deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Advantech WebAccess Login
Type: auxiliary
Path: modules/auxiliary/scanner/http/advantech_webaccess_login.rb

Description:
This module will attempt to authenticate to Advantech WebAccess.
Metasploit Module: ManageEngine SecurityManager Plus 5.5 Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/manageengine_securitymanager_traversal.rb
Disclosure date: 2012-10-19
References: OSVDB-86563, EDB-22092

Description:
This module exploits a directory traversal flaw found in ManageEngine
          SecurityManager Plus 5.5 or less.  When handling a file download request,
          the DownloadServlet class fails to properly check the 'f' parameter, which
          can be abused to read any file outside the virtual directory.
Metasploit Module: Chef Web UI Brute Force Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/chef_webui_login.rb

Description:
This module attempts to login to Chef Web UI server instance using username and password
        combinations indicated by the USER_FILE, PASS_FILE, and USERPASS_FILE options. It
        will also test for the default login (admin:p@ssw0rd1).
Metasploit Module: OPNSense Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/opnsense_login.rb

Description:
This module performs login attempts against a Deciso B.V OPNSense router webpage to bruteforce possible credentials.
Metasploit Module: Wordpress XML-RPC system.multicall Credential Collector
Type: auxiliary
Path: modules/auxiliary/scanner/http/wordpress_multicall_creds.rb
References: URL-https://blog.cloudflare.com/a-look-at-the-new-wordpress-brute-force-amplification-attack/, URL-http://web.archive.org/web/[PII_REDACTED]3829/https://blog.sucuri.net/2014/07/new-brute-force-attacks-exploiting-xmlrpc-in-wordpress.html

Description:
This module attempts to find Wordpress credentials by abusing the XMLRPC
          APIs. Wordpress versions prior to 4.4.1 are suitable for this type of
          technique. For newer versions, the script will drop the CHUNKSIZE to 1 automatically.
Metasploit Module: Simple Web Server 2.3-RC1 Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/simple_webserver_traversal.rb
Disclosure date: 2013-01-03
References: CVE-2002-1864, OSVDB-88877, EDB-23886, URL-https://seclists.org/bugtraq/2013/Jan/12

Description:
This module exploits a directory traversal vulnerability found in
          Simple Web Server 2.3-RC1.
Metasploit Module: HTTP Interesting File Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/files_dir.rb

Description:
This module identifies the existence of interesting files
          in a given directory path.
Metasploit Module: Drupal Views Module Users Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/drupal_views_user_enum.rb
Disclosure date: 2010-07-02
References: URL-http://www.madirish.net/node/465, URL-https://www.drupal.org/node/1004778

Description:
This module exploits an information disclosure vulnerability in the 'Views'
          module of Drupal, brute-forcing the first 10 usernames from 'a' to 'z'.
          Drupal 6 with 'Views' module <= 6.x-2.11 are vulnerable.  Drupal does not
          consider disclosure of usernames as a weakness.
Metasploit Module: HTTP Writable Path PUT/DELETE File Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/http_put.rb
References: OSVDB-397

Description:
This module can abuse misconfigured web servers to upload and delete web content
        via PUT and DELETE HTTP requests. Set ACTION to either PUT or DELETE.

        PUT is the default.  If filename isn't specified, the module will generate a
        random string for you as a .txt file. If DELETE is used, a filename is required.
Metasploit Module: HTTP Directory Brute Force Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/brute_dirs.rb

Description:
This module identifies the existence of interesting directories by brute forcing the name
          in a given directory path.
Metasploit Module: HP Intelligent Management FaultDownloadServlet Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/hp_imc_faultdownloadservlet_traversal.rb
References: CVE-2012-5202, OSVDB-91027, BID-58675, ZDI-13-051

Description:
This module exploits a lack of authentication and a directory traversal in HP
          Intelligent Management, specifically in the FaultDownloadServlet, in order to
          retrieve arbitrary files with SYSTEM privileges. This module has been tested
          successfully on HP Intelligent Management Center 5.1 E0202 over Windows 2003 SP2.
Metasploit Module: FrontPage .pwd File Credential Dump
Type: auxiliary
Path: modules/auxiliary/scanner/http/frontpage_credential_dump.rb
References: URL-https://insecure.org/sploits/Microsoft.frontpage.insecurities.html, URL-http://sparty.secniche.org/

