Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #11127, Fix TARGETURI support in struts2_namespace_ognl	Dec 15, 2018	wchen-r7
Land #11119, Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit	Dec 13, 2018	busterb
Revert "Land #10886, Bypassuac computerdefault" This reverts commit 14b2cdc120cbb812b1f02caecdce253d55f6cd63, reversing changes made to a79b936e09c719ff4373c5b20a7bce5c1da06a1a.	Dec 13, 2018	bwatters-r7
Land #10944, Add macOS Safari exploit from pwn2own2018	Dec 13, 2018	wchen-r7
Land #11107, double negative logic cleanup	Dec 12, 2018	wvu-r7
Land #10960, add wp duplicator code inject module	Dec 11, 2018	space-r7

Title

Date

Author

Land #11127, Fix TARGETURI support in struts2_namespace_ognl

Dec 15, 2018

wchen-r7

Land #11119, Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit

Dec 13, 2018

busterb

Revert "Land #10886, Bypassuac computerdefault" This reverts commit 14b2cdc120cbb812b1f02caecdce253d55f6cd63, reversing changes made to a79b936e09c719ff4373c5b20a7bce5c1da06a1a.

Dec 13, 2018

bwatters-r7

Land #10944, Add macOS Safari exploit from pwn2own2018

Dec 13, 2018

wchen-r7

Land #11107, double negative logic cleanup

Dec 12, 2018

wvu-r7

Land #10960, add wp duplicator code inject module

Dec 11, 2018

space-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Fix TARGETURI support in struts2_namespace_ognl	bug , module	wvu-r7
Delete unused variable	bug , external modules , rn-no-release-notes	Auxilus
remove call to method not defined	bug , easy , library , rn-no-release-notes	jmartin-r7
Revert "Land #10886, Bypassuac computerdefault"		bwatters-r7
Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit	docs , enhancement , module	wvu-r7
update Gemfile.lock		jmartin-r7

Name

Labels

Author

Fix TARGETURI support in struts2_namespace_ognl

bug , module

wvu-r7

Delete unused variable

bug , external modules , rn-no-release-notes

Auxilus

remove call to method not defined

bug , easy , library , rn-no-release-notes

jmartin-r7

Revert "Land #10886, Bypassuac computerdefault"

bwatters-r7

Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit

docs , enhancement , module

wvu-r7

update Gemfile.lock

jmartin-r7

Create a Pull Request

Recent Blog Posts

Fri Dec 14 2018

Metasploit Wrapup

Backups that Cause Problems hypn0s contributed a module that exploits Snap Creek’s Duplicator plugin for WordPress. Duplicator is a plugin that eases the backup and migration of WordPress installations. For versions 1.2.40 an...

Fri Dec 07 2018

Metasploit Wrapup

If you are tired of all the snake memes and images we pushed out as we stood up support for python external modules over the last year or so, I have terrific news for you!...

Mon Dec 03 2018

Congrats to the 2018 Metasploit community CTF winners

After three days of fierce competition, we have the winners of this year's Metasploit community CTF. We've included some high-level stats from the game below; check out the scoreboard here. If you played the CTF this weekend ...

View More Metasploit Blog Posts