1
1
##
2
- # This module requires Metasploit: http//metasploit.com/download
2
+ # This module requires Metasploit: http: //metasploit.com/download
3
3
# Current source: https://github.com/rapid7/metasploit-framework
4
4
##
5
5
@@ -14,29 +14,28 @@ def initialize(info = {})
14
14
super ( update_info ( info ,
15
15
'Name' => 'ManageEngine Desktop Central Administrator Account Creation' ,
16
16
'Description' => %q{
17
- This module exploits an administrator account creation vulnerability in Desktop Central
18
- from v7 onwards by sending a crafted request to DCPluginServelet.
19
- It has been tested in several versions of Desktop Central (including MSP) from
20
- v7 onwards.
21
- } ,
17
+ This module exploits an administrator account creation vulnerability in Desktop Central
18
+ from v7 onwards by sending a crafted request to DCPluginServelet. It has been tested in
19
+ several versions of Desktop Central (including MSP) from v7 onwards.
20
+ } ,
22
21
'Author' =>
23
22
[
24
23
'Pedro Ribeiro <pedrib[at]gmail.com>' # Vulnerability discovery and MSF module
25
24
] ,
26
25
'License' => MSF_LICENSE ,
27
26
'References' =>
28
27
[
29
- [ 'CVE' , '2014-7862' ] ,
30
- [ 'OSVDB' , '116554' ] ,
31
- [ 'URL' , 'https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_admin.txt' ] ,
32
- [ 'URL' , 'http://seclists.org/fulldisclosure/2015/Jan/2' ]
28
+ [ 'CVE' , '2014-7862' ] ,
29
+ [ 'OSVDB' , '116554' ] ,
30
+ [ 'URL' , 'https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_admin.txt' ] ,
31
+ [ 'URL' , 'http://seclists.org/fulldisclosure/2015/Jan/2' ]
33
32
] ,
34
33
'DisclosureDate' => 'Dec 31 2014' ) )
35
34
36
35
register_options (
37
36
[
38
37
OptPort . new ( 'RPORT' , [ true , 'The target port' , 8020 ] ) ,
39
- OptString . new ( 'TARGETURI' , [ true , " Desktop Central URI" , '/' ] ) ,
38
+ OptString . new ( 'TARGETURI' , [ true , 'ManageEngine Desktop Central URI' , '/' ] ) ,
40
39
OptString . new ( 'USERNAME' , [ true , 'The username for the new admin account' , 'msf' ] ) ,
41
40
OptString . new ( 'PASSWORD' , [ true , 'The password for the new admin account' , 'password' ] ) ,
42
41
OptString . new ( 'EMAIL' , [ true , 'The email for the new admin account' , '[email protected] ' ] )
0 commit comments