module

Embedthis GoAhead Embedded Web Server Directory Traversal

Disclosed
N/A
Created
2018-05-30

Description

This module exploits a directory traversal vulnerability in the Embedthis
GoAhead Web Server v3.4.1, allowing an attacker to read arbitrary files
with the web server privileges.

Authors

Matthew Daley
Roberto Soares Espreto robertoespreto@gmail.com

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use auxiliary/scanner/http/goahead_traversal
msf auxiliary(goahead_traversal) > show actions
...actions...
msf auxiliary(goahead_traversal) > set ACTION < action-name >
msf auxiliary(goahead_traversal) > show options
...show and set options...
msf auxiliary(goahead_traversal) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.