Zach Hanley

Metasploit · Author

Source-scoped identity with 8 associated PoCs and 11 linked vulnerabilities.

Showing 8 PoCs on this page

Metasploit

Ivanti EPM Agent Portal Command Execution

Metasploit exploitby James HorsemanAdded to Metasploit 2024-10-17Not analyzedCVE-2023-283241 file

exploit_windows/misc/ivanti_agent_portal_cmdexec · Ruby

MetasploitPoC details
Metasploit

Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)

Metasploit exploitby Brian HysellAdded to Metasploit 2024-10-11Not analyzedCVE-2024-24809CVE-2024-5910CVE-2024-94641 file

exploit_linux/http/paloalto_expedition_rce · Ruby

MetasploitPoC details
Metasploit

SolarWinds Web Help Desk Backdoor (CVE-2024-28987)

Metasploit auxiliary PoCby Michael HeinzlAdded to Metasploit 2024-09-25Not analyzedCVE-2024-289871 file

auxiliary_gather/solarwinds_webhelpdesk_backdoor · Ruby

MetasploitPoC details
Metasploit

FortiNet FortiClient Endpoint Management Server FCTID SQLi to RCE

Metasploit exploitby James HorsemanAdded to Metasploit 2024-04-12Not analyzedCVE-2023-487881 file

exploit_windows/http/forticlient_ems_fctid_sqli · Ruby

MetasploitPoC details
Metasploit

Fortra GoAnywhere MFT Unauthenticated Remote Code Execution

Metasploit exploitby James HorsemanAdded to Metasploit 2024-01-29Not analyzedCVE-2024-02041 file

exploit_multi/http/fortra_goanywhere_mft_rce_cve_2024_0204 · Ruby

MetasploitPoC details
Metasploit

Lexmark Device Embedded Web Server RCE

Metasploit exploitby James HorsemanAdded to Metasploit 2023-08-31Not analyzedCVE-2023-26067CVE-2023-260681 file

exploit_linux/http/lexmark_faxtrace_settings · Ruby

MetasploitPoC details
Metasploit

Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)

Metasploit exploitby James HorsemanAdded to Metasploit 2023-08-29Not analyzedCVE-2023-380351 file

exploit_linux/http/ivanti_sentry_misc_log_service · Ruby

MetasploitPoC details
Metasploit

Fortinet FortiNAC keyUpload.jsp arbitrary file write

Metasploit exploitby Gwendal GuégniaudAdded to Metasploit 2023-03-08Not analyzedCVE-2022-399521 file

exploit_linux/http/fortinac_keyupload_file_write · Ruby

MetasploitPoC details