admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 10:16:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/pfsense
History

README.md

pfSense Arbitrary File Write to RCE

diag_routes.php in pfSense 2.5.2 allows sed data injection. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility.

FOFA query rule: app="pfSense"

Demo

pfSense_Arbitrary_File_Write_to_RCE