Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE	Jul 19, 2018	wchen-r7
Land #10282, Add support for running external modules outside of msfconsole	Jul 18, 2018	busterb
Land #10328, Log errors in Python ETERNALBLUE	Jul 18, 2018	acammack-r7
Land #9753, Linux BPF sign extension local privesc	Jul 18, 2018	timwr
Land #10317, nil fix for enum_dns	Jul 17, 2018	wvu-r7
Land #10273, [clean up] iis_webdav_scstoragepathfromurl	Jul 17, 2018	jrobles-r7

Title

Date

Author

Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE

Jul 19, 2018

wchen-r7

Land #10282, Add support for running external modules outside of msfconsole

Jul 18, 2018

busterb

Land #10328, Log errors in Python ETERNALBLUE

Jul 18, 2018

acammack-r7

Land #9753, Linux BPF sign extension local privesc

Jul 18, 2018

timwr

Land #10317, nil fix for enum_dns

Jul 17, 2018

wvu-r7

Land #10273, [clean up] iis_webdav_scstoragepathfromurl

Jul 17, 2018

jrobles-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
sap_redwood_traversal.rb CVE-2017-12637		vah13
4.x		sandeepsonkusale
Update cmsms_upload_rename_rce check and docs	enhancement , module , rn-no-release-notes	bcoles
New DoS auxiliary module for CVE-2018-8828	docs , module	jonuriona
Add decryption and decoding support for Metasploit C compiler	library , msf5	wchen-r7
Fix fake_function_collection_spec	msf5 , rn-no-release-notes , tests	wchen-r7

Name

Labels

Author

sap_redwood_traversal.rb CVE-2017-12637

vah13

4.x

sandeepsonkusale

Update cmsms_upload_rename_rce check and docs

enhancement , module , rn-no-release-notes

bcoles

New DoS auxiliary module for CVE-2018-8828

docs , module

jonuriona

Add decryption and decoding support for Metasploit C compiler

library , msf5

wchen-r7

Fix fake_function_collection_spec

msf5 , rn-no-release-notes , tests

wchen-r7

Create a Pull Request

Recent Blog Posts

Fri Jul 20 2018

Metasploit Wrapup

Privilege Escalation Linux BPF CVE-2017-16995 is a Linux kernel vulnerability in the way that a Berkeley Packet Filter (BPF) is verified. Multiple sign extension bugs allows memory corruption by unprivileged users, which coul...

Thu Jul 19 2018

Open Source Security Meetup (OSSM): Vegas 2018

Want to chat with members of the Metasploit Framework core dev team about open source security in Vegas this year? Come to the fourth annual OSSM (Open Source Security Meetup) August 9....

Fri Jul 13 2018

Metasploit Wrapup

Committing to some shells in GitList Shelby has been killing it with new exploit and aux modules by the day. In this iteration, she's produced an exploit for GitList 0.6.0 and likely older versions. The software is built on P...

View More Metasploit Blog Posts