Hands-On Web Penetration Testing with Metasploit

Exploiting RESTful Web Services RCE via unserialize() using Metasploit

Now that we understand the concept of serialization and how a payload is serialized, let's use the Metasploit exploit module to exploit this vulnerability. Let's execute the following command to use the exploit module:

use exploit/unix/webapp/drupal_restws_unserialize

The following screenshot shows the output of the preceding command:

We then set the options and run the exploit. Upon running the Metasploit module, we will observe that it first performs a patch-level check by asking CHANGELOG.txt to look for the SA-CORE-2019-003 patch. The id command is executed to confirm ...