CVE-2020-8655

This repository contains functional exploit code for CVE-2020-8655, which leverages a local privilege escalation (LPE) via nmap NSE script execution in EyesOfNetwork 5.1 to 5.3. The exploit chains multiple CVEs (CVE-2020-8654, CVE-2020-8655, CVE-2020-8656) to achieve remote code execution (RCE) and privilege escalation.

This exploit demonstrates a multi-stage attack against EyesOfNetwork 5.3, combining SQL injection for authentication bypass, user creation, and remote code execution via a crafted NSE script for privilege escalation. The payload includes a reverse shell triggered through nmap's script execution.

This Metasploit module exploits multiple vulnerabilities in EyesOfNetwork (CVE-2020-8655) to achieve remote command execution as root. It leverages a command injection flaw in the AutoDiscovery feature, combined with privilege escalation via Nmap (executed as root by the apache user).