Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #18408, JetBrains TeamCity CVE-2023-42793	Sep 28, 2023	smcintyre-r7
Land #18314, Windows Error Reporting RCE (CVE-2023-36874)	Sep 27, 2023	cdelafuente-r7
Land #18365, TOTOLINK X5000R Wireless GigaBit Router Unauthenticed RCE [CVE-2023-30013]	Sep 21, 2023	cdelafuente-r7
Land #18374, fix related modules references	Sep 20, 2023	cgranleese-r7
Land #18333, Lexmark Device Embedded Web Server RCE (CVE-2023-26068)	Sep 19, 2023	cdelafuente-r7
Land #18283, Apache Airflow 1.10.10 - Example DAG Remote Code Execution CVE-2020-11978 + CVE-2020-13927 Merge branch 'land-18283' into upstream-master	Sep 18, 2023	bwatters-r7

Title

Date

Author

Land #18408, JetBrains TeamCity CVE-2023-42793

Sep 28, 2023

smcintyre-r7

Land #18314, Windows Error Reporting RCE (CVE-2023-36874)

Sep 27, 2023

cdelafuente-r7

Land #18365, TOTOLINK X5000R Wireless GigaBit Router Unauthenticed RCE [CVE-2023-30013]

Sep 21, 2023

cdelafuente-r7

Land #18374, fix related modules references

Sep 20, 2023

cgranleese-r7

Land #18333, Lexmark Device Embedded Web Server RCE (CVE-2023-26068)

Sep 19, 2023

cdelafuente-r7

Land #18283, Apache Airflow 1.10.10 - Example DAG Remote Code Execution CVE-2020-11978 + CVE-2020-13927 Merge branch 'land-18283' into upstream-master

Sep 18, 2023

bwatters-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
JetBrains TeamCity CVE-2023-42793	module , docs , rn-modules	sfewer-r7
Fix pass by reference bug on the module side for windows error exploit	bug , rn-no-release-notes	bwatters-r7
codespell for a bunch of modules	rn-enhancement	h00die
Refactor deprecated report_auth_info in various modules		errorxyz
Remove raised exception in acceptance tests	rn-no-release-notes	adfoster-r7
Add a new lmkdir command to be able to create directory on local machine from meterpreter		e-lliot

Name

Labels

Author

JetBrains TeamCity CVE-2023-42793

module , docs , rn-modules

sfewer-r7

Fix pass by reference bug on the module side for windows error exploit

bug , rn-no-release-notes

bwatters-r7

codespell for a bunch of modules

rn-enhancement

h00die

Refactor deprecated report_auth_info in various modules

errorxyz

Remove raised exception in acceptance tests

rn-no-release-notes

adfoster-r7

Add a new lmkdir command to be able to create directory on local machine from meterpreter

e-lliot

Create a Pull Request

Recent Blog Posts

Fri Sep 29 2023

Metasploit Weekly Wrap-Up

TeamCity authentication bypass and remote code execution This week’s Metasploit release includes a new module for a critical authentication bypass in JetBrains TeamCity CI/CD Server. All versions of TeamCity prior to version ...

Fri Sep 22 2023

Metasploit Weekly Wrap-Up

Improved Ticket Forging Metasploit’s admin/kerberos/forge_ticket module has been updated to work with Server 2022. In Windows Server 2022, Microsoft started requiring additional new PAC elements to be present - the PAC reques...

Fri Sep 15 2023

Metasploit Weekly Wrap-Up

Flask Cookies This week includes two modules related to Flask cookie signatures. One is specific to Apache Superset where session cookies can be resigned, allowing an attacker to elevate their privileges and dump the database...

View More Metasploit Blog Posts