From charlesreid1

(Created page with "<pre> use auxiliary/scanner/postgres/postgres_dbname_flag_injection use auxiliary/scanner/postgres/postgres_schemadump use auxiliary/scanner/postgres/postgres_hashdump...")
 
No edit summary
Line 1: Line 1:
=Search for Exploits=
<pre>
<pre>
use auxiliary/scanner/postgres/postgres_dbname_flag_injection  use auxiliary/scanner/postgres/postgres_schemadump
msf auxiliary(postgres_version) > search postgresql
use auxiliary/scanner/postgres/postgres_hashdump              use auxiliary/scanner/postgres/postgres_version
 
use auxiliary/scanner/postgres/postgres_login
Matching Modules
================
 
  Name                                                      Disclosure Date  Rank      Description
  ----                                                      ---------------  ----      -----------
  auxiliary/admin/http/manageengine_pmp_privesc              2014-11-08      normal    ManageEngine Password Manager SQLAdvancedALSearchResult.cc Pro SQL Injection
  auxiliary/admin/http/rails_devise_pass_reset              2013-01-28      normal    Ruby on Rails Devise Authentication Password Reset
  auxiliary/admin/postgres/postgres_readfile                                  normal    PostgreSQL Server Generic Query
  auxiliary/admin/postgres/postgres_sql                                      normal    PostgreSQL Server Generic Query
  auxiliary/scanner/postgres/postgres_dbname_flag_injection                  normal    PostgreSQL Database Name Command Line Flag Injection
  auxiliary/scanner/postgres/postgres_login                                  normal    PostgreSQL Login Utility
  auxiliary/scanner/postgres/postgres_version                                 normal    PostgreSQL Version Probe
  auxiliary/server/capture/postgresql                                        normal    Authentication Capture: PostgreSQL
  exploit/linux/postgres/postgres_payload                    2007-06-05      excellent  PostgreSQL for Linux Payload Execution
  exploit/multi/http/manage_engine_dc_pmp_sqli              2014-06-08      excellent  ManageEngine Desktop Central / Password Manager LinkViewFetchServlet.dat SQL Injection
  exploit/windows/postgres/postgres_payload                  2009-04-10      excellent  PostgreSQL for Microsoft Windows Payload Execution
  post/linux/gather/enum_users_history                                        normal    Linux Gather User History
</pre>
</pre>
=Related=
{{KaliFlag}}

Revision as of 23:30, 24 March 2016

Search for Exploits

msf auxiliary(postgres_version) > search postgresql

Matching Modules
================

   Name                                                       Disclosure Date  Rank       Description
   ----                                                       ---------------  ----       -----------
   auxiliary/admin/http/manageengine_pmp_privesc              2014-11-08       normal     ManageEngine Password Manager SQLAdvancedALSearchResult.cc Pro SQL Injection
   auxiliary/admin/http/rails_devise_pass_reset               2013-01-28       normal     Ruby on Rails Devise Authentication Password Reset
   auxiliary/admin/postgres/postgres_readfile                                  normal     PostgreSQL Server Generic Query
   auxiliary/admin/postgres/postgres_sql                                       normal     PostgreSQL Server Generic Query
   auxiliary/scanner/postgres/postgres_dbname_flag_injection                   normal     PostgreSQL Database Name Command Line Flag Injection
   auxiliary/scanner/postgres/postgres_login                                   normal     PostgreSQL Login Utility
   auxiliary/scanner/postgres/postgres_version                                 normal     PostgreSQL Version Probe
   auxiliary/server/capture/postgresql                                         normal     Authentication Capture: PostgreSQL
   exploit/linux/postgres/postgres_payload                    2007-06-05       excellent  PostgreSQL for Linux Payload Execution
   exploit/multi/http/manage_engine_dc_pmp_sqli               2014-06-08       excellent  ManageEngine Desktop Central / Password Manager LinkViewFetchServlet.dat SQL Injection
   exploit/windows/postgres/postgres_payload                  2009-04-10       excellent  PostgreSQL for Microsoft Windows Payload Execution
   post/linux/gather/enum_users_history                                        normal     Linux Gather User History



Related