# # Copyright (c) 2006-2015 Wade Alcorn - wade@bindshell.net # Browser Exploitation Framework (BeEF) - http://beefproject.com # See the file 'doc/COPYING' for copying permission # beef: module: vtiger_crm_upload_exploit: enable: true category: "Exploits" name: "VTiger CRM Upload Exploit" description: "This module demonstrates chained exploitation. It will upload and execute a reverse bindshell. The vulnerability is exploited in the CRM vtiger 5.0.4
The default PHP requires a listener, so don't forget to start one, for example: nc -l 8888." authors: ["wade", "bm", "pipes", "xntrik", "yorikv"] target: working: ["ALL"]