Exodus Wallet (ElectronJS Framework) Remote Code Execution

Posted on 29 March 2018

This Metasploit module exploits a remote code execution vulnerability in Exodus Wallet. A vulnerability in the ElectronJS Framework protocol handler can be used to get arbitrary command execution if the user clicks on a specially crafted URL.