Description:
This module downloads and parses the '_vti_pvt/service.pwd',
          '_vti_pvt/administrators.pwd', and '_vti_pvt/authors.pwd' files on a FrontPage
          server to find credentials.
Metasploit Module: Chromecast Wifi Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/chromecast_wifi.rb
Authors: wvu
References: URL-http://www.google.com/intl/en/chrome/devices/chromecast/index.html

Description:
This module enumerates wireless access points through Chromecast.
Metasploit Module: HP System Management Homepage Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/hp_sys_mgmt_login.rb

Description:
This module attempts to login to HP System Management Homepage using host
          operating system authentication.
Metasploit Module: Jenkins-CI Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/jenkins_login.rb

Description:
This module attempts to login to a Jenkins-CI instance using a specific user/pass.
Metasploit Module: Majordomo2 _list_file_get() Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/majordomo2_directory_traversal.rb
Disclosure date: Mar 08 2011
Authors: Nikolas Sotiriu
References: OSVDB-70762, CVE-2011-0049, CVE-2011-0063, URL-https://www.sotiriu.de/adv/NSOADV-2011-003.txt, EDB-16103

Description:
This module exploits a directory traversal vulnerability present in
        the _list_file_get() function of Majordomo2 (help function). By default, this
        module will attempt to download the Majordomo config.pl file.
Metasploit Module: Apache Optionsbleed Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/apache_optionsbleed.rb
Disclosure date: 2017-09-18
References: CVE-2017-9798, EDB-42745, URL-https://github.com/hannob/optionsbleed, URL-https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html

Description:
This module scans for the Apache optionsbleed vulnerability where the Allow
          response header returned from an OPTIONS request may bleed memory if the
          server has a .htaccess file with an invalid Limit method defined.
Metasploit Module: Atlassian Crowd XML Entity Expansion Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/atlassian_crowd_fileaccess.rb
References: CVE-2012-2926, OSVDB-82274, BID-53595, URL-https://neg9.org/, URL-https://confluence.atlassian.com/crowd/crowd-security-advisory-2012-05-17-283641186.html

Description:
This module simply attempts to read a remote file from the server using a
        vulnerability in the way Atlassian Crowd handles XML files. The vulnerability
        occurs while trying to expand external entities with the SYSTEM identifier. This
        module has been tested successfully on Linux and Windows installations of Crowd.
Metasploit Module: Novell Groupwise Agents HTTP Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/groupwise_agents_http_traversal.rb
References: CVE-2012-0419, OSVDB-85801, BID-55648, URL-https://support.microfocus.com/kb/doc.php?id=7010772

Description:
This module exploits a directory traversal vulnerability in Novell Groupwise.
          The vulnerability exists in the web interface of both the Post Office and the
          MTA agents. This module has been tested successfully on Novell Groupwise 8.02 HP2
          over Windows 2003 SP2.
Metasploit Module: WordPress Modern Events Calendar SQLi Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_modern_events_calendar_sqli.rb
Disclosure date: 2021-12-13
References: EDB-50687, CVE-2021-24946, URL-https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md

Description:
Modern Events Calendar plugin contains an unauthenticated timebased SQL injection in
          versions before 6.1.5.  The time parameter is vulnerable to injection.
Metasploit Module: HTTP Verb Authentication Bypass Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/verb_auth_bypass.rb
Authors: et [at] metasploit.com

Description:
This module test for authentication bypass using different HTTP verbs.
Metasploit Module: Microsoft Azure Active Directory Login Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/azure_ad_login.rb
References: URL-https://raxis.com/blog/metasploit-azure-ad-login, URL-https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/, URL-https://github.com/treebuilder/aad-sso-enum-brute-spray

Description:
This module enumerates valid usernames and passwords against a
        Microsoft Azure Active Directory domain by utilizing a flaw in
        how SSO authenticates.
Metasploit Module: Syncovery For Linux Web-GUI Session Token Brute-Forcer
Type: auxiliary
Path: modules/auxiliary/scanner/http/syncovery_linux_token_cve_2022_36536.rb
Platform: linux
Disclosure date: 2022-09-06
References: URL-https://www.mgm-sp.com/en/multiple-vulnerabilities-in-syncovery-for-linux/, CVE-2022-36536

