Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #18604, Add Post Windows Gather to perform Mikrotik Winbox "Keep Password" credentials extraction Merge branch 'land-18604' into upstream-master	Jan 09, 2024	bwatters-r7
Land #18679, Aux modules spelling	Jan 08, 2024	adfoster-r7
Land #18515, Add java target for ManageEngine ServiceDesk Plus CVE-2022-47966 Merge branch 'land-18515' into upstream-master	Jan 04, 2024	bwatters-r7
Land #18404, Working Module for CVE-2023-38146	Jan 04, 2024	smcintyre-r7
Land #18484, add ability to follow payload override in shell to meterpreter	Jan 03, 2024	adfoster-r7
Land #18631, Improve vScalation Priv Esc Check This PR adds an improvement to the check method of the vcenter_java_wrapper_vmon_priv_esc module. Before the module would attempt to run stat on a file before checking if the file existed on the system. This fixes that issue.	Dec 28, 2023	jheysel-r7

Title

Date

Author

Land #18604, Add Post Windows Gather to perform Mikrotik Winbox "Keep Password" credentials extraction Merge branch 'land-18604' into upstream-master

Jan 09, 2024

bwatters-r7

Land #18679, Aux modules spelling

Jan 08, 2024

adfoster-r7

Land #18515, Add java target for ManageEngine ServiceDesk Plus CVE-2022-47966 Merge branch 'land-18515' into upstream-master

Jan 04, 2024

bwatters-r7

Land #18404, Working Module for CVE-2023-38146

Jan 04, 2024

smcintyre-r7

Land #18484, add ability to follow payload override in shell to meterpreter

Jan 03, 2024

adfoster-r7

Land #18631, Improve vScalation Priv Esc Check This PR adds an improvement to the check method of the vcenter_java_wrapper_vmon_priv_esc module. Before the module would attempt to run stat on a file before checking if the file existed on the system. This fixes that issue.

Dec 28, 2023

jheysel-r7

Latest Pull Requests

Name	Labels	Author
Create action.yml		Cstauffer1234
Bump the minimum version of apktool	rn-enhancement	zeroSteiner
Fix using module from hierarchical search not setting target payload	rn-fix	sjanusz-r7
Aux modules spelling		h00die
fix spelling in some modules	rn-no-release-notes	h00die
fix spelling in spec folder	rn-no-release-notes	h00die

Name

Labels

Author

Create action.yml

Cstauffer1234

Bump the minimum version of apktool

rn-enhancement

zeroSteiner

Fix using module from hierarchical search not setting target payload

rn-fix

sjanusz-r7

Aux modules spelling

h00die

fix spelling in some modules

rn-no-release-notes

h00die

fix spelling in spec folder

rn-no-release-notes

h00die

Create a Pull Request

Recent Blog Posts

Fri Jan 12 2024

Metasploit Weekly Wrap-Up 01/12/24

New module content (1) Windows Gather Mikrotik Winbox "Keep Password" Credentials Extractor Author: Pasquale 'sid' Fiorillo Type: Post Pull request: #18604 contributed by siddolo Path: windows/gather/credentials/win...

Fri Jan 05 2024

Metasploit Weekly Wrap-Up 1/05/2024

New module content (2) Splunk __raw Server Info Disclosure Authors: KOF2002, h00die, and n00bhaxor Type: Auxiliary Pull request: #18635 contributed by n00bhaxor Path: gather/splunk_raw_server_info Description: This PR adds a ...

Fri Dec 29 2023