CVE-2018-1000006

This Metasploit module exploits CVE-2018-1000006, a vulnerability in the ElectronJS framework used by Exodus Wallet, to achieve remote code execution via a crafted URL that triggers a malicious protocol handler.

This exploit leverages a URI handler vulnerability in Exodus wallet to execute arbitrary commands via the '--gpu-launcher' parameter. The PoC demonstrates command injection by redirecting to a malicious 'exodus://' URI.

This repository demonstrates CVE-2018-1000006, a remote command execution vulnerability in Electron versions prior to 1.8.2-beta.4. The PoC includes vulnerable and fixed Electron applications, highlighting the exploit via protocol handler misuse.

This Metasploit module exploits a vulnerability in the ElectronJS framework's protocol handler, allowing remote code execution in Exodus Wallet when a user clicks a crafted URL. It serves a malicious HTML page that triggers a PowerShell payload via the 'exodus://' protocol handler.