metasploit-lab-report

Metasploit Penetration Testing Lab Report 📋 Overview This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testi...

web-penetration-drupal

Pruebas de Penetración Web — Drupal CVE-2018-7600 Tipo: Proyecto de Prácticas | Empresa: BB CyberSec | Período: Nov 2024 – Ene 2025 📋 Resumen del Proyecto Este proyecto documenta una prueba de penetración completa realizada sobre una aplicación web Drupal como parte de mis prácticas de...

activemq-ids-ips-lab

Laboratorio IDS/IPS - Protegiendo Apache ActiveMQ contra ataques RCE Este proyecto evalúa cómo los mecanismos IDS e IPS pueden detectar y prevenir la explotación de la vulnerabilidad CVE-2023-46604 de Apache ActiveMQ en un entorno de laboratorio controlado. Resumen del proyecto El laboratorio fue...

vsftpd-cve-2011-2523-lab

Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...

mtechweek_04

mtechweek04 Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185, and vsftpd 2.3.4 backdoor analysis CVE-2011-2523, with firewall mitigation validated end-to-end. This repository...

CVE-2018-11510

Un par de exploits para CVE-2018-11510 de Kyle Lovett @SquirrelBuddha y yo mismo Matthew Fulton/@haqur. Aprovecha una inyección de comandos no autenticada para obtener una shell root. El módulo de metasploit tiene un payload separado incluido en el repositorio. Veré si puedo incluirlos mediante u...

CVE-2021-27877-PoC

Prueba de concepto de CVE-2021-27877 Este repositorio contiene una versión modificada del módulo original de Rapid7 Metasploit para CVE-2021-27877 que afecta al agente Veritas Backup Exec. Durante mis pruebas, el módulo original de Metasploit identificaba correctamente el objetivo como vulnerable...

CVE-2016-5639

CVE-2016-5639 Módulos de Metasploit para Crestron AirMedia AM-100: Traversal y Hashdump Dos módulos similares que aprovechan CVE-2016-5639 para volcar hashes y recuperar archivos mediante traversal de rutas. Hice estos módulos por separado porque quería experiencia escribiendo algo que pudiera...

CVE-2015-2900-Exploit

CVE-2015-2898-2901, CVE-2015-6006 Exploit POC y módulo de Metasploit Este es un exploit de prueba de concepto para la versión 2.22.20142.166 y anteriores del motor MEDCIN medcinserv.exe o medcinservv22.exe. Se pueden encontrar más detalles sobre las vulnerabilidades en:...

XML-RPC Server - Remote Code Execution

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisor namespace lookups. id: CVE-2017-11610 info: name: XML-RPC Serve...

PhoneSploit-Pro v2.3

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

smb-ms17-010-pentest-report

SMB MS17-010 EternalBlue Penetration Test Report A lab-base...

Window-7-Vulnerability-and-Exploitation.

Windows 7 Vulnerability Assessment & Exploitation Lab 🎯 Ob...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

CVE-2026-16895

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895

CVE-2026-16895 is a fail-open logic vulnerability in the Metasploit Framework 's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not explicitly set, the internal flag msf.auth_initialize...

EUVD-2026-66836

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

Vulnerability_Assessment_and_Exploitation

VulnerabilityAssessmentandExploitation This assessment was...

Metasploit Wrap Up: Lot of summer shells and fit http profiles

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to...