Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19381, Fix gitlab_login scanner This fixes the gitlab_login scanner so that it uses the proper datastore options Username and Password which are the standard for login scanners. Before this fix the scanner was using HttpUsername and HttpPassword and ignoring the datastore options Username and Password	Aug 30, 2024	jheysel-r7
Land #19401, Add a mixin to get SPIP version and make use of it	Aug 30, 2024	dwelch-r7
Land #19421, Updates to adobe_pdf_embedded_exe Merge branch 'land-19421' into upstream-master	Aug 28, 2024	bwatters-r7
Land #19409, Add additional Linux VM fingerprints Improve a bit modules/post/linux/gather/checkvm.rb	Aug 28, 2024	smcintyre-r7
Land #19424, WordPress GiveWP Plugin RCE	Aug 28, 2024	adfoster-r7
Land #19422, pgAdmin 8.4 RCE / CVE-2024-3116	Aug 28, 2024	adfoster-r7

Title

Date

Author

Land #19381, Fix gitlab_login scanner This fixes the gitlab_login scanner so that it uses the proper datastore options Username and Password which are the standard for login scanners. Before this fix the scanner was using HttpUsername and HttpPassword and ignoring the datastore options Username and Password

Aug 30, 2024

jheysel-r7

Land #19401, Add a mixin to get SPIP version and make use of it

Aug 30, 2024

dwelch-r7

Land #19421, Updates to adobe_pdf_embedded_exe Merge branch 'land-19421' into upstream-master

Aug 28, 2024

bwatters-r7

Land #19409, Add additional Linux VM fingerprints Improve a bit modules/post/linux/gather/checkvm.rb

Aug 28, 2024

smcintyre-r7

Land #19424, WordPress GiveWP Plugin RCE

Aug 28, 2024

adfoster-r7

Land #19422, pgAdmin 8.4 RCE / CVE-2024-3116

Aug 28, 2024

adfoster-r7

Latest Pull Requests

Name	Labels	Author
Fixes a `nil` error if login is successful with `ldap_login` module	rn-fix	cgranleese-r7
Add an encoder to minify php payloads	payload , enhancement , rn-payload-enhancement	jvoisin
Update framework dependencies	rn-no-release-notes	adfoster-r7
Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection	needs-docs , needs-linting , needs-unique-branch	0x45dd
CVE-2024-5932: WordPress GiveWP Plugin RCE	rn-modules	Chocapikk
Renames `acceptance.yml` in preparation for another PR	rn-no-release-notes	cgranleese-r7

Name

Labels

Author

Fixes a `nil` error if login is successful with `ldap_login` module

rn-fix

cgranleese-r7

Add an encoder to minify php payloads

payload , enhancement , rn-payload-enhancement

jvoisin

Update framework dependencies

rn-no-release-notes

adfoster-r7

Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection

needs-docs , needs-linting , needs-unique-branch

0x45dd

CVE-2024-5932: WordPress GiveWP Plugin RCE

rn-modules

Chocapikk

Renames `acceptance.yml` in preparation for another PR

rn-no-release-notes

cgranleese-r7

Create a Pull Request

Recent Blog Posts

Fri Sep 06 2024

Metasploit Weekly Wrap-Up 09/06/2024

Honey, I shrunk the PHP payloads This release contains more PHP payload improvements from Julien Voisen. Last week we landed a PR from Julien that added a datastore option to the php/base64 encoder that when enabled, will use...

Fri Aug 30 2024