Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #12751, add Linux RDS socket NP deref privesc	Jan 22, 2020	busterb
Land #12773, add NVMS directory traversal	Jan 21, 2020	space-r7
Land #12768, add dlink command injection module	Jan 21, 2020	space-r7
Land #12845, check for SSL when SSL is not enabled	Jan 16, 2020	busterb
Land #12776, PROTOCOL option for sunrpc_portmapper	Jan 16, 2020	wvu-r7
Land #12758, attributes and immutable? methods	Jan 16, 2020	wvu-r7

Title

Date

Author

Land #12751, add Linux RDS socket NP deref privesc

Jan 22, 2020

busterb

Land #12773, add NVMS directory traversal

Jan 21, 2020

space-r7

Land #12768, add dlink command injection module

Jan 21, 2020

space-r7

Land #12845, check for SSL when SSL is not enabled

Jan 16, 2020

busterb

Land #12776, PROTOCOL option for sunrpc_portmapper

Jan 16, 2020

wvu-r7

Land #12758, attributes and immutable? methods

Jan 16, 2020

wvu-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Reflective dll inject enhancement		b4rtik
Add Apache James 2.3.2 Command Injection Exploit Module		mattaberegg
Update LICENSE and COPYING	bug , easy	wvu-r7
tighten whitespace in cracker lib	bug , library , msf5 , rn-no-release-notes	h00die
add exploit module tautulli_shutdown_exec [ CVE-2019-19833 ]		ismailtasdelen
Use new immutable? method in modules	enhancement , module , rn-no-release-notes	wvu-r7

Name

Labels

Author

Reflective dll inject enhancement

b4rtik

Add Apache James 2.3.2 Command Injection Exploit Module

mattaberegg

Update LICENSE and COPYING

bug , easy

wvu-r7

tighten whitespace in cracker lib

bug , library , msf5 , rn-no-release-notes

h00die

add exploit module tautulli_shutdown_exec [ CVE-2019-19833 ]

ismailtasdelen

Use new immutable? method in modules

enhancement , module , rn-no-release-notes

wvu-r7

Create a Pull Request

Recent Blog Posts

Fri Jan 17 2020

Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know

A a directory traversal vulnerability was announced in the Citrix Application Discovery Controller and Citrix Gateway, which would allow a remote, unauthenticated user to write a file to a location on disk....

Fri Jan 17 2020

Metasploit Wrap-Up

Silly admin, Citrix is for script kiddies A hot, new module has landed in Metasploit Framework this week. It takes advantage of CVE-2019-19781 which is a directory traversal vulnerability in Citrix Application Delivery Contro...

Wed Jan 15 2020