Browse Exploit & Auxiliary Modules

The Metasploit Project hosts the world's largest database of quality assured exploits, including hundreds of remote exploits, auxiliary modules, and payloads. You can even review the Metasploit Framework source code of any module - or write your own.

Search for modules

Module Browser

OSX Write and Execute Binary, Bind TCP Stager

Listen for a connection, Spawn a command shell (staged)

OSX Write and Execute Binary, Reverse TCP Stager

Connect back to the attacker, Spawn a command shell (staged)

OSX Command Shell, Bind TCP Stager

Listen for a connection, Spawn a command shell (staged)

OSX Command Shell, Reverse TCP Stager

Connect back to the attacker, Spawn a command shell (staged)

OSX Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell

OSX Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell

OSX iPhone Vibrate

Causes the iPhone to vibrate, only works when the AudioToolkit library has been loaded. Based on work by Charlie Miller <cmiller[at]securityevaluators.com>.

OSX Command Shell, Bind TCP Stager

Listen for a connection, Spawn a command shell (staged)

OSX Command Shell, Find Tag Stager

Use an established connection, Spawn a command shell (staged)

OSX Command Shell, Reverse TCP Stager

Connect back to the attacker, Spawn a command shell (staged)

OSX Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell

OSX Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell

OSX x64 Execute Command

Execute an arbitrary command

Mac OS X Inject Mach-O Bundle, Bind TCP Stager

Listen, read length, read buffer, execute, Inject a custom Mach-O bundle into the exploited process

Mac OS X Inject Mach-O Bundle, Reverse TCP Stager

Connect, read length, read buffer, execute, Inject a custom Mach-O bundle into the exploited process

OSX Execute Command

Execute an arbitrary command

Mac OS X x86 iSight photo capture, Bind TCP Stager

Listen, read length, read buffer, execute, Inject a Mach-O bundle to capture a photo from the iSight (staged)

Mac OS X x86 iSight photo capture, Reverse TCP Stager

Connect, read length, read buffer, execute, Inject a Mach-O bundle to capture a photo from the iSight (staged)

OSX Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell

OSX Command Shell, Find Port Inline

Spawn a shell on an established connection

OSX Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell

OSX (vfork) Command Shell, Bind TCP Stager

Listen, read length, read buffer, execute, Call vfork() if necessary and spawn a command shell (staged)

OSX (vfork) Command Shell, Reverse TCP Stager

Connect, read length, read buffer, execute, Call vfork() if necessary and spawn a command shell (staged)

OSX (vfork) Command Shell, Bind TCP Inline

Listen for a connection, vfork if necessary, and spawn a command shell

OSX (vfork) Command Shell, Reverse TCP Inline

Connect back to attacker, vfork if necessary, and spawn a command shell