Description:
This module attempts to brute-force a valid session token for the Syncovery File Sync & Backup Software Web-GUI
          by generating all possible tokens, for every second between 'DateTime.now' and the given X day(s).
          By default today and yesterday (DAYS = 1) will be checked. If a valid session token is found, the module stops.
          The vulnerability exists, because in Syncovery session tokens are basically just base64(m/d/Y H:M:S) at the time
          of the login instead of a random token.
          If a user does not log out (Syncovery v8.x has no logout) session tokens will remain valid until reboot.
Metasploit Module: HTTP Previous Directory File Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/prev_dir_same_name_file.rb

Description:
This module identifies files in the first parent directory with same name as
          the given directory path. Example: Test /backup/files/ will look for the
          following files /backup/files.ext .
Metasploit Module: Cambium ePMP 1000 Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/epmp1000_web_login.rb
References: URL-http://ipositivesecurity.com/2015/11/28/cambium-epmp-1000-multiple-vulnerabilities/

Description:
This module scans for Cambium ePMP 1000 management login portal(s), and
          attempts to identify valid credentials. Default login credentials are -
          admin/admin, installer/installer, home/home and readonly/readonly.
Metasploit Module: SVN wc.db Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/svn_wcdb_scanner.rb
References: URL-https://web.archive.org/web/[PII_REDACTED]5252/http://pen-testing.sans.org/blog/pen-testing/2012/12/06/all-your-svn-are-belong-to-us

Description:
Scan for servers that allow access to the SVN wc.db file.
        Based on the work by Tim Meddin.
Metasploit Module: Wordpress Pingback Locator
Type: auxiliary
Path: modules/auxiliary/scanner/http/wordpress_pingback_access.rb
References: CVE-2013-0235, URL-https://bugtraq.securityfocus.com/archive/1/525045/30/30/threaded, URL-http://www.ethicalhack3r.co.uk/security/introduction-to-the-wordpress-xml-rpc-api/, URL-https://github.com/FireFart/WordpressPingbackPortScanner

Description:
This module will scan for wordpress sites with the Pingback
          API enabled. By interfacing with the API an attacker can cause
          the wordpress site to port scan an external target and return
          results. Refer to the wordpress_pingback_portscanner module.
          This issue was fixed in wordpress 3.5.1
Metasploit Module: WildFly Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/wildfly_traversal.rb
Disclosure date: 2014-10-22
Authors: Roberto Soares Espreto <robertoespreto[at]gmail.com>
References: CVE-2014-7816, URL-https://access.redhat.com/security/cve/CVE-2014-7816, URL-https://www.conviso.com.br/advisories/CONVISO-14-001.txt, URL-https://www.openwall.com/lists/oss-security/2014/11/27/4

Description:
This module exploits a directory traversal vulnerability found in the WildFly 8.1.0.Final
          web server running on port 8080, named JBoss Undertow. The vulnerability only affects to
          Windows systems.
Metasploit Module: HP Intelligent Management SOM FileDownloadServlet Arbitrary Download
Type: auxiliary
Path: modules/auxiliary/scanner/http/hp_imc_som_file_download.rb
References: CVE-2013-4826, OSVDB-98251, BID-62898, ZDI-13-242

Description:
This module exploits a lack of authentication and access control in HP Intelligent
          Management, specifically in the FileDownloadServlet from the SOM component, in order to
          retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully
          on HP Intelligent Management Center 5.2_E0401 with SOM 5.2 E0401 over Windows 2003 SP2.
Metasploit Module: HTTP SSL Certificate Checker
Type: auxiliary
Path: modules/auxiliary/scanner/http/cert.rb
Authors: nebulus

Description:
This module will check the certificate of the specified web servers
        to ensure the subject and issuer match the supplied pattern and that the certificate
        is not expired.
Metasploit Module: SimpleHelp Path Traversal Vulnerability CVE-2024-57727
Type: auxiliary
Path: modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb
Disclosure date: 2025-01-12
References: URL-https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/, URL-https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier, URL-https://rustlang.rs/posts/simple-help/, URL-https://attackerkb.com/topics/G4CTOrbDx0/cve-2024-57727, CVE-2024-57727

