Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #12064, add Exim Local Privesc module	Aug 23, 2019	space-r7
Land #12219, Add Webmin password_change.cgi backdoor exploit	Aug 23, 2019	jrobles-r7
Land #12186 - Add RDP Fingerprinting	Aug 21, 2019	OJ
Land #12207, add LibreOffice/Logo file fmt exploit	Aug 19, 2019	space-r7
Land #12203, autofilter=false for a couple modules	Aug 16, 2019	wvu-r7
Land #12161, Store opasswd password history	Aug 12, 2019	jrobles-r7

Title

Date

Author

Land #12064, add Exim Local Privesc module

Aug 23, 2019

space-r7

Land #12219, Add Webmin password_change.cgi backdoor exploit

Aug 23, 2019

jrobles-r7

Land #12186 - Add RDP Fingerprinting

Aug 21, 2019

Land #12207, add LibreOffice/Logo file fmt exploit

Aug 19, 2019

space-r7

Land #12203, autofilter=false for a couple modules

Aug 16, 2019

wvu-r7

Land #12161, Store opasswd password history

Aug 12, 2019

jrobles-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Fix RPC console.create database active check	bug , msf5	mkienow-r7
Add Webmin password_change.cgi backdoor exploit	feature , module	wvu-r7
explicitly require factory_bot, see #12181	msf5 , rn-no-release-notes , tests	busterb
RDP lib: accept TLS 1.0	enhancement , library	cnotin
Add LibreOffice LibreLogo exec exploit Module (CVE-2019-9851)	docs , module	LoadLow
Update module and generate splats from http:// to https://	bug , easy , library , module , rn-no-release-notes	wvu-r7

Name

Labels

Author

Fix RPC console.create database active check

bug , msf5

mkienow-r7

Add Webmin password_change.cgi backdoor exploit

feature , module

wvu-r7

explicitly require factory_bot, see #12181

msf5 , rn-no-release-notes , tests

busterb

RDP lib: accept TLS 1.0

enhancement , library

cnotin

Add LibreOffice LibreLogo exec exploit Module (CVE-2019-9851)

docs , module

LoadLow

Update module and generate splats from http:// to https://

bug , easy , library , module , rn-no-release-notes

wvu-r7

Create a Pull Request

Recent Blog Posts

Fri Aug 23 2019

Metasploit Wrap-Up

A LibreOffice file format exploit, plus improvements to TLS and CredSSP-based fingerprinting....

Fri Aug 16 2019

Metasploit Wrap-Up

Hacker Summer Camp Last week, the Metasploit team flew out to sunny, hot, and dry Las Vegas for Hacker Summer Camp (Black Hat, BSidesLV, and DEF CON). It was a full week of epic hacks, good conversation, and even a little bus...

Fri Aug 09 2019

Metasploit Wrap-Up

Keep on Bluekeepin’ on TomSellers added a new option to the increasingly useful Bluekeep Scanner module that allows execution of a DoS attack when running the module. This adds a new level of effectiveness in proving the seve...

View More Metasploit Blog Posts