Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #12736, Add support for PPID spoofing	Jan 24, 2020	bwatters-r7
Land #12859, update AF_PACKET chocobo_root linux LPE	Jan 24, 2020	timwr
Land #12751, add Linux RDS socket NP deref privesc	Jan 22, 2020	busterb
Land #12773, add NVMS directory traversal	Jan 21, 2020	space-r7
Land #12768, add dlink command injection module	Jan 21, 2020	space-r7
Land #12845, check for SSL when SSL is not enabled	Jan 16, 2020	busterb

Title

Date

Author

Land #12736, Add support for PPID spoofing

Jan 24, 2020

bwatters-r7

Land #12859, update AF_PACKET chocobo_root linux LPE

Jan 24, 2020

timwr

Land #12751, add Linux RDS socket NP deref privesc

Jan 22, 2020

busterb

Land #12773, add NVMS directory traversal

Jan 21, 2020

space-r7

Land #12768, add dlink command injection module

Jan 21, 2020

space-r7

Land #12845, check for SSL when SSL is not enabled

Jan 16, 2020

busterb

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Prefer exploit.rb's rand_text wrapper in doublepulsar_rce	bug , easy , module , rn-no-release-notes	wvu-r7
handle Ranges with rand_text while in debug mode	enhancement , library	busterb
Add flags to send custom cookies	bug	dwelch-r7
Reflective dll inject enhancement		b4rtik
Update AF_PACKET chocobo_root Privilege Escalation module	enhancement , module	bcoles
Add Apache James 2.3.2 Command Injection Exploit Module		mattaberegg

Name

Labels

Author

Prefer exploit.rb's rand_text wrapper in doublepulsar_rce

bug , easy , module , rn-no-release-notes

wvu-r7

handle Ranges with rand_text while in debug mode

enhancement , library

busterb

Add flags to send custom cookies

bug

dwelch-r7

Reflective dll inject enhancement

b4rtik

Update AF_PACKET chocobo_root Privilege Escalation module

enhancement , module

bcoles

Add Apache James 2.3.2 Command Injection Exploit Module

mattaberegg

Create a Pull Request

Recent Blog Posts

Fri Jan 24 2020

Metasploit Wrap-up

Transgressive Traversal Contributor Dhiraj Mishra authored a neat Directory Traversal module targeted at NVMS-1000 Network Surveillance Management Software developed by TVT Digital Technology. Permitting the arbitrary downloa...

Fri Jan 17 2020

Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know

A a directory traversal vulnerability was announced in the Citrix Application Discovery Controller and Citrix Gateway, which would allow a remote, unauthenticated user to write a file to a location on disk....

Fri Jan 17 2020

Metasploit Wrap-Up

Silly admin, Citrix is for script kiddies A hot, new module has landed in Metasploit Framework this week. It takes advantage of CVE-2019-19781 which is a directory traversal vulnerability in Citrix Application Delivery Contro...

View More Metasploit Blog Posts