CVE-2020-11108

Related Files

Pi-hole 4.4.0 Remote Code Execution

Posted May 27, 2020

Authored by Photubias

Pi-hole version 4.4.0 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2020-11108

SHA-256 | c7a92f42c54992e326709bf0e3e1ed94ba5f65503d1d8babc2253d1fecbc3a84

Download | Favorite | View

Pi-Hole heisenbergCompensator Blocklist OS Command Execution

Posted May 18, 2020

Authored by h00die, Nick Frichette | Site metasploit.com

This Metasploit module exploits a command execution in Pi-Hole versions 4.4 and below. A new blocklist is added, and then an update is forced (gravity) to pull in the blocklist content. PHP content is then written to a file within the webroot. Phase 1 writes a sudo pihole command to launch teleporter, effectively running a privilege escalation. Phase 2 writes our payload to teleporter.php, overwriting the content. Lastly, the phase 1 PHP file is called in the web root, which launches our payload in teleporter.php with root privileges.

tags | exploit, web, root, php

advisories | CVE-2020-11108

SHA-256 | e9e23eb75325d3d113b4298300162d67296d9023cbe19ae5f2709a0a7cace534

Download | Favorite | View

Pi-hole 4.4 Remote Code Execution / Privilege Escalation

Posted May 10, 2020

Authored by Nick Frichette

Pi-hole versions 4.4 and below remote code execution and privilege escalation exploit.

tags | exploit, remote, code execution

advisories | CVE-2020-11108

SHA-256 | 24dbec0272280c917c4f6f1294f5d251879231087642729ccdd7a1b727a27cff

Download | Favorite | View

Pi-hole 4.4 Remote Code Execution

Posted May 10, 2020

Authored by Nick Frichette

Pi-hole versions 4.4 and below suffer from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2020-11108

SHA-256 | c400406dcb79630cf4da18e7a41e5e507d3715a4c57d6150947c2924a9d53b97

Download | Favorite | View