Lucene search
+L

6 matches found

Rapid7 Blog
Rapid7 Blog
added 2025/04/18 2:58 p.m.25 views

Metasploit Wrap-Up 04/18/2025

Smaller Fetch Payloads This week, a significant enhancement was made to the already awesome fetch payload feature by our very own bwatters-r7. The improvement introduces a new option, PIPEFETCH, which optimizes the process by serving both the payload and the command to be executed simultaneously...

9.8CVSS10AI score0.99996EPSS
SaveExploits41
Rapid7 Blog
Rapid7 Blog
added 2024/02/16 8:34 p.m.31 views

Metasploit Weekly Wrap-Up 02/16/2024

New Fetch Payload It has been almost a year since Metasploit released the new fetch payloads and since then, 43 of the 79 exploit modules have had support for fetch payloads. The original payloads supported transferring the second stage over HTTP, HTTPS and FTP. This week, Metasploit has expanded...

7.3AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2023/12/29 7:38 p.m.130 views

Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023

As 2023 winds down, we’re taking another look back at all the changes and improvements to the Metasploit Framework. This year marked the 20th anniversary since Metasploit version 1.0 was committed and the project is still actively maintained and improved thanks to a thriving community. Version 6....

7.5CVSS10AI score0.99999EPSS
SaveExploits91
Rapid7 Blog
Rapid7 Blog
added 2023/08/25 9:26 p.m.51 views

Metasploit Weekly Wrap-Up

PowershellPoint This week’s new features and improvements start with two new exploit modules leveraging CVE-2023-34960 Chamilo versions 1.11.18 and below and CVE-2023-26469 in Jorani 1.0.0. Like CVE-2023-34960, I too, feel attacked by PowerPoint sometimes. We also have several improvements,...

7.5CVSS10.4AI score0.99325EPSS
SaveExploits14
Rapid7 Blog
Rapid7 Blog
added 2023/05/25 4:21 p.m.46 views

Fetch Payloads: A Shorter Path from Command Injection to Metasploit Session

Over the last year, two-thirds of the exploit modules added to Metasploit Framework have targeted command injection vulnerabilities CWE-94: Improper Control of Generation of Code. In the process of helping new and existing open-source contributors learn how to use Metasploit’s command stager...

8.1AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2023/05/19 6:44 p.m.57 views

Metasploit Weekly Wrap-Up

Fetch Based Payloads: Making the Path from Command Injection to Metasploit Session Shorter This week we’re releasing Metasploit fetch payloads. Fetch payloads are command-based payloads that leverage network-enabled applications on remote hosts and different protocol servers to serve, download, a...

5.8CVSS8.6AI score0.84697EPSS
SaveExploits6
Rows per page
Query Builder