Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #11864, Add RCE vector to Jenkins ACL bypass	May 23, 2019	jrobles-r7
Land #11860, pipe_auditor backslash normalization	May 23, 2019	wvu-r7
Land #11868, iis_webdav_upload_asp disclosure date	May 22, 2019	wvu-r7
Land #11861, WebLogic AsyncResponseService updates	May 22, 2019	wvu-r7
Land #11847, jenkins_gather fixes	May 22, 2019	wvu-r7
Land #11661, Onion Omega2 login scanner	May 21, 2019	jrobles-r7

Title

Date

Author

Land #11864, Add RCE vector to Jenkins ACL bypass

May 23, 2019

jrobles-r7

Land #11860, pipe_auditor backslash normalization

May 23, 2019

wvu-r7

Land #11868, iis_webdav_upload_asp disclosure date

May 22, 2019

wvu-r7

Land #11861, WebLogic AsyncResponseService updates

May 22, 2019

wvu-r7

Land #11847, jenkins_gather fixes

May 22, 2019

wvu-r7

Land #11661, Onion Omega2 login scanner

May 21, 2019

jrobles-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Fix disclosure date for WebDAV module	bug , docs , easy , module	todb-r7
Packrat post exploitation 'gather' module	module	danhallsworth1
Add newer RCE vector to Jenkins ACL bypass exploit	enhancement , module	wvu-r7
Update CVE reference and datastore options for WebLogic exploit	bug , easy , module	wchen-r7
Pipe auditing mixin now ensures named pipes start with a backslash	bug , library	NoodleOfDeath
Indent ternary statement in struts2_rest_xstream	bug , easy , module , rn-no-release-notes	wvu-r7

Name

Labels

Author

Fix disclosure date for WebDAV module

bug , docs , easy , module

todb-r7

Packrat post exploitation 'gather' module

module

danhallsworth1

Add newer RCE vector to Jenkins ACL bypass exploit

enhancement , module

wvu-r7

Update CVE reference and datastore options for WebLogic exploit

bug , easy , module

wchen-r7

Pipe auditing mixin now ensures named pipes start with a backslash

bug , library

NoodleOfDeath

Indent ternary statement in struts2_rest_xstream

bug , easy , module , rn-no-release-notes

wvu-r7

Create a Pull Request

Recent Blog Posts

Fri May 17 2019

Metasploit Wrap-Up

Take a moment from this week's barrage of vulnerabilities in seemingly everything to see the cool stuff happening with the Metasploit team of contributors: a video interview between two greats, a new exploit module in GetSimp...

Fri May 10 2019

Metasploit Wrap-Up

A new Chrome browser exploit, some WebLogic RCE, and an exploit for PostgreSQL. Also announcing the return of our annual Open-Source Security Meetup in Vegas!...

Fri May 03 2019