rapid7/metasploit-framework — pull request #1062 by marcwickenden (2012-11-13 16:57:05+00:00)
Title: Splunk upload app exec

Addition of a module to abuse the "script" functionality in Splunk (all versions) to gain arbitrary command execution on the Splunk server.

Blog post URLs in the exploit module explain the background and give examples of usage. Links will be live very shortly.

At the moment there is a tgz included in the data directory. With no tar support in rex at this time I did not have time yet to code the dynamic generation of the tarball but this is definitely on my roadmap. The folder from which the tgz is generated is included unpacked too for ease of modification and reference.