CVE-2019-7192

This exploit targets CVE-2019-7192, a pre-authentication root RCE vulnerability in QNAP NAS devices. It chains multiple vulnerabilities to read sensitive system files like /etc/passwd, /etc/shadow, and SSH private keys by abusing session handling and path traversal.

This repository contains a Python-based scanner to check for QNAP NAS vulnerabilities (CVE-2019-7192 to CVE-2019-7195) by analyzing version and date information from the target device. It does not exploit the vulnerabilities but identifies potentially vulnerable systems.

This Metasploit module exploits a local file inclusion (LFI) vulnerability in QNAP QTS and Photo Station, allowing unauthenticated attackers to download sensitive files such as /etc/shadow. It automates the retrieval of album IDs and access codes to perform the LFI attack.