CVE-2015-1592

This Metasploit module exploits a Perl deserialization flaw in MovableType before 5.2.12 to execute arbitrary commands. It supports both nondestructive (requiring additional Perl modules) and destructive (corrupting the installation) attack methods.

This repository contains a Metasploit module and Perl scripts that exploit a Perl Storable deserialization vulnerability (CVE-2015-1592) in MovableType before 5.2.12. The exploit achieves remote code execution by leveraging Perl's object deserialization flaws, with both destructive and non-destructive methods.

This Metasploit module exploits a Perl deserialization flaw (CVE-2015-1592) in MovableType before 5.2.12 to achieve remote code execution. It supports both nondestructive (requiring additional Perl modules) and destructive (corrupting the installation) attack methods.