Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19596, Wordpress Plugin Post SMTP Account Takeover	Nov 29, 2024	jheysel-r7
Land #19582 Acronis Cyber Backup/Protect Info Disclosure	Nov 27, 2024	jheysel-r7
Land #19531 ProjectSend r1335 - r1605 RCE module	Nov 21, 2024	jheysel-r7
Land #19584 Judge0 sandbox escape CVE-2024-28185, CVE-2024-28189	Nov 20, 2024	jheysel-r7
Land #19593 Add exploit for CVE-2023-28324 (Unauthenticated RCE in Ivanti EPM) This exploits an unauthenticated RCE in Ivanti's EPM where a .NET remoting client can invoke a method that results in an OS command being executed in the context of NT AUTHORITY\SYSTEM.	Nov 20, 2024	jheysel-r7
Land #19557, Add Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module	Nov 12, 2024	bwatters-r7

Title

Date

Author

Land #19596, Wordpress Plugin Post SMTP Account Takeover

Nov 29, 2024

jheysel-r7

Land #19582 Acronis Cyber Backup/Protect Info Disclosure

Nov 27, 2024

jheysel-r7

Land #19531 ProjectSend r1335 - r1605 RCE module

Nov 21, 2024

jheysel-r7

Land #19584 Judge0 sandbox escape CVE-2024-28185, CVE-2024-28189

Nov 20, 2024

jheysel-r7

Land #19593 Add exploit for CVE-2023-28324 (Unauthenticated RCE in Ivanti EPM) This exploits an unauthenticated RCE in Ivanti's EPM where a .NET remoting client can invoke a method that results in an OS command being executed in the context of NT AUTHORITY\SYSTEM.

Nov 20, 2024

jheysel-r7

Land #19557, Add Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module

Nov 12, 2024

bwatters-r7

Latest Pull Requests

Name	Labels	Author
Create framework.clp	potato	vijayleo31
Added LDAP query searching for likely Pre-Windows-2000 computers	rn-enhancement	smashery
Multiple RHOSTS handling improvement	module , enhancement , rn-enhancement , needs-unique-branch	gr4y41
Added mwalas-r7 to the mail map	rn-no-release-notes	mwalas-r7
Retest with connection pool changes		adfoster-r7
Fix failure in secrets dump edge case	module , bug , rn-fix	smashery

Name

Labels

Author

Create framework.clp

potato

vijayleo31

Added LDAP query searching for likely Pre-Windows-2000 computers

rn-enhancement

smashery

Multiple RHOSTS handling improvement

module , enhancement , rn-enhancement , needs-unique-branch

gr4y41

Added mwalas-r7 to the mail map

rn-no-release-notes

mwalas-r7

Retest with connection pool changes

adfoster-r7

Fix failure in secrets dump edge case

module , bug , rn-fix

smashery

Create a Pull Request

Recent Blog Posts

Fri Nov 29 2024

Metasploit Weekly Wrap-up 11/29/2024

Four new Metasploit modules released, including CUPS IPP Attributes LAN Remote Code Execution CVE-2024-47176...

Fri Nov 22 2024

Metasploit Weekly Wrap-Up 11/22/2024

Metasploit added a login scanner for the TeamCity application to enable users to check for weak credentials. Learn more about this week's Metasploit Wrap-Up....

Fri Nov 15 2024