Lucene search
+L
MetasploitMost viewed

7296 matches found

Metasploit
Metasploit
•added 2009/11/25 10:24 p.m.•50 views

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

This module exploits an array overflow in Adobe Reader and Adobe Acrobat. Affected versions include 'Adobe U3D CLODProgressiveMeshDeclaration Array Overrun', 'Description' = %q This module exploits an array overflow in Adobe Reader and Adobe Acrobat. Affected versions include MSFLICENSE, 'Author'...

8.8CVSS1AI score0.83855EPSS
SaveExploits3
Metasploit
Metasploit
•added 2009/10/20 3:1 p.m.•50 views

Mambo Cache_Lite Class mosConfig_absolute_path Remote File Include

This module exploits a remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the CacheLite package in Mambo 4.6.4 and earlier. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

6.8CVSS0.5AI score0.18401EPSS
SaveExploits8
Metasploit
Metasploit
•added 2009/09/27 6:35 p.m.•50 views

Java JSP Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 1501 include Msf::Payload::Single include Msf::Payload::JSP include...

7AI score
SaveExploits0
Metasploit
Metasploit
•added 2009/03/29 7:7 p.m.•50 views

Foxit Reader Authorization Bypass

This module exploits an authorization bypass vulnerability in Foxit Reader build 1120. When an attacker creates a specially crafted pdf file containing an Open/Execute action, arbitrary commands can be executed without confirmation from the victim. This module requires Metasploit:...

10CVSS10AI score0.40857EPSS
SaveExploits3
Metasploit
Metasploit
•added 2008/07/06 8:27 a.m.•50 views

UoW IMAP Server LSUB Buffer Overflow

This module exploits a buffer overflow in the 'LSUB' command of the University of Washington IMAP service. This vulnerability can only be exploited with a valid username and password. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS7.5AI score0.69476EPSS
SaveExploits5
Metasploit
Metasploit
•added 2007/09/09 10:44 p.m.•50 views

BolinTech Dream FTP Server 1.02 Format String

This module exploits a format string overflow in the BolinTech Dream FTP Server version 1.02. Based on the exploit by SkyLined. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BolinTech Dream F...

5CVSS7.5AI score0.3578EPSS
SaveExploits4
Metasploit
Metasploit
•added 2007/05/22 9:15 p.m.•50 views

TinyIdentD 2.2 Stack Buffer Overflow

This module exploits a stack based buffer overflow in TinyIdentD version 2.2. If we send a long string to the ident service we can overwrite the return address and execute arbitrary code. Credit to Maarten Boone. This module requires Metasploit: https://metasploit.com/download Current source:...

10CVSS8AI score0.62715EPSS
SaveExploits4
Metasploit
Metasploit
•added 2006/09/18 12:30 a.m.•50 views

Samba trans2open Overflow (Mac OS X PPC)

This exploits the buffer overflow found in Samba versions 2.2.0 to 2.2.8. This particular module is capable of exploiting the bug on Mac OS X PowerPC systems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

10CVSS6.7AI score0.84502EPSS
SaveExploits24
Metasploit
Metasploit
•added 2006/01/16 3:48 a.m.•50 views

MS02-056 Microsoft SQL Server Hello Overflow

By sending malformed data to TCP port 1433, an unauthenticated remote attacker could overflow a buffer and possibly execute code on the server with SYSTEM level privileges. This module should work against any vulnerable SQL Server 2000 or MSDE install 'MS02-056 Microsoft SQL Server Hello Overflow...

7.5CVSS8.3AI score0.77712EPSS
SaveExploits9
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•49 views

FTP Fetch, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Listen for a connection with UUID Support Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

6.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2021/10/28 5:51 p.m.•49 views

Browse the session filesystem in a Web Browser

This module allows you to browse the session filesystem via a local browser window. Module Options msf use post/multi/manage/fileshare msf postfileshare show actions ...actions... msf postfileshare set ACTION msf postfileshare show options ...show and set options... msf postfileshare run This...

6.9AI score
SaveExploits0
Metasploit
Metasploit
•added 2021/03/27 5:42 p.m.•49 views

Windows Gather Exchange Server Mailboxes

This module will gather information from an on-premise Exchange Server running on the target machine. Two actions are supported: LIST default action: List basic information about all Exchange servers and mailboxes hosted on the target. EXPORT: Export and download a chosen mailbox in the form of a...

