CVE-2015-6589

This exploit demonstrates multiple vulnerabilities in Kaseya VSA, including unauthenticated privilege escalation and remote code execution via file upload with directory traversal. It includes a Ruby script for authenticated arbitrary file upload (CVE-2015-6589) and references Metasploit modules for unauthenticated exploits (CVE-2015-6922).

This Ruby script exploits CVE-2015-6589, an authenticated arbitrary file upload vulnerability in Kaseya VSA versions 7.0.0.0 to 9.1.0.8. It authenticates using a challenge-based password hashing mechanism, then uploads a shell file to a vulnerable endpoint.