Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19480 update service_persistence for openrc This updates exploits/linux/local/service_persistence.rb to work on systems that are running OpenRC	Oct 02, 2024	jheysel-r7
Land #19463 Add Acronis Cyber Default Password RCE This adds an RCE module Acronis Cyber Infrastructure Default Password [CVE-2023-45249]	Oct 02, 2024	jheysel-r7
Land #19456 VICIdial Auth RCE module This adds a module to exploit CVE-2024-8504 an authenticated RCE in VICIdial	Sep 30, 2024	jheysel-r7
Merge pull request #19441 from Takahiro-Yoko/cve_2023_0386_priv_esc Land #19441, Add module: Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386	Sep 26, 2024	bwatters-r7
Land #19416, Add Traccar RCE module This module exploits two vulnerabilities in Traccar v5.1 - v5.12 to obtain remote code execution: A path traversal vulnerability CVE-2024-24809 and an unrestricted file upload vulnerability CVE-2024-31214.	Sep 23, 2024	jheysel-r7
Land #19448, Improve screensaver management Add a number of improvements to modules/post/multi/manage/screensaver.rb	Sep 23, 2024	jheysel-r7

Title

Date

Author

Land #19480 update service_persistence for openrc This updates exploits/linux/local/service_persistence.rb to work on systems that are running OpenRC

Oct 02, 2024

jheysel-r7

Land #19463 Add Acronis Cyber Default Password RCE This adds an RCE module Acronis Cyber Infrastructure Default Password [CVE-2023-45249]

Oct 02, 2024

jheysel-r7

Land #19456 VICIdial Auth RCE module This adds a module to exploit CVE-2024-8504 an authenticated RCE in VICIdial

Sep 30, 2024

jheysel-r7

Merge pull request #19441 from Takahiro-Yoko/cve_2023_0386_priv_esc Land #19441, Add module: Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386

Sep 26, 2024

bwatters-r7

Land #19416, Add Traccar RCE module This module exploits two vulnerabilities in Traccar v5.1 - v5.12 to obtain remote code execution: A path traversal vulnerability CVE-2024-24809 and an unrestricted file upload vulnerability CVE-2024-31214.

Sep 23, 2024

jheysel-r7

Land #19448, Improve screensaver management Add a number of improvements to modules/post/multi/manage/screensaver.rb

Sep 23, 2024

jheysel-r7

Latest Pull Requests

Name	Labels	Author
Revert "Replace Readline with Reline"	rn-fix	sjanusz-r7
Fix windows DNS crash on bootup		adfoster-r7
add Kyocera address book module	module , needs-docs , rn-modules , needs-linting , needs-unique-branch	ajm4n
Add cups-browsed Information Disclosure module	module , docs	bcoles
Removes bundler version from MSSQL acceptance testing	rn-no-release-notes	cgranleese-r7
Updates failing MSSQL docker health check	rn-no-release-notes	cgranleese-r7

Name

Labels

Author

Revert "Replace Readline with Reline"

rn-fix

sjanusz-r7

Fix windows DNS crash on bootup

adfoster-r7

add Kyocera address book module

module , needs-docs , rn-modules , needs-linting , needs-unique-branch

ajm4n

Add cups-browsed Information Disclosure module

module , docs

bcoles

Removes bundler version from MSSQL acceptance testing

rn-no-release-notes

cgranleese-r7

Updates failing MSSQL docker health check

rn-no-release-notes

cgranleese-r7

Create a Pull Request

Recent Blog Posts

Fri Oct 04 2024

Metasploit Weekly Wrap-Up 10/04/2024

New module content (3) cups-browsed Information Disclosure Authors: bcoles and evilsocket Type: Auxiliary Pull request: #19510 contributed by bcoles Path: scanner/misc/cups_browsed_info_disclosure Description: Adds scanner mo...

Fri Sep 27 2024

Metasploit Weekly Wrap-Up 09/27/2024

This week's release includes 5 new modules, 6 enhancements, 4 fixes and 1 documentation update. Thank you to all the contributors who made it possible!...

Fri Sep 20 2024

Metasploit Weekly Wrap-Up 09/20/2024

A new module adds a post module to keep persistence on a Linux target by writing a motd bash script script triggered with root privileges. Learn more!...

View More Metasploit Blog Posts