## https://sploitus.com/exploit?id=A1778F7B-C8BE-5DB9-A71F-7FB1F1DDA50D
This is an exploit module for EyesOfNetwork 5.1 to 5.3, a network monitoring and management tool. The exploit targets three vulnerabilities: CVE-2020-8654, CVE-2020-8655, and CVE-2020-9465.
CVE-2020-8654 is a discovery module that allows arbitrary OS commands to be run. The exploit uses the target field in the discovery module to inject the 'id' command, which is then executed on the target system.
CVE-2020-8655 is a LPE (Local Privilege Escalation) via nmap NSE script. The exploit takes advantage of the fact that the apache user is allowed to run nmap as root. By providing a specially crafted NSE script, the attacker can execute arbitrary commands as root.
CVE-2020-9465 is a SQLi (SQL Injection) in the API's 'getApiKey' function on the 'username' field. The exploit uses a PoC (Proof of Concept) to demonstrate the vulnerability, which allows an attacker to inject malicious SQL code.
The exploit is written in Python and uses the requests library to interact with the EyesOfNetwork API. The code includes a banner and a help message, and provides options for