CVE-2016-10709

This exploit demonstrates command injection and XSS vulnerabilities in pfSense Community Edition <= 2.2.6. The command injection leverages octal encoding to bypass input validation and execute arbitrary commands as root via the `status_rrd_graph_img.php` endpoint. The XSS vulnerabilities allow stored and reflected attacks in multiple administrative interfaces.

This repository contains functional exploit code for CVE-2016-10709, targeting the HackSys Extreme Vulnerable Driver (HEVD) with a stack overflow vulnerability. The exploit includes shellcode for token stealing and privilege escalation on Windows 10 x64 systems.

This Metasploit module exploits an authenticated remote command execution vulnerability in pfSense via the `graph` parameter in `status_rrd_graph_img.php`. It uploads a PHP payload and executes it as root by leveraging command injection.

This Metasploit module exploits an authenticated remote command execution vulnerability in pfSense versions <= 2.3.1_1 via command injection in the system_groupmanager.php page. It leverages CSRF token extraction and session management to execute arbitrary commands.