Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19798, fixing link and code cleanup Fix nsfw link in mssql_clr_payload, and rubocop the module	Jan 15, 2025	msutovsky-r7
Land #19738, Pandora FMS auth RCE (CVE-2024-11320) Land #19738, Pandora FMS auth RCE (CVE-2024-11320)	Jan 09, 2025	dledda-r7
Land #19781, Add Selenium file read auxiliary module Land #19781, Add Selenium file read auxiliary module	Jan 08, 2025	dledda-r7
Land #19771, Add Selenium Firefox RCE module (CVE-2022-28108) Land #19771, Add Selenium Firefox RCE module (CVE-2022-28108)	Jan 08, 2025	dledda-r7
Land #19769, Add Selenium Chrome RCE module (CVE-2022-28108) Land #19769, Add Selenium Chrome RCE module (CVE-2022-28108)	Jan 07, 2025	dledda-r7
Land #19367, fix ARM stager restore r0 in loop Land #19367, fix ARM stager restore r0 in loop	Jan 06, 2025	dledda-r7

Title

Date

Author

Land #19798, fixing link and code cleanup Fix nsfw link in mssql_clr_payload, and rubocop the module

Jan 15, 2025

msutovsky-r7

Land #19738, Pandora FMS auth RCE (CVE-2024-11320) Land #19738, Pandora FMS auth RCE (CVE-2024-11320)

Jan 09, 2025

dledda-r7

Land #19781, Add Selenium file read auxiliary module Land #19781, Add Selenium file read auxiliary module

Jan 08, 2025

dledda-r7

Land #19771, Add Selenium Firefox RCE module (CVE-2022-28108) Land #19771, Add Selenium Firefox RCE module (CVE-2022-28108)

Jan 08, 2025

dledda-r7

Land #19769, Add Selenium Chrome RCE module (CVE-2022-28108) Land #19769, Add Selenium Chrome RCE module (CVE-2022-28108)

Jan 07, 2025

dledda-r7

Land #19367, fix ARM stager restore r0 in loop Land #19367, fix ARM stager restore r0 in loop

Jan 06, 2025

dledda-r7

Latest Pull Requests

Name	Labels	Author
Add LDAP to the set of interactive session types	rn-no-release-notes	dwelch-r7
Carry on if the record can't be cached	rn-fix	zeroSteiner
Fix nsfw link in mssql_clr_payload, and rubocop the module	code quality	h00die
move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder	rn-no-release-notes	h00die
Add docs for Stance and Passive metadata	docs , easy , rn-documentation	jheysel-r7
Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution (CVE-2024-55956)		sfewer-r7

Name

Labels

Author

Add LDAP to the set of interactive session types

rn-no-release-notes

dwelch-r7

Carry on if the record can't be cached

rn-fix

zeroSteiner

Fix nsfw link in mssql_clr_payload, and rubocop the module

code quality

h00die

move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder

rn-no-release-notes

h00die

Add docs for Stance and Passive metadata

docs , easy , rn-documentation

jheysel-r7

Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution (CVE-2024-55956)

sfewer-r7

Create a Pull Request

Recent Blog Posts

Fri Jan 10 2025

Metasploit Wrap-Up 01/10/2025

This Metasploit Weekly saw 4 new module contents. Adds a module for CVE-2023-2640 & CVE-2023-32629, among others. Learn more!...

Fri Jan 03 2025

Metasploit 2024 Annual Wrap-Up

This year saw some great new features added, Metasploit 6.4 released and a slew of new modules. We're grateful to the community members new and old!...

Fri Dec 20 2024