nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

msfconsole-termux

msfconsole-termux Come installare Metasploit-Table su Android Termux root@kitploit: pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP root@kitploit: msfconsole -q -x "use...

mtechweek_04

mtechweek04 Test di penetrazione basato su Metasploit su una VM di laboratorio isolata Metasploitable2 — sfruttamento remoto via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185 e analisi del backdoor vsftpd 2.3.4 CVE-2011-2523, con mitigazione firewall validata end-to-en...

CVE-2021-40444-POC

CVE-2021-40444-POC Ein Versuch, die Microsoft MSHTML Remote Code Execution RCE Schwachstelle mit dem Metasploit Framework nachzubilden. funktioniert am besten, wenn nicht in FlareVM ausgeführt VORBEREITUNG Klonen Sie das Repository von https://github.com/lockedbyte/CVE-2021-40444 Bereiten Sie die...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

MSF_PassSpray_Wordlist_Generator

Generatore di Wordlist per Password Spray Un pratico strumento che ti aiuta a creare la tua wordlist per il framework Metasploit, al fine di effettuare un attacco di password spray contro vari protocolli di rete nel dominio delle tue vittime, come SMB : Descrizione Metasploit ha diversi moduli ch...

metasploitable2-exploitation-metasploit

Sfruttare Metasploitable2 con Metasploit: VSFTPD, Samba e altro Una guida pratica allo sfruttamento utilizzando il Metasploit Framework — dalla configurazione del database PostgreSQL e la scansione dbnmap, attraverso tre shell root via vsftpd, Samba e UnrealIRCd, fino all'esfiltrazione delle...

vsftpd-cve-2011-2523-lab

Ausnutzung der VSFTPD 2.3.4 Backdoor CVE-2011-2523 Ein praktisches Penetrationstest-Labor, das die Identifizierung und Ausnutzung der VSFTPD 2.3.4 Backdoor CVE-2011-2523 auf der absichtlich verwundbaren virtuellen Maschine Metasploitable2 mithilfe des Metasploit Framework demonstriert...

HackerLife.exe

HackerLife.exe Write-up sobre uma cadeia de exploração que falhou em ser totalmente weaponizada e a experiência de tentar vender o teu primeiro nday. Então, sobre o que é esta história? A nossa citação é "experiência de vida em 2025 como jovem investigador de segurança a tentar fazer carreira num...

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features. Malleable C2 Profiles for HTTP One of the latest and most requested feature...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands...

FTP Fetch, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

FTP Fetch

Fetch and execute an x64 payload from an FTP server. Module Options...

FTP Fetch, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Module Options...

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

FTP Fetch, Windows MessageBox

Fetch and execute an x86 payload from an FTP server. Spawns a dialog via MessageBox using a customizable title, text & icon Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule includ...

FTP Fetch, Reverse TCP Stager (DNS)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

FTP Fetch, Linux Command Shell, Bind TCP Stager

Fetch and execute an x64 payload from an FTP server. Spawn a command shell staged. Listen for a connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

vulnerability-assessment-metasploitable2

Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...

CVE-2026-41459

creationtimestamp| type| source ---|---|--- 2026-06-16 15:57:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/xerteunauthenticatedmediaupload.rb...