Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #17861, pfSense Config Data RCE as root This module exploits a vulnerability in pfSense version 2.6.0 and below which allows for authenticated users to execute arbitrary operating systems commands as root.	Jul 12, 2023	jheysel-r7
Land #18170, Add module for SmarterMail Build 6985 - dotNET Deserialization Remote Code Execution (CVE-2019-7214)	Jul 10, 2023	adfoster-r7
Land #18178, update refence format entry This PR updates a reference on exploit/windows/smb/ms08_067_netapi to the new URL format.	Jul 10, 2023	jheysel-r7
Land #18164, WooCommerce Payments auxiliary module This module exploits an auth bypass and priv esc vulnerability in order to create an admin wordpress user.	Jul 10, 2023	jheysel-r7
Land #18122, rocketmq version lib	Jul 05, 2023	cdelafuente-r7
Land #18114, .NET assembly execution enhancements Allow .NET assembly execution within the meterpreter process	Jun 27, 2023	smcintyre-r7

Title

Date

Author

Land #17861, pfSense Config Data RCE as root This module exploits a vulnerability in pfSense version 2.6.0 and below which allows for authenticated users to execute arbitrary operating systems commands as root.

Jul 12, 2023

jheysel-r7

Land #18170, Add module for SmarterMail Build 6985 - dotNET Deserialization Remote Code Execution (CVE-2019-7214)

Jul 10, 2023

adfoster-r7

Land #18178, update refence format entry This PR updates a reference on exploit/windows/smb/ms08_067_netapi to the new URL format.

Jul 10, 2023

jheysel-r7

Land #18164, WooCommerce Payments auxiliary module This module exploits an auth bypass and priv esc vulnerability in order to create an admin wordpress user.

Jul 10, 2023

jheysel-r7

Land #18122, rocketmq version lib

Jul 05, 2023

cdelafuente-r7

Land #18114, .NET assembly execution enhancements Allow .NET assembly execution within the meterpreter process

Jun 27, 2023

smcintyre-r7

Latest Pull Requests

Name	Labels	Author
Change dead links to live links, in documents	rn-wiki	hahwul
update reference format for entry in rapid7.com	easy , rn-no-release-notes	jmartin-r7
Change exploit template comment header from http to https for Msftidy	rn-wiki	ismaildawoodjee
Tidy up plugin specs	rn-no-release-notes , code quality	rorymckinley
Add module for SmarterMail Build 6985 - dotNET Deserialization Remote Code Execution (CVE-2019-7214)	module , docs , rn-modules	ismaildawoodjee
Add centralized Metasploit plugin documentation	rn-wiki	adfoster-r7

Name

Labels

Author

Change dead links to live links, in documents

rn-wiki

hahwul

update reference format for entry in rapid7.com

easy , rn-no-release-notes

jmartin-r7

Change exploit template comment header from http to https for Msftidy

rn-wiki

ismaildawoodjee

Tidy up plugin specs

rn-no-release-notes , code quality

rorymckinley

Add module for SmarterMail Build 6985 - dotNET Deserialization Remote Code Execution (CVE-2019-7214)

module , docs , rn-modules

ismaildawoodjee

Add centralized Metasploit plugin documentation

rn-wiki

adfoster-r7

Create a Pull Request

Recent Blog Posts

Fri Jul 14 2023

Metasploit Weekly Wrap-Up

This week's Metasploit release includes a module for CVE-2023-28121 by h00die....

Fri Jul 07 2023

Metasploit Weekly Wrap-Up

Apache RocketMQ We saw some great teamwork this week from jheysel-r7 and h00die to bring you an exploit module for CVE-2023-33246. In Apache RocketMQ version 5.1.0 and under, there is an access control issue which the module ...

Fri Jun 30 2023