CVE-2011-4642

This exploit targets CVE-2011-4644, a vulnerability in Splunk that allows remote authentication bypass and potential remote code execution. The script includes functionality for brute-forcing credentials, interacting with Splunk's web and management interfaces, and leveraging session keys for further exploitation.

This Metasploit module exploits a command execution vulnerability in Splunk's 'mappy' search command (CVE-2011-4642) by injecting Python code via base64-encoded payloads. It authenticates as an admin user and executes arbitrary commands on the target system.