CVE-2015-10141

This Metasploit module exploits a vulnerability in Xdebug versions 2.5.5 and below, allowing unauthenticated OS command execution via the eval command. It establishes a reverse shell by leveraging the Xdebug debugger session.

This is a functional exploit for CVE-2015-10141, targeting Xdebug v2.5.5 and earlier. It leverages unauthenticated command execution via the Xdebug debugger interface on port 9000, allowing arbitrary PHP code execution.

This is a functional Python exploit for CVE-2015-10141, targeting Xdebug ≤ 2.5.5. It leverages the unauthenticated debugging protocol on port 9000 to achieve remote command execution via base64-encoded PHP system() calls.

This Metasploit module exploits a vulnerability in Xdebug versions 2.5.5 and below, allowing unauthenticated remote command execution via the eval command. It sets up a TCP server to deliver a base64-encoded PHP payload to the target.