Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #9055, Add exploit for Sync Breeze HTTP Server Land #9055	Oct 13, 2017	wchen-r7
Land #9029, Fix Linux post module file assumptions	Oct 12, 2017	acammack-r7
Land #9058, Add proxies back to smb_login	Oct 12, 2017	acammack-r7
Land #8509, add Winsxs bypass for UAC	Oct 11, 2017	bwatters-r7
Land #9059, Tomcat JSP Upload via PUT Bypass	Oct 11, 2017	jmartin-r7
Merge branch 'pr9032' into upstream-master Land #9032, Improve CVE-2017-8464 LNK exploit Land #9032	Oct 10, 2017

Title

Date

Author

Land #9055, Add exploit for Sync Breeze HTTP Server Land #9055

Oct 13, 2017

wchen-r7

Land #9029, Fix Linux post module file assumptions

Oct 12, 2017

acammack-r7

Land #9058, Add proxies back to smb_login

Oct 12, 2017

acammack-r7

Land #8509, add Winsxs bypass for UAC

Oct 11, 2017

bwatters-r7

Land #9059, Tomcat JSP Upload via PUT Bypass

Oct 11, 2017

jmartin-r7

Merge branch 'pr9032' into upstream-master Land #9032, Improve CVE-2017-8464 LNK exploit Land #9032

Oct 10, 2017

Contribute a Module

Latest Pull Requests

Name	Labels	Author
ensure we do autoruns for all session types		busterb
Fix missing setup method in post modules	bug , library	wvu-r7
Add prints and better checking to HTTP CmdStagers	bug , library	wvu-r7
remove invalid 'client' object reference in nodejs	bug , payload , rn-fix	jmartin-r7
Kb for auxiliary/scanner/http/open_proxy		itsmeroy2012
Kb for auxiliary/scanner/http/files_dir		itsmeroy2012

Name

Labels

Author

ensure we do autoruns for all session types

busterb

Fix missing setup method in post modules

bug , library

wvu-r7

Add prints and better checking to HTTP CmdStagers

bug , library

wvu-r7

remove invalid 'client' object reference in nodejs

bug , payload , rn-fix

jmartin-r7

Kb for auxiliary/scanner/http/open_proxy

itsmeroy2012

Kb for auxiliary/scanner/http/files_dir

itsmeroy2012

Create a Pull Request

Recent Blog Posts

Fri Oct 13 2017

Metasploit Wrapup

What's Hot Fall is finally here! While the weather may be getting cooler, things are hot in Metasploit-land. We've had some fun modules land recently. In our expanding arsenal of code-execution-by-design attacks, Patrick Thom...

Fri Sep 22 2017

Metasploit Wrapup

To celebrate this first day of Autumn[1], we've got a potpourri of "things Metasploit" for you this week. And it might smell a bit like "pumpkin spice"... Or it might not. Who knows? Winter is Coming If...

Fri Sep 15 2017

Metasploit Wrapup

It's been a hot minute since the last Metasploit Wrapup. So why not take in our snazzy new Rapid7 blog makeover and catch up on what's been goin' down! You can't spell 'Struts' without 'trust' Or perhaps you can! With the a...

View More Metasploit Blog Posts