RaspberryMatic unauthenticated RCE (Zip Slip) [CVE-2024-24578]#19841

Open

h00die-gr3y wants to merge 9 commits intorapid7:masterfrom h00die-gr3y:raspberrymatic-unauth-rce

+980

Commits on Feb 12, 2025

init commit module

h00die-gr3y
authored and
bwatters-r7
committed
first release module and documentation

h00die-gr3y
authored and
bwatters-r7
committed
Apply suggestions from code review

authored and
bwatters-r7
committed
fixed code review and updated documentation

h00die-gr3y
authored and
bwatters-r7
committed
updated documentation with Linux Dropper (x86_64) target scenario

h00die-gr3y
authored and
bwatters-r7
committed
Add fetch payloads for aarch64, armbe, armle, mipsbe, mipsle, ppc, ppc64
bwatters-r7
committed
Add specs to pass tests
bwatters-r7
committed
removed linux dropper code and tested with PR 19850

h00die-gr3y
authored and
bwatters-r7
committed
added default options and updated documentation

h00die-gr3y
authored and
bwatters-r7
committed