Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #12751, add Linux RDS socket NP deref privesc	Jan 22, 2020	busterb
Land #12773, add NVMS directory traversal	Jan 21, 2020	space-r7
Land #12768, add dlink command injection module	Jan 21, 2020	space-r7
Land #12845, check for SSL when SSL is not enabled	Jan 16, 2020	busterb
Land #12776, PROTOCOL option for sunrpc_portmapper	Jan 16, 2020	wvu-r7
Land #12758, attributes and immutable? methods	Jan 16, 2020	wvu-r7

Title

Date

Author

Land #12751, add Linux RDS socket NP deref privesc

Jan 22, 2020

busterb

Land #12773, add NVMS directory traversal

Jan 21, 2020

space-r7

Land #12768, add dlink command injection module

Jan 21, 2020

space-r7

Land #12845, check for SSL when SSL is not enabled

Jan 16, 2020

busterb

Land #12776, PROTOCOL option for sunrpc_portmapper

Jan 16, 2020

wvu-r7

Land #12758, attributes and immutable? methods

Jan 16, 2020

wvu-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Prefer exploit.rb's rand_text wrapper in doublepulsar_rce	bug , easy , module , rn-no-release-notes	wvu-r7
handle Ranges with rand_text while in debug mode	enhancement , library	busterb
Add flags to send custom cookies	bug	dwelch-r7
Reflective dll inject enhancement		b4rtik
Add Apache James 2.3.2 Command Injection Exploit Module		mattaberegg
Update LICENSE and COPYING	bug , easy	wvu-r7

Name

Labels

Author

Prefer exploit.rb's rand_text wrapper in doublepulsar_rce

bug , easy , module , rn-no-release-notes

wvu-r7

handle Ranges with rand_text while in debug mode

enhancement , library

busterb

Add flags to send custom cookies

bug

dwelch-r7

Reflective dll inject enhancement

b4rtik

Add Apache James 2.3.2 Command Injection Exploit Module

mattaberegg

Update LICENSE and COPYING

bug , easy

wvu-r7

Create a Pull Request

Recent Blog Posts

Fri Jan 17 2020

Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know

A a directory traversal vulnerability was announced in the Citrix Application Discovery Controller and Citrix Gateway, which would allow a remote, unauthenticated user to write a file to a location on disk....

Fri Jan 17 2020

Metasploit Wrap-Up

Silly admin, Citrix is for script kiddies A hot, new module has landed in Metasploit Framework this week. It takes advantage of CVE-2019-19781 which is a directory traversal vulnerability in Citrix Application Delivery Contro...

Wed Jan 15 2020