CVE-2016-1555

This Metasploit module exploits an unauthenticated remote command execution vulnerability in multiple Netgear devices by injecting commands into the 'macAddress' parameter of vulnerable PHP scripts. It includes a check method to verify vulnerability and a cmdstager for payload delivery.

This repository contains a functional Metasploit module that exploits an unauthenticated remote command execution vulnerability in multiple Netgear router models. The exploit leverages command injection via the 'macAddress' parameter in POST requests to specific PHP endpoints.

This Metasploit module exploits an unauthenticated remote command execution vulnerability in multiple Netgear devices by injecting commands into the 'macAddress' parameter of vulnerable PHP scripts. It uses a command stager to deliver a reverse shell payload.