Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #18558, Support x64 in enum_chrome	Nov 21, 2023	adfoster-r7
Land #18448, corrected options confict between module and ldap mixin	Nov 21, 2023	adfoster-r7
Land #18434, Add module for Zoneminder RCE This PR adds an RCE module for the Zoneminder video surveillance software system (CVE-2023-26035).	Nov 10, 2023	jheysel-r7
Land #18507, Exploit & Auxiliary modules for CVE-2023-20198 and CVE-2023-20273 (Cisco IOS XE) Merge branch 'land-18507' into upstream-master	Nov 08, 2023	bwatters-r7
Land #18503, Apache Nifi Cred Stealer Post Module This PR adds a post module to steal config and credential information for Apache NiFi.	Nov 08, 2023	jheysel-r7
Land #18501, Exploit module for CVE-2023-46604 - Apache ActiveMQ Merge branch 'land-18501' into upstream-master	Nov 06, 2023	bwatters-r7

Title

Date

Author

Land #18558, Support x64 in enum_chrome

Nov 21, 2023

adfoster-r7

Land #18448, corrected options confict between module and ldap mixin

Nov 21, 2023

adfoster-r7

Land #18434, Add module for Zoneminder RCE This PR adds an RCE module for the Zoneminder video surveillance software system (CVE-2023-26035).

Nov 10, 2023

jheysel-r7

Land #18507, Exploit & Auxiliary modules for CVE-2023-20198 and CVE-2023-20273 (Cisco IOS XE) Merge branch 'land-18507' into upstream-master

Nov 08, 2023

bwatters-r7

Land #18503, Apache Nifi Cred Stealer Post Module This PR adds a post module to steal config and credential information for Apache NiFi.

Nov 08, 2023

jheysel-r7

Land #18501, Exploit module for CVE-2023-46604 - Apache ActiveMQ Merge branch 'land-18501' into upstream-master

Nov 06, 2023

bwatters-r7

Latest Pull Requests

Name	Labels	Author
Fix an uninitialized constant error in capture/http	module , bug , easy , rn-fix	zeroSteiner
Fix #18544: Support x64 in enum_chrome	module , bug , rn-fix	zeroSteiner
Update apache_activemq_rce_cve_2023_46604.rb		nu11secur1ty
Add support for Ruby 3.3.0-preview3	rn-enhancement	adfoster-r7
Refactor the ghostcat module to use the AJP definitions provided by Rex::Proto	rn-enhancement	zeroSteiner
Update ssh login pubkey module to correctly identify windows ssh platform	library , bug , rn-fix	adfoster-r7

Name

Labels

Author

Fix an uninitialized constant error in capture/http

module , bug , easy , rn-fix

zeroSteiner

Fix #18544: Support x64 in enum_chrome

module , bug , rn-fix

zeroSteiner

Update apache_activemq_rce_cve_2023_46604.rb

nu11secur1ty

Add support for Ruby 3.3.0-preview3

rn-enhancement

adfoster-r7

Refactor the ghostcat module to use the AJP definitions provided by Rex::Proto

rn-enhancement

zeroSteiner

Update ssh login pubkey module to correctly identify windows ssh platform

library , bug , rn-fix

adfoster-r7

Create a Pull Request

Recent Blog Posts

Thu Nov 23 2023

Metasploit Wrap-up

Metasploit 6.3.44 released with stability improvements and module fixes...

Fri Nov 17 2023

Metasploit Weekly Wrap-Up

Possible Web Service Removal Metasploit has support for running with a local database, or from a remote web service which can be initialized with msfdb init --component webservice. Future versions of Metasploit Framework may ...

Fri Nov 10 2023

Metasploit Weekly Wrap-Up

Apache MQ and Three Cisco Modules in a Trenchcoat This week’s release has a lot of new content and features modules targeting two major recent vulnerabilities that got a great deal of attention: CVE-2023-46604 targeting Apach...

View More Metasploit Blog Posts