Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #18579, Use the new style of Windows version detection for CVE-2022-3699 Merge branch 'land-18579' into upstream-master	Nov 29, 2023	bwatters-r7
Land #18567, Add exploit module for CVE-2023-5360. This pull request adds a new exploit module for an unauth file upload vulnerability in the WordPress Royal Elementor Addons and Templates plugin, versions before 1.3.79, tracked as CVE-2023-5360.	Nov 28, 2023	jheysel-r7
Land #18560, Forging diamond and sapphire tickets	Nov 28, 2023	smcintyre-r7
Land #18558, Support x64 in enum_chrome	Nov 21, 2023	adfoster-r7
Land #18448, corrected options confict between module and ldap mixin	Nov 21, 2023	adfoster-r7
Land #18434, Add module for Zoneminder RCE This PR adds an RCE module for the Zoneminder video surveillance software system (CVE-2023-26035).	Nov 10, 2023	jheysel-r7

Title

Date

Author

Land #18579, Use the new style of Windows version detection for CVE-2022-3699 Merge branch 'land-18579' into upstream-master

Nov 29, 2023

bwatters-r7

Land #18567, Add exploit module for CVE-2023-5360. This pull request adds a new exploit module for an unauth file upload vulnerability in the WordPress Royal Elementor Addons and Templates plugin, versions before 1.3.79, tracked as CVE-2023-5360.

Nov 28, 2023

jheysel-r7

Land #18560, Forging diamond and sapphire tickets

Nov 28, 2023

smcintyre-r7

Land #18558, Support x64 in enum_chrome

Nov 21, 2023

adfoster-r7

Land #18448, corrected options confict between module and ldap mixin

Nov 21, 2023

adfoster-r7

Land #18434, Add module for Zoneminder RCE This PR adds an RCE module for the Zoneminder video surveillance software system (CVE-2023-26035).

Nov 10, 2023

jheysel-r7

Latest Pull Requests

Name	Labels	Author
Allow external modules to specify default options	rn-enhancement	adfoster-r7
Use the new style of Windows version detection for CVE-2022-3699	rn-fix	zeroSteiner
Remove spurious print; resolves #18562	rn-no-release-notes	smashery
Clearer RHOST error message	rn-enhancement	smashery
Add Exploit Module for WP Royal Elementor Addons Unauthenticated File Upload (CVE-2023-5360)	module , docs	Chocapikk
Check the cache for a TGT without a host	library , enhancement , rn-enhancement	zeroSteiner

Name

Labels

Author

Allow external modules to specify default options

rn-enhancement

adfoster-r7

Use the new style of Windows version detection for CVE-2022-3699

rn-fix

zeroSteiner

Remove spurious print; resolves #18562

rn-no-release-notes

smashery

Clearer RHOST error message

rn-enhancement

smashery

Add Exploit Module for WP Royal Elementor Addons Unauthenticated File Upload (CVE-2023-5360)

module , docs

Chocapikk

Check the cache for a TGT without a host

library , enhancement , rn-enhancement

zeroSteiner

Create a Pull Request

Recent Blog Posts

Fri Dec 01 2023

Metasploit Weekly Wrap-Up

Customizable DNS resolution Contributor smashery added a new dns command to Metasploit console, which allows the user to customize the behavior of DNS resolution. Similarly to the route command, it is now possible to specify ...

Thu Nov 23 2023

Metasploit Wrap-up

Metasploit 6.3.44 released with stability improvements and module fixes...

Fri Nov 17 2023

Metasploit Weekly Wrap-Up

Possible Web Service Removal Metasploit has support for running with a local database, or from a remote web service which can be initialized with msfdb init --component webservice. Future versions of Metasploit Framework may ...

View More Metasploit Blog Posts