6.8AI score
SaveExploits0
Metasploit
Metasploit
•added 2021/01/08 5:42 p.m.•49 views

Windows Manage Volume Shadow Copies

This module will perform management actions for Volume Shadow Copies on the system. This is based on the VSSOwn Script originally posted by Tim Tomes and Mark Baggett. Works on win2k3 and later. Module Options msf use post/windows/manage/vss msf postvss show actions ...actions... msf postvss set...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2020/12/03 5:41 p.m.•49 views

WordPress Simple File List Unauthenticated Remote Code Execution

Simple File List simple-file-list plugin before 4.2.3 for WordPress allows remote unauthenticated attackers to upload files within a controlled list of extensions. However, the rename function does not conform to the file extension restrictions, thus allowing arbitrary PHP code to be uploaded fir...

9.8CVSS7.6AI score0.12633EPSS
SaveExploits5
Metasploit
Metasploit
•added 2020/06/03 3:13 a.m.•49 views

Cisco UCS Director Cloupia Script RCE

This module exploits an authentication bypass and directory traversals in Cisco UCS Director 'Cisco UCS Director Cloupia Script RCE', 'Description' = %q This module exploits an authentication bypass and directory traversals in Cisco UCS Director 6.7.4.0 to leak the administrator's REST API key an...

9.8CVSS0.4AI score0.88374EPSS
SaveExploits5
Metasploit
Metasploit
•added 2020/03/14 3:7 p.m.•49 views

Horde CSV import arbitrary PHP code execution

The HordeData module version 2.1.4 and before present in Horde Groupware version 5.2.22 allows authenticated users to inject arbitrary PHP code thus achieving RCE on the server hosting the web application. This module requires Metasploit: https://metasploit.com/download Current source:...

9.8CVSS7.4AI score0.71728EPSS
SaveExploits5
Metasploit
Metasploit
•added 2019/02/07 5:36 a.m.•49 views

Cisco RV320/RV326 Configuration Disclosure

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit th...

7.5CVSS6.9AI score0.99876EPSS
SaveExploits19
Metasploit
Metasploit
•added 2018/10/20 6:15 p.m.•49 views

Morris Worm sendmail Debug Mode Shell Escape

This module exploits sendmail's well-known historical debug mode to escape to a shell and execute commands in the SMTP RCPT TO command. This vulnerability was exploited by the Morris worm in 1988-11-02. Cliff Stoll reports on the worm in the epilogue of The Cuckoo's Egg. Currently, only...

0.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2018/09/20 3:15 a.m.•50 views

Dolibarr Gather Credentials via SQL Injection

This module enables an authenticated user to collect the usernames and encrypted passwords of other users in the Dolibarr ERP/CRM via SQL injection. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModu...

9.8CVSS0.8AI score0.71242EPSS
SaveExploits10
Metasploit
Metasploit
•added 2018/08/28 5:38 p.m.•49 views

Oracle Weblogic Server Deserialization RCE

An unauthenticated attacker with network access to the Oracle Weblogic Server T3 interface can send a serialized object to the interface to execute code on vulnerable hosts. This module requires Metasploit: https://metasploit.com/download Current source:...

9.8CVSS7.5AI score0.99448EPSS
SaveExploits69
Metasploit
Metasploit
•added 2018/05/04 7:44 p.m.•49 views

Socks5 Proxy Server

This module provides a socks5 proxy server that uses the builtin Metasploit routing to relay connections...

6.9AI score
SaveExploits0
Metasploit
Metasploit
•added 2017/11/25 2:27 a.m.•49 views

OSX Meterpreter, Reverse TCP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 815032 include...

7.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2017/11/22 10:6 a.m.•49 views

Clickjacking Vulnerability In CSRF Error Page pfSense

This module exploits a Clickjacking vulnerability in pfSense 'Clickjacking Vulnerability In CSRF Error Page pfSense', 'Description' = %q This module exploits a Clickjacking vulnerability in pfSense 'Yorick Koster', 'Payload'...

8.8CVSS7.7AI score0.32767EPSS
SaveExploits2
Metasploit
Metasploit
•added 2017/07/18 6:13 p.m.•49 views

Linux Meterpreter, Reverse TCP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1068952 include...

7.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2016/10/08 7:5 p.m.•49 views

Powershell .NET Compiler

This module will build a .NET source file using powershell. The compiler builds the executable or library in memory and produces a binary. After compilation the PowerShell session can also sign the executable if provided a path the a .pfx formatted certificate. Compiler options and a list of...