Description:
There exists a path traversal vulnerability in the /toolbox-resource endpoint that enables unauthenticated
          remote attackers to download arbitrary files from the SimpleHelp server via crafted HTTP requests

Check method (fingerprinting):
res = send_request_cgi(
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path, 'allversions')
    )

    return Exploit::CheckCode::Unknown('Unable to retrieve SimpleHelp version.') unless res&.body =~ /Visual Version:\s*(\d+\.\d+(?:\.\d+))/

    version = Rex::Version.new(Regexp.last_match(1))

    # Patched versions are: 5.5.8 or 5.4.10 or 5.3.9
    if version.between?(Rex::Version.new('5.5.0'), Rex::Version.new('5.5.7')) ||
       version.between?(Rex::Version.new('5.4.0'), Rex::Version.new('5.4.9')) ||
       version.between?(Rex::Version.new('5.3.0'), Rex::Version.new('5.3.8'))
      return Exploit::CheckCode::Appears("Version detected: #{version}")
    end

    Exploit::CheckCode::Safe("Version detected: #{version}")
  end
Metasploit Module: Splunk Web Interface Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/splunk_web_login.rb

Description:
This module simply attempts to login to a Splunk web interface.  Please note the
          free version of Splunk actually does not require any authentication, in that case
          the module will abort trying.  Also, some Splunk applications still have the
          default credential 'admin:changeme' written on the login page.  If this default
          credential is found, the module will also store that information, and then move on
          to trying more passwords.
Metasploit Module: HP SiteScope SOAP Call loadFileContent Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/hp_sitescope_loadfilecontent_fileaccess.rb
References: OSVDB-85118, BID-55269, ZDI-12-177

Description:
This module exploits an authentication bypass vulnerability in HP SiteScope to
        retrieve an arbitrary text file from the remote server. It is accomplished by
        calling the loadFileContent operation available through the APIMonitorImpl AXIS
        service. This module has been successfully tested on HP SiteScope 11.20 over
        Windows 2003 SP2 and Linux Centos 6.3.
Metasploit Module: Cambium ePMP 1000 Account Password Reset
Type: auxiliary
Path: modules/auxiliary/scanner/http/epmp1000_reset_pass.rb
References: CVE-2017-5254, URL-https://www.rapid7.com/blog/post/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/

Description:
This module exploits an access control vulnerability in Cambium ePMP
          device management portal. It requires any one of the following non-admin login
          credentials - installer/installer, home/home - to reset password of other
          existing user(s) including 'admin'. All versions <=3.5 are affected. This
          module works on versions 3.0-3.5-RC7.
Metasploit Module: WordPress REST API Content Injection
Type: auxiliary
Path: modules/auxiliary/scanner/http/wordpress_content_injection.rb
Disclosure date: 2017-02-01
References: CVE-2[PII_REDACTED], URL-http://web.archive.org/web/[PII_REDACTED]3135/https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html, URL-https://www.php.net/manual/en/language.types.type-juggling.php, URL-https://developer.wordpress.org/rest-api/using-the-rest-api/discovery/, URL-https://developer.wordpress.org/rest-api/reference/posts/

Description:
This module exploits a content injection vulnerability in WordPress
          versions 4.7 and 4.7.1 via type juggling in the REST API.
Metasploit Module: Wowza Streaming Engine Manager Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/wowza_streaming_engine_manager_login.rb
Platform: %w[linux win osx

Description:
This module will attempt to authenticate to Wowza Streaming Engine
          via Wowza Streaming Engine Manager web interface.
Metasploit Module: ColdFusion Version Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/coldfusion_version.rb

Description:
This module attempts identify various flavors of ColdFusion up to version 10
        as well as the underlying OS.
Metasploit Module: Jupyter Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/jupyter_login.rb

Description:
This module checks if authentication is required on a Jupyter Lab or Notebook server. If it is, this module will
        bruteforce the password. Jupyter only requires a password to authenticate, usernames are not used. This module
        is compatible with versions 4.3.0 (released 2016-12-08) and newer.
Metasploit Module: MediaWiki SVG XML Entity Expansion Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/mediawiki_svg_fileaccess.rb
References: OSVDB-92490, URL-https://phabricator.wikimedia.org/T48859, URL-https://web.archive.org/web/[PII_REDACTED]0020/http://www.gossamer-threads.com/lists/wiki/mediawiki-announce/350229

