# # Copyright (c) 2006-2026 Wade Alcorn - wade@bindshell.net # Browser Exploitation Framework (BeEF) - https://beefproject.com # See the file 'doc/COPYING' for copying permission # beef: module: vtiger_crm_upload_exploit: enable: true category: "Exploits" name: "VTiger CRM Upload Exploit" description: "This module demonstrates chained exploitation. It will upload and execute a reverse shell. The vulnerability is exploited in the CRM vtiger 5.0.4
The default PHP requires a listener, so don't forget to start one, for example: nc -l 8888." authors: ["wade", "bm", "pipes", "xntrik", "yorikv"] target: working: ["ALL"]