10AI score
SaveExploits0
Metasploit
Metasploit
•added 2015/12/01 11:6 p.m.•49 views

Limesurvey Unauthenticated File Download

This module exploits an unauthenticated file download vulnerability in limesurvey between 2.0+ and 2.06+ Build 151014. The file is downloaded as a ZIP and unzipped automatically, thus binary files can be downloaded. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5AI score
SaveExploits0
Metasploit
Metasploit
•added 2015/10/16 9:39 p.m.•49 views

Mac OS X 10.9.5 / 10.10.5 - rsh/libmalloc Privilege Escalation

This module writes to the sudoers file without root access by exploiting rsh and malloc log files. Makes sudo require no password, giving access to su even if root is disabled. Works on OS X 10.9.5 to 10.10.5 patched on 10.11. This module requires Metasploit: https://metasploit.com/download Curre...

7.2CVSS0.3AI score0.0513EPSS
SaveExploits14
Metasploit
Metasploit
•added 2015/08/28 2:17 p.m.•49 views

BusyBox Ping Network Enumeration

This module will be applied on a session connected to a BusyBox shell. It will ping a range of IP addresses from the router or device executing BusyBox. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

7.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2015/08/28 2:17 p.m.•49 views

BusyBox DNS Configuration

This module will be applied on a session connected to a BusyBox shell. It allows to set the DNS server on the device executing BusyBox so it will be sent by the DHCP server to network hosts. This module requires Metasploit: https://metasploit.com/download Current source:...

SaveExploits0
Metasploit
Metasploit
•added 2015/08/13 8:26 p.m.•49 views

Watermark Master Buffer Overflow (SEH)

This module exploits a stack based buffer overflow in Watermark Master 2.2.23 when processing a specially crafted .WCF file. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing a user of Watermark Master to open a malicious .WCF...

9.3CVSS8.1AI score0.32351EPSS
SaveExploits4
Metasploit
Metasploit
•added 2015/07/20 9:21 p.m.•49 views

SysAid Help Desk 'rdslogs' Arbitrary File Upload

This module exploits a file upload vulnerability in SysAid Help Desk v14.3 and v14.4. The vulnerability exists in the RdsLogsEntry servlet which accepts unauthenticated file uploads and handles zip file contents in an insecure way. By combining both weaknesses, a remote attacker can accomplish...

6.8CVSS8.1AI score0.33791EPSS
SaveExploits10
Metasploit
Metasploit
•added 2015/07/16 5:36 a.m.•49 views

OpenSSL Alternative Chains Certificate Forgery MITM Proxy

This module exploits a logic error in OpenSSL by impersonating the server and sending a specially-crafted chain of certificates, resulting in certain checks on untrusted certificates to be bypassed on the client, allowing it to use a valid leaf certificate as a CA certificate to sign a fake...

6.5CVSS0.61798EPSS
SaveExploits6
Metasploit
Metasploit
•added 2015/04/29 10:52 p.m.•49 views

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

This module exploits an uninitialized memory vulnerability in Adobe Flash Player. The vulnerability occurs in the ByteArray::UncompressViaZlibVariant method, which fails to initialize allocated memory. When using a correct memory layout this vulnerability leads to a ByteArray object corruption,...

10CVSS1.3AI score0.81943EPSS
SaveExploits5
Metasploit
Metasploit
•added 2015/04/10 4:22 p.m.•49 views

Apple OS X Rootpipe Privilege Escalation

This module exploits a hidden backdoor API in Apple's Admin framework on Mac OS X to escalate privileges to root, dubbed "Rootpipe." This module was tested on Yosemite 10.10.2 and should work on previous versions. The patch for this issue was not backported to older releases. Note: you must run...

7.8CVSS9.1AI score0.09887EPSS
SaveExploits16
Metasploit
Metasploit
•added 2015/03/04 7:1 p.m.•49 views

HP Data Protector 8.10 Remote Command Execution

This module exploits a remote command execution on HP Data Protector 8.10. Arbitrary commands can be executed by sending crafted requests with opcode 28 to the OmniInet service listening on the TCP/5555 port. Since there is a strict length limitation on the command, rundll32.exe is executed, and...

10CVSS1.2AI score0.89394EPSS
SaveExploits20
Metasploit
Metasploit
•added 2015/02/18 6:22 p.m.•49 views

Publish-It PUI Buffer Overflow (SEH)

This module exploits a stack based buffer overflow in Publish-It when processing a specially crafted .PUI file. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing a user of Publish-It to open a malicious .PUI file. This module...

