SecGen
SecGen copied to clipboard
New Module: codoforum_rce_authenticated
TODO:
- Resolve install password issue -- need to ensure password is hashed using phpass otherwise the admin user cannot login and it is not possible to complete the exploit. Possible solutions (a) change the codoforum security requirements or (b) create php script/page just for creating the admin user as the native pages cannot be run using puppet
- Team testing