Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #10534, Add FrontPage Credential Dump Module This module downloads and parses the '_vti_pvt/service.pwd', '_vti_pvt/administrators.pwd', and '_vti_pvt/authors.pwd' files used by FrontPage to find credentials.	Sep 22, 2018	bcoles
Land #10643, CVE-2018-8440 ALPC Scheduler Merge branch 'land-10643' into upstream-master	Sep 21, 2018	bwatters-r7
Land #10628, Add Solaris srsexec Arbitrary File Reader module	Sep 21, 2018	bcoles
Land #10625, repeat command to repeat commands	Sep 20, 2018	wvu-r7
Land #10670, Pimcore SQLi module	Sep 20, 2018	wvu-r7
Land #10673, dolibarr_list_creds{,_sqli} rename	Sep 19, 2018	wvu-r7

Title

Date

Author

Land #10534, Add FrontPage Credential Dump Module This module downloads and parses the '_vti_pvt/service.pwd', '_vti_pvt/administrators.pwd', and '_vti_pvt/authors.pwd' files used by FrontPage to find credentials.

Sep 22, 2018

bcoles

Land #10643, CVE-2018-8440 ALPC Scheduler Merge branch 'land-10643' into upstream-master

Sep 21, 2018

bwatters-r7

Land #10628, Add Solaris srsexec Arbitrary File Reader module

Sep 21, 2018

bcoles

Land #10625, repeat command to repeat commands

Sep 20, 2018

wvu-r7

Land #10670, Pimcore SQLi module

Sep 20, 2018

wvu-r7

Land #10673, dolibarr_list_creds{,_sqli} rename

Sep 19, 2018

wvu-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Add pry command to Meterpreter	feature , library , meterpreter	wvu-r7
Fix NameError in cmd_shell due to renamed variable	bug , library , msfconsole	wvu-r7
Remove stray quote from raise in writable? method	bug , library , rn-no-release-notes	wvu-r7
Prefer to_s in Heartbleed for cleaner code	bug , module , rn-no-release-notes	wvu-r7
Update Payload cached sizes	bug , payload , rn-no-release-notes	bwatters-r7
Add LEAK_COUNT option to Heartbleed	enhancement , module	wvu-r7

Name

Labels

Author

Add pry command to Meterpreter

feature , library , meterpreter

wvu-r7

Fix NameError in cmd_shell due to renamed variable

bug , library , msfconsole

wvu-r7

Remove stray quote from raise in writable? method

bug , library , rn-no-release-notes

wvu-r7

Prefer to_s in Heartbleed for cleaner code

bug , module , rn-no-release-notes

wvu-r7

Update Payload cached sizes

bug , payload , rn-no-release-notes

bwatters-r7

Add LEAK_COUNT option to Heartbleed

enhancement , module

wvu-r7

Create a Pull Request

Recent Blog Posts

Fri Sep 21 2018

Metasploit Wrapup

Tomorrow brings the fall equinox, and that means (as we are almost contractually obligated to say at this point) winter is coming....

Fri Sep 14 2018

Metasploit Wrapup

Your weekly run-down of the modules and improvements that landed in Metasploit Framework....

Mon Sep 10 2018

Summertime and the Coding Is (Sometimes) Easy: What I Learned During GSoC for Metasploit

My name is Eliott Teissonniere, and I was selected as a Google Summer of Code (GSoC) student for Metasploit this summer! Today, I am excited to tell you more about what we did and what’s next....

View More Metasploit Blog Posts