Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19883, module for unauthenticated RCE in InvokeAI	Feb 18, 2025	msutovsky-r7
Land #19877, BeyondTrust Privileged Remote Access & Remote Support RCE Module Exploit module for BeyondTrust Privileged Remote Access & Remote Support (CVE-2024-12356, CVE-2025-1094)	Feb 17, 2025	msutovsky-r7
Land #19868, NetAlertX RCE module	Feb 11, 2025	msutovsky-r7
Land #19846, module for CVE-2024-47407 MySCADA MyPro Manager mySCADA MyPRO Manager Command Injection (CVE-2024-47407) Module	Feb 10, 2025	msutovsky-r7
Land #19844, Add Ivanti Connect Secure HTTP Login Module Land #19844, Add Ivanti Connect Secure HTTP Login Module	Feb 03, 2025	dledda-r7
Land #19772, adding module for CraftCMS FTP template exploit	Jan 23, 2025	msutovsky-r7

Title

Date

Author

Land #19883, module for unauthenticated RCE in InvokeAI

Feb 18, 2025

msutovsky-r7

Land #19877, BeyondTrust Privileged Remote Access & Remote Support RCE Module Exploit module for BeyondTrust Privileged Remote Access & Remote Support (CVE-2024-12356, CVE-2025-1094)

Feb 17, 2025

msutovsky-r7

Land #19868, NetAlertX RCE module

Feb 11, 2025

msutovsky-r7

Land #19846, module for CVE-2024-47407 MySCADA MyPro Manager mySCADA MyPRO Manager Command Injection (CVE-2024-47407) Module

Feb 10, 2025

msutovsky-r7

Land #19844, Add Ivanti Connect Secure HTTP Login Module Land #19844, Add Ivanti Connect Secure HTTP Login Module

Feb 03, 2025

dledda-r7

Land #19772, adding module for CraftCMS FTP template exploit

Jan 23, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Make datastore to_h sane	rn-fix	sjanusz-r7
Update reload_lib to ignore gemfiles		adfoster-r7
Improve module search performance	rn-enhancement	adfoster-r7
Add osvdb search to msfconsole	enhancement , rn-enhancement	adfoster-r7
Add InvokeAI unauth RCE module (CVE-2024-12029)	module , docs	Takahiro-Yoko
Exploit module for BeyondTrust Privileged Remote Access & Remote Support (CVE-2024-12356, CVE-2025-1094)	module , hotness , rn-modules	sfewer-r7

Name

Labels

Author

Make datastore to_h sane

rn-fix

sjanusz-r7

Update reload_lib to ignore gemfiles

adfoster-r7

Improve module search performance

rn-enhancement

adfoster-r7

Add osvdb search to msfconsole

enhancement , rn-enhancement

adfoster-r7

Add InvokeAI unauth RCE module (CVE-2024-12029)

module , docs

Takahiro-Yoko

Exploit module for BeyondTrust Privileged Remote Access & Remote Support (CVE-2024-12356, CVE-2025-1094)

module , hotness , rn-modules

sfewer-r7

Create a Pull Request

Recent Blog Posts

Fri Feb 14 2025

Metasploit Weekly Wrap-Up 02/14/2025

New module content (2) Unauthenticated RCE in NetAlertX Authors: Chebuya (Rhino Security Labs) and Takahiro Yokoyama Type: Exploit Pull request: #19868 contributed by Takahiro-Yoko Path: linux/http/netalertx_rce_cve_2024_4650...

Fri Feb 07 2025

Metasploit Weekly Wrap-Up 02/07/2025

This week's release includes 2 new auxiliary modules targeting Argus Surveillance DVR and Ivanti Connect Secure. Learn more!...

Fri Jan 31 2025

Metasploit Weekly Wrap-Up 01/31/25

Metasploit's jheysel-r7 updated an existing module to include detecting template objects that can be written to by the authenticated user. Learn more!...

View More Metasploit Blog Posts