CVE-2017-11610

This Metasploit module exploits an authenticated XML-RPC vulnerability in Supervisor (CVE-2017-11610) to achieve remote code execution by sending a malicious XML-RPC request to supervisord, which runs arbitrary shell commands as the supervisord user.

This repository contains a Python-based exploit for CVE-2017-11610, a remote command execution vulnerability in Supervisor versions 3.1.2 to 3.3.2. The exploit leverages XML-RPC method calls to execute arbitrary commands via the `supervisor.supervisord.options.warnings.linecache.os.system` method.

This is a standalone Python exploit for CVE-2017-11610, targeting Supervisor versions 3.0a1 to 3.3.2. It achieves unauthenticated remote code execution via XML-RPC endpoint manipulation, delivering a reverse shell payload.

This Metasploit module exploits CVE-2017-11610, an authenticated RCE vulnerability in Supervisor (3.0a1-3.3.2) via malicious XML-RPC requests. It leverages the `supervisor.supervisord.options.warnings.linecache.os.system` method to execute arbitrary commands.