CVE-2016-8580

This exploit demonstrates a PHP object injection vulnerability in Alienvault OSSIM/USM by injecting a serialized IDS_Report object into the refresh parameter of image.php. The __toString method of IDS_Report is executed, confirming the vulnerability.

This Metasploit module exploits a chain of vulnerabilities in AlienVault OSSIM/USM, including object injection, authentication bypass, and SQL injection, to achieve remote code execution as root. It hijacks an admin session, creates a rogue action with a Python payload, and triggers it via SSH login.