CVE-2015-4624

This Metasploit module exploits a command injection vulnerability in Hak5 WiFi Pineapple devices (versions 2.0 to < 2.4) by leveraging default credentials or brute-forcing the proof-of-ownership challenge to reset the password. It then injects commands via a vulnerable endpoint to achieve remote code execution.

This Metasploit module exploits a command injection vulnerability in Hak5 WiFi Pineapple devices (versions 2.0.0 to 2.3.0) by bypassing login/CSRF checks. It sends a crafted POST request to execute arbitrary commands via the 'commands' parameter.

This Metasploit module exploits a command injection vulnerability in Hak5 WiFi Pineapple devices (versions 2.0 to 2.3.0) by leveraging default credentials and a weak anti-CSRF token mechanism. It includes brute-force capabilities for the proof-of-ownership challenge to reset the password if default credentials fail.