EIP-2026-103271

This Metasploit module exploits an unauthenticated command injection vulnerability in DenyAll Web Application Firewall by extracting an iToken and using it to execute arbitrary commands via a POST request to a vulnerable endpoint.