Importing a web-based RCE exploit into Metasploit
In this section, we will look at how we can import web application exploits into Metasploit. Our entire focus throughout this chapter will be to grasp essential functions equivalent to those used in different programming languages. In this example, we will look at the PHP Utility Belt Remote Code Execution (RCE) vulnerability disclosed on December 8, 2015. The vulnerable application can be downloaded from https://www.exploit-db.com/apps/222c6e2ed4c86f0646016e43d1947a1f-php-utility-belt-master.zip.
The RCE vulnerability lies in the code parameter of a POST request, which, when manipulated using specially crafted data, can lead to the execution of server-side code. Let's see how we can exploit this vulnerability manually as follows:
Figure 4.6 – Manual exploitation of PHP Utility Belt
The command we used in the preceding screenshot is fwrite, which writes data to a file. We used fwrite to open...
