https://blog.mirch.io/tags/metasploit/ Recent content in metasploit on Rich Mirch Hugo en-us Fri, 25 Sep 2020 20:52:25 +0000 https://blog.mirch.io/2020/09/25/metasploit-module-developed-for-cve-2018-18556-vyos-privilege-escalation/ Fri, 25 Sep 2020 20:52:25 +0000 https://blog.mirch.io/2020/09/25/metasploit-module-developed-for-cve-2018-18556-vyos-privilege-escalation/ <p>Today, a Metasploit module was merged for a vulnerability I found in 2018 with <a href="https://www.vyos.io/">VyOS</a>. This vulnerability was my first public InfoSec blog post. I appreciate <a href="https://github.com/bcoles">bcoles</a> for developing the <a href="https://github.com/rapid7/metasploit-framework/pull/14123">exploit/linux/ssh/vyos_restricted_shell_privesc</a> module. Read the <a href="https://www.rapid7.com/blog/post/2020/09/25/metasploit-wrap-up-80/">Metasploit Wrapup for 9/25/2020</a>. The full write-up can be found on this blog at <a href="https://blog.mirch.io/2018/11/05/cve-2018-18556-vyos-privilege-escalation-via-sudo-pppd-for-operator-users/">CVE-2018-18556 – VyOS Privilege escalation via sudo pppd for operator users</a>.</p>