Arbitrary Command Execution in Perl Locale::Maketext

This repository contains a single Metasploit module (modules/exploits/unix/webapp/foswiki_maketext.rb) that exploits a remote command execution vulnerability in Foswiki (CVE-2012-6329). The exploit targets the MAKETEXT variable, which is unsafely passed to Perl's eval, allowing arbitrary shell command execution. The module supports both authenticated and anonymous attacks, depending on the target's configuration. It interacts with the Foswiki web application via HTTP endpoints such as /bin/login, /bin/edit, and /bin/save to authenticate, retrieve necessary tokens, inject the payload, and trigger execution. The payload is customizable and allows execution of arbitrary shell commands as the web server user. The exploit is operational and has been tested against Foswiki 1.1.5. The repository is structured as a typical Metasploit module, written in Ruby, and leverages the Metasploit framework's payload and HTTP client capabilities.

This repository contains a single Metasploit module (modules/exploits/unix/webapp/twiki_maketext.rb) that exploits a remote command execution vulnerability (CVE-2012-6329) in TWiki installations prior to version 5.1.3. The vulnerability arises from unsanitized user input passed to Perl's eval function via the MAKETEXT variable, allowing attackers to inject and execute arbitrary shell commands. The module supports both authenticated and anonymous exploitation, depending on the target's configuration. It interacts with several TWiki HTTP endpoints to authenticate, retrieve tokens, inject the payload, and trigger execution. The exploit is weaponized, allowing customizable command payloads, and is suitable for use against vulnerable TWiki instances with user interface localization enabled. The code is written in Ruby and is structured as a standard Metasploit exploit module.