13971 matches found
OS Command Exec, Unix Command Shell, Bind TCP (via socat)
Execute an OS command from PHP. Creates an interactive shell via socat Module Options msf use payload/php/unix/cmd/bindsocattcp msf payloadbindsocattcp show actions ...actions... msf payloadbindsocattcp set ACTION msf payloadbindsocattcp show options ...show and set options... msf...
Unix Command Shell, Bind TCP (via socat)
Creates an interactive shell via socat Module Options msf use payload/cmd/unix/bindsocattcp msf payloadbindsocattcp show actions ...actions... msf payloadbindsocattcp set ACTION msf payloadbindsocattcp show options ...show and set options... msf payloadbindsocattcp run This module requires...
📄 WordPress OrderConvo 13.5 Path Traversal / File Read
This Metasploit module exploits a path traversal vulnerability in WordPress OrderConvo plugin versions prior to 14 for WooCommerce. The vulnerability exists in the download-file endpoint which fails to properly sanitize the filename parameter, allowing attackers to read arbitrary files from the...
CVE-2026-41459
creationtimestamp| type| source ---|---|--- 2026-06-16 15:57:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/xerteunauthenticatedmediaupload.rb 2026-09-08 06:50:23+00:00| seen|...
📄 BookStack Denial of Service
This Metasploit auxiliary module targets a denial of service vulnerability in BookStack versions prior to 25.12.1 by abusing the search system. ================================================================================================================================== | Title : BookStack...
lab-purple-team
Lab Purple Team - Active Directory !screenshots/wazuhsecu...
wannacry-soc-lab
WannaCry SOC Investigation Lab Overview This project simu...
metasploit-cheatsheet
Metasploit Cheatsheet A practical reference for using Metaspl...
Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules
New Tracing Options As hard as we try to ensure that Metasploit is bug free, issues inevitably come up. Whether you’re running a module on an op or writing a new one, what we can do is make the debugging experience easier. To that end one of our two Google Summer of Code GSoC projects is here to...
ethical-hacking-security-labs
Ethical Hacking & Network Security Lab Portfolio A hands-on...
📄 Palo Alto GlobalProtect Authentication Bypass
This Metasploit module exploits an authentication bypass vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway components. The vulnerability stems from CWE-565: Reliance on Cookies without Validation and Integrity Checking. An unauthenticated remote attacker can forge...
Web_Vulnerability_Assessment
🕸️ Week 03 — Web Vulnerability Assessment & Exploitation In...
Web_Vulnerability_Assessment
🕸️ Week 03 — Web Vulnerability Assessment & Exploitation In...
VulnLinux-Exploitation
Lab 01: Vulnerable Linux Reconnaissance + Enumeration + Remote...
ClickFix Server Creation
This Metasploit module creates a web server which hosts a ClickFix type exploit. When a user visits the site they are given instructions on pasting our payload into a run dialog. When using a custom html page, please use INSERTPAYLOADHERE as the spot to put the generated payload in...
eCPPT-Penetration-Testing-Reports
eCPPT Penetration Testing Reports Penetration testing lab rep...
Metasploit-Simulation-lab
🛡️ Metasploit Simulation Lab — Ethical Hacking Training !alt...
Exploit-Databases
💥 Exploits Database & PoC Resources Koleksi exploit databas...