Description:
This module attempts to read a remote file from the server using a vulnerability
        in the way MediaWiki handles SVG files. The vulnerability occurs while trying to
        expand external entities with the SYSTEM identifier. In order to work MediaWiki must
        be configured to accept upload of SVG files. If anonymous uploads are allowed the
        username and password aren't required, otherwise they are. This module has been
        tested successfully on MediaWiki 1.19.4, 1.20.3 on Ubuntu 10.04 and Ubuntu 12.10.
        Older versions were also tested but do not seem to be vulnerable to this vulnerability.
        The following MediaWiki requirements must be met: File upload must be enabled,
        $wgFileExtensions[] must include 'svg', $wgSVGConverter must be set to something
        other than 'false'.
Metasploit Module: SurgeNews User Credentials
Type: auxiliary
Path: modules/auxiliary/scanner/http/surgenews_user_creds.rb
Disclosure date: 2017-06-16
Authors: bcoles
References: URL-http://news.netwinsite.com:8119/webnews?cmd=body&item=34896&group=netwin.surgemail

Description:
This module exploits a vulnerability in the WebNews web interface
          of SurgeNews on TCP ports 9080 and 8119 which allows unauthenticated
          users to download arbitrary files from the software root directory;
          including the user database, configuration files and log files.

          This module extracts the administrator username and password, and
          the usernames and passwords or password hashes for all users.

          This module has been tested successfully on SurgeNews version
          2.0a-13 on Windows 7 SP 1 and 2.0a-12 on Ubuntu Linux.
Metasploit Module: ClanSphere 2011.3 Local File Inclusion Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/clansphere_traversal.rb
Disclosure date: 2012-10-23
References: CVE-2012-10034, OSVDB-86720, EDB-22181

Description:
This module exploits a directory traversal flaw found in Clansphere 2011.3.
          The application fails to handle the cs_lang parameter properly, which can be
          used to read any file outside the virtual directory.
Metasploit Module: Fortinet SSL VPN Bruteforce Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/fortinet_ssl_vpn.rb

Description:
This module scans for Fortinet SSL VPN web login portals and
          performs login brute force to identify valid credentials.
Metasploit Module: Symantec Messaging Gateway 10 Exposure of Stored AD Password Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/symantec_brightmail_ldapcreds.rb
Disclosure date: 2015-12-17
References: URL-https://www.broadcom.com/support/security-center/securityupdates/detail?fid=security_advisory&pvid=security_advisory&suid=20160418_00&year=, CVE-2016-2203, BID-86137

Description:
This module will grab the AD account saved in Symantec Messaging Gateway and then
          decipher it using the disclosed Symantec PBE key.  Note that authentication is required
          in order to successfully grab the LDAP credentials, and you need at least a read account.
          Version 10.6.0-7 and earlier are affected
Metasploit Module: Cisco Ironport Bruteforce Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/cisco_ironport_enum.rb

Description:
This module scans for Cisco Ironport SMA, WSA and ESA web login portals, finds AsyncOS
          versions, and performs login brute force to identify valid credentials.
Metasploit Module: Cambium ePMP 1000 'ping' Command Injection (up to v2.5)
Type: auxiliary
Path: modules/auxiliary/scanner/http/epmp1000_ping_cmd_exec.rb
References: CVE-2017-5255, URL-http://ipositivesecurity.com/2015/11/28/cambium-epmp-1000-multiple-vulnerabilities/, URL-https://support.cambiumnetworks.com/file/476262a0256fdd8be0e595e51f5112e0f9700f83

Description:
This module exploits an OS Command Injection vulnerability in Cambium
          ePMP 1000 (<v2.5) device management portal. It requires any one of the
          following login credentials - admin/admin, installer/installer, home/home - to
          execute arbitrary system commands.
Metasploit Module: ManageEngine Desktop Central Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/manageengine_desktop_central_login.rb

Description:
This module will attempt to authenticate to a ManageEngine Desktop Central.
Metasploit Module: HTTP Host Header Injection Detection
Type: auxiliary
Path: modules/auxiliary/scanner/http/host_header_injection.rb
References: CVE-2016-10073, URL-http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html

Description:
Checks if the host is vulnerable to Host header injection