CVE-2018-1133

HTB Teacher (10.10.10.153)

HTB Teacher (101010153) Write-up PART 1 : Initial Recon nmap --min-rate 1000 -p- -v 101010153 PORT STATE SERVICE 80/tcp open http nmap -oN teachernmap -p 80 -sC -sV -v 101010153 PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2425 (

Noodle [Moodle RCE] (v3.4.1) - CVE-2018-1133

Moodle Exploit Exploit Title: Moodle v341 RCE Exploit Google Dork: inurl:"/course/jumptophp?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: moodleorg Software Link: githubcom/moodle/moodle/archive/v341zip Version: 341 (Possibly < 350 and maybe even 3x) Tested on: Linux with Moodle v341 CVE : CVE-2018-1133

CVE-2018-1133-Exploit This repository contains a python exploit script for the Moodle Evil Teacher exploit (CVE-2018-1133) Usage usage: Moodle Evil Teacher Exploit [-h] -u URL -l LOGIN -p PASSWORD -c COMMAND [-P PROXY] options: -h, --help show this help message and exit -u URL, --url URL Target URL -l LOGIN, --login LOGIN Login use

Search for known vulnerabilities in software using software titles or a CPE 2.3 string

search_vulns Search for known vulnerabilities in software using software titles or a CPE 23 string About search_vulns can be used to search for known vulnerabilities in software To achieve this, the tool utilizes a locally built vulnerability database, currently containing CVE information from the National Vulnerability Database (NVD) and exploit information from the Exploit