directory traversal in HP
          Intelligent Management, specifically in the IctDownloadServlet, in order to
          retrieve arbitrary files with SYSTEM privileges. This module has been tested
          successfully on HP Intelligent Management Center 5.1 E0202 over Windows 2003 SP2.
Metasploit Module: S40 0.4.2 CMS Directory Traversal Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/s40_traversal.rb
Disclosure date: 2011-04-07
References: CVE-2011-10009, OSVDB-82469, EDB-17129

Description:
This module exploits a directory traversal vulnerability found in S40 CMS.
          The flaw is due to the 'page' function not properly handling the $pid parameter,
          which allows a malicious user to load an arbitrary file path.
Metasploit Module: F5 BigIP HTTP Virtual Server Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/f5_bigip_virtual_server.rb
References: URL-https://web.archive.org/web/[PII_REDACTED]2059/https://www.owasp.org/index.php/SCG_D_BIGIP

Description:
This module scans for BigIP HTTP virtual servers using banner grabbing. BigIP system uses
          different HTTP profiles for managing HTTP traffic and these profiles allow to customize
          the string used as Server HTTP header. The default values are "BigIP" or "BIG-IP" depending
          on the BigIP system version.
Metasploit Module: Supermicro Onboard IPMI url_redirect.cgi Authenticated Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/smt_ipmi_url_redirect_traversal.rb
Disclosure date: 2013-11-06
References: CVE-2013-6785, URL-https://www.rapid7.com/blog/post/2013/11/06/supermicro-ipmi-firmware-vulnerabilities/, URL-https://github.com/zenfish/ipmi/blob/master/dump_SM.py

Description:
This module abuses a directory traversal vulnerability in the url_redirect.cgi application
          accessible through the web interface of Supermicro Onboard IPMI controllers.  The vulnerability
          is present due to a lack of sanitization of the url_name parameter. This allows an attacker with
          a valid, but not necessarily administrator-level account, to access the contents of any file
          on the system. This includes the /nv/PSBlock file, which contains the cleartext credentials for
          all configured accounts. This module has been tested on a Supermicro Onboard IPMI (X9SCL/X9SCM)
          with firmware version SMT_X9_214. Other file names to try include /PSStore, /PMConfig.dat, and
          /wsman/simple_auth.passwd
Metasploit Module: Wordpress LearnPress current_items Authenticated SQLi
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_learnpress_sqli.rb
Disclosure date: 2020-04-29
References: CVE-2020-6010, URL-https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/, EDB-50137

Description:
LearnPress, a learning management plugin for WordPress,
          prior to 3.2.6.8 is affected by an authenticated SQL injection via the
          current_items parameter of the post-new.php page.
Metasploit Module: Western Digital MyBook Live Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/mybook_live_login.rb

Description:
This module simply attempts to login to a Western Digital MyBook Live instance using a specific user/pass.
Metasploit Module: HTTP Directory Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/dir_scanner.rb

Description:
This module identifies the existence of interesting directories
          in a given directory path.
Metasploit Module: WordPress Contus Video Gallery Unauthenticated SQL Injection Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_contus_video_gallery_sqli.rb
Disclosure date: 2015-02-24
References: CVE-2015-2065

Description:
This module attempts to exploit a UNION-based SQL injection in Contus Video
          Gallery for Wordpress version 2.7 and likely prior in order if the instance is
          vulnerable.
Metasploit Module: Chinese Caidao Backdoor Bruteforce
Type: auxiliary
Path: modules/auxiliary/scanner/http/caidao_bruteforce_login.rb
References: URL-https://www.fireeye.com/blog/threat-research/2013/08/breaking-down-the-china-chopper-web-shell-part-i.html, URL-https://www.mandiant.com/resources/breaking-down-the-china-chopper-web-shell-part-ii, URL-http://web.archive.org/web/[PII_REDACTED]0632/https://www.exploit-db.com/docs/27654.pdf, URL-https://www.cisa.gov/uscert/ncas/alerts/TA15-314A, URL-http://blog.csdn.net/nixawk/article/details/40430329

Description:
This module attempts to bruteforce chinese caidao asp/php/aspx backdoor.
Metasploit Module: D-Link User-Agent Backdoor Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/dlink_user_agent_backdoor.rb
References: URL-http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/

Description:
This module attempts to find D-Link devices running Alphanetworks web interfaces affected
        by the backdoor found on the User-Agent header. This module has been tested successfully
        on a DIR-100 device with firmware version v1.13.
Metasploit Module: OpenMind Message-OS Portal Login Brute Force Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/openmind_messageos_login.rb

Description:
This module scans for OpenMind Message-OS provisioning web login portal, and
          performs a login brute force attack to identify valid credentials.
Metasploit Module: Directory Traversal in Spring Cloud Config Server
Type: auxiliary
Path: modules/auxiliary/scanner/http/springcloud_directory_traversal.rb
Disclosure date: 2020-06-01
References: CVE-2020-5410, URL-https://tanzu.vmware.com/security/cve-2020-5410, URL-https://xz.aliyun.com/t/7877

Description:
This module exploits an unauthenticated directory traversal vulnerability
          which exists in Spring Cloud Config versions 2.2.x prior to 2.2.3 and
          2.1.x prior to 2.1.9, and older unsupported versions. Spring
          Cloud Config listens by default on port 8888.
Metasploit Module: SAP BusinessObjects User Bruteforcer
Type: auxiliary
Path: modules/auxiliary/scanner/http/sap_businessobjects_user_brute.rb
References: URL-http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf

Description:
This module attempts to bruteforce SAP BusinessObjects users.
        The dswsbobje interface is only used to verify valid credentials for CmcApp.
        Therefore, any valid credentials that have been identified can be leveraged by
        logging into CmcApp.
Metasploit Module: Citrix ADC (NetScaler) Bleed Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/citrix_bleed_cve_2023_4966.rb
Disclosure date: 2023-10-25
References: CVE-2023-4966, URL-https://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966

Description:
This module scans for a vulnerability that allows a remote, unauthenticated attacker to leak memory for a
          target Citrix ADC server. The leaked memory is then scanned for session cookies which can be hijacked if found.