Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19205, Add MS-NRPC users enumeration module	Jun 24, 2024	smcintyre-r7
Land #19259, warn on weak meterpreter keys Fixing meterpreter to support is_weak_key byte flag from mettle	Jun 24, 2024	smcintyre-r7
Land #19188, Netis MW5360 unauthenticated RCE [CVE-2024-22729]	Jun 24, 2024	cdelafuente-r7
Land #19267, Escape LDAP query string filters	Jun 20, 2024	adfoster-r7
Land #19255, Add SolarWinds Serv-U aux module This module exploits an unauthenticated file read vulnerability, due to directory traversal, affecting SolarWinds Serv-U FTP Server 15.4, Serv-U Gateway 15.4, and Serv-U MFT Server 15.4. All versions prior to the vendor supplied hotfix "15.4.2 Hotfix 2" (version 15.4.2.157) are affected.	Jun 19, 2024	jheysel-r7
Land #19176, Add missing Arch parameter Adding Arch parameter to dnn_cookie_deserialization_rce module	Jun 18, 2024	smcintyre-r7

Title

Date

Author

Land #19205, Add MS-NRPC users enumeration module

Jun 24, 2024

smcintyre-r7

Land #19259, warn on weak meterpreter keys Fixing meterpreter to support is_weak_key byte flag from mettle

Jun 24, 2024

smcintyre-r7

Land #19188, Netis MW5360 unauthenticated RCE [CVE-2024-22729]

Jun 24, 2024

cdelafuente-r7

Land #19267, Escape LDAP query string filters

Jun 20, 2024

adfoster-r7

Land #19255, Add SolarWinds Serv-U aux module This module exploits an unauthenticated file read vulnerability, due to directory traversal, affecting SolarWinds Serv-U FTP Server 15.4, Serv-U Gateway 15.4, and Serv-U MFT Server 15.4. All versions prior to the vendor supplied hotfix "15.4.2 Hotfix 2" (version 15.4.2.157) are affected.

Jun 19, 2024

jheysel-r7

Land #19176, Add missing Arch parameter Adding Arch parameter to dnn_cookie_deserialization_rce module

Jun 18, 2024

smcintyre-r7

Latest Pull Requests

Name	Labels	Author
README.md		kaisarrmeoyntsnro
Fix redis_login scanner when auth is enabled	rn-fix	adfoster-r7
Fix Redis Service Reporting	rn-fix	adeherdt-r7
Add auxiliary/scanner/http/moodle_login module	module	bcoles
Create meterpreter_reverse_https.rb		CultofVecna-Bot
Add adeherdt-r7 to the mail map	rn-no-release-notes	adeherdt-r7

Name

Labels

Author

README.md

kaisarrmeoyntsnro

Fix redis_login scanner when auth is enabled

rn-fix

adfoster-r7

Fix Redis Service Reporting

rn-fix

adeherdt-r7

Add auxiliary/scanner/http/moodle_login module

module

bcoles

Create meterpreter_reverse_https.rb

CultofVecna-Bot

Add adeherdt-r7 to the mail map

rn-no-release-notes

adeherdt-r7

Create a Pull Request

Recent Blog Posts

Fri Jun 28 2024

Metasploit Weekly Wrap-Up 06/28/2024

Unauthenticated Command Injection in Netis Router This week's Metasploit release includes an exploit module for an unauthenticated command injection vulnerability in the Netis MW5360 router which is being tracked as CVE-2024-...

Fri Jun 21 2024

Metasploit Weekly Wrap-Up 06/21/2024

This week includes modules that target file traversal & arbitrary file read vulnerabilities for software such as Apache, SolarWinds, & Check Point....

Fri Jun 14 2024

Metasploit Weekly Wrap-Up 06/14/2024

This weeks Metasploit Weekly Wrap-Up includes 5 new module contents, 4 enhancements and features, and some bug fixes. Learn more about the updates....

View More Metasploit Blog Posts