Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #12532, Add FusionPBX Command exec.php Command Execution Add FusionPBX Command exec.php Command Execution	Nov 13, 2019	wchen-r7
Land #12531, Add FusionPBX Operator Panel exec.php Command Execution Add FusionPBX Operator Panel exec.php Command Execution	Nov 13, 2019	wchen-r7
Land #12534, Add FreeSWITCH Event Socket Command Execution Add FreeSWITCH Event Socket Command Execution	Nov 13, 2019	wchen-r7
Land #12529, add CMSMS object inject exploit	Nov 13, 2019	space-r7
Land #12542, add Bludit File Upload Exploit	Nov 12, 2019	space-r7
Land #12543, myworkspace.id to myworkspace_id fix	Nov 12, 2019	wvu-r7

Title

Date

Author

Land #12532, Add FusionPBX Command exec.php Command Execution Add FusionPBX Command exec.php Command Execution

Nov 13, 2019

wchen-r7

Land #12531, Add FusionPBX Operator Panel exec.php Command Execution Add FusionPBX Operator Panel exec.php Command Execution

Nov 13, 2019

wchen-r7

Land #12534, Add FreeSWITCH Event Socket Command Execution Add FreeSWITCH Event Socket Command Execution

Nov 13, 2019

wchen-r7

Land #12529, add CMSMS object inject exploit

Nov 13, 2019

space-r7

Land #12542, add Bludit File Upload Exploit

Nov 12, 2019

space-r7

Land #12543, myworkspace.id to myworkspace_id fix

Nov 12, 2019

wvu-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Fix style in exploit/windows/smb/doublepulsar_rce	bug , module , rn-no-release-notes	wvu-r7
Fix renamed RuboCop check in .rubocop.yml	bug , easy	wvu-r7
Update exploit/windows/smb/doublepulsar_rce info	bug , module , rn-no-release-notes	wvu-r7
fix NameError uninitialized constant in Msf::Post::Linux::Compile	bug	timwr
64K ought to be enough for anyone	bug , hotness	bcoles
Remove syscall hook from BlueKeep payload	bug , enhancement , module	zerosum0x0

Name

Labels

Author

Fix style in exploit/windows/smb/doublepulsar_rce

bug , module , rn-no-release-notes

wvu-r7

Fix renamed RuboCop check in .rubocop.yml

bug , easy

wvu-r7

Update exploit/windows/smb/doublepulsar_rce info

bug , module , rn-no-release-notes

wvu-r7

fix NameError uninitialized constant in Msf::Post::Linux::Compile

bug

timwr

64K ought to be enough for anyone

bug , hotness

bcoles

Remove syscall hook from BlueKeep payload

bug , enhancement , module

zerosum0x0

Create a Pull Request

Recent Blog Posts

Fri Nov 08 2019

Metasploit Wrap-Up

Config R Us Many versions of network management tool rConfig are vulnerable to unauthenticated command injection, and contributor bcoles added a new exploit module for targeting those versions. Present in v3.9.2 and prior, t...

Fri Nov 01 2019

Metasploit Wrap-Up

This week's Metasploit wrap-up ships a new exploit module against Nostromo, a directory traversal vulnerability that allows system commands to be executed remotely. Also, improvements have been made for the grub_creds module ...

Fri Oct 25 2019

Metasploit Wrap-Up

Is URGENT/11 urgent to your world? Metasploit now has a scanner module to help find the systems that need URGENT attention. Be sure to check the options on this one; RPORTS is a list to test multiple services on each target....

View More Metasploit Blog Posts