9.3CVSS10AI score0.40359EPSS
SaveExploits11
Metasploit
Metasploit
•added 2015/01/28 7:44 p.m.•49 views

ManageEngine Multiple Products Arbitrary Directory Listing

This module exploits a directory listing information disclosure vulnerability in the FailOverHelperServlet on ManageEngine OpManager, Applications Manager and IT360. It makes a recursive listing, so it will list the whole drive if you ask it to list / in Linux or C:\ in Windows. This vulnerabilit...

7.5CVSS6.9AI score0.83399EPSS
SaveExploits11
Metasploit
Metasploit
•added 2015/01/13 12:40 a.m.•49 views

Memcached Extractor

This module extracts the slabs from a memcached instance. It then finds the keys and values stored in those slabs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Memcached Extractor',...

6.8AI score
SaveExploits0
Metasploit
Metasploit
•added 2014/12/27 9:3 p.m.•49 views

Reflective DLL Injection, Hidden Bind Ipknock TCP Stager

Inject a DLL via a reflective loader. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The socket will appear as...

6.9AI score
SaveExploits0
Metasploit
Metasploit
•added 2014/06/07 4:20 p.m.•49 views

MongoDB NoSQL Collection Enumeration Via Injection

This module can exploit NoSQL injections on MongoDB versions less than 2.4 and enumerate the collections available in the data via boolean injections. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

0.1AI score
SaveExploits0
Metasploit
Metasploit
•added 2014/04/27 3:40 p.m.•49 views

Adobe Flash Player Type Confusion Remote Code Execution

This module exploits a type confusion vulnerability found in the ActiveX component of Adobe Flash Player. This vulnerability was found exploited in the wild in November 2013. This module has been tested successfully on IE 6 to IE 10 with Flash 11.7, 11.8 and 11.9 prior to 11.9.900.170 over Window...

9.3CVSS0.2AI score0.72495EPSS
SaveExploits6
Metasploit
Metasploit
•added 2014/02/15 9:21 p.m.•49 views

Reflective DLL Injection, Reverse Hop HTTP/HTTPS Stager

Inject a DLL via a reflective loader. Tunnel communication over an HTTP or HTTPS hop point. Note that you must first upload data/hop/hop.php to the PHP server you wish to use as a hop. This module requires Metasploit: https://metasploit.com/download Current source:...

7.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2014/02/08 7:9 p.m.•49 views

Powershell Base64 Command Encoder

This encodes the command as a base64 encoded command for powershell. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework include Msf::Post::Windows class MetasploitModule 'Powershell Base64 Command Encoder', 'Description'...

7.5AI score
SaveExploits0
Metasploit
Metasploit
•added 2014/01/18 4:7 p.m.•49 views

Adobe Flash Player Regular Expression Heap Overflow

This module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger a memory corruption, which results in remote code execution under the context of the user, a...

9.3CVSS7.2AI score0.77597EPSS
SaveExploits10
Metasploit
Metasploit
•added 2014/01/09 7:25 p.m.•49 views

SerComm Network Device Backdoor Detection

This module can identify SerComm manufactured network devices which contain a backdoor, allowing command injection or account disclosure. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SerComm...

10CVSS8AI score0.73825EPSS
SaveExploits3
Metasploit
Metasploit
•added 2013/12/17 7:7 p.m.•49 views

OSX Gather Safari LastSession.plist

This module downloads the LastSession.plist file from the target machine. LastSession.plist is used by Safari to track active websites in the current session, and sometimes contains sensitive information such as usernames and passwords. This module will first download the original...

6.8AI score
SaveExploits0
Metasploit
Metasploit
•added 2013/08/30 3:50 p.m.•49 views

MS13-059 Microsoft Internet Explorer CFlatMarkupPointer Use-After-Free

This is a memory corruption bug found in Microsoft Internet Explorer. On IE 9, it seems to only affect certain releases of mshtml.dll, ranging from a newly installed IE9 9.0.8112.16446, to 9.00.8112.16502 July 2013 update. IE8 requires a different way to trigger the vulnerability, but not current...

9.3CVSS0.2AI score0.58427EPSS
SaveExploits8
Metasploit
Metasploit
•added 2013/06/30 7:35 a.m.•49 views

IPMI 2.0 Cipher Zero Authentication Bypass Scanner

This module identifies IPMI 2.0-compatible systems that are vulnerable to an authentication bypass vulnerability through the use of cipher zero. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

10CVSS7.3AI score0.26016EPSS
SaveExploits2
Metasploit
Metasploit
•added 2013/05/27 10:2 p.m.•49 views

Canon Printer Wireless Configuration Disclosure

This module enumerates wireless credentials from Canon printers with a web interface. It has been tested on Canon models: MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920. This module requires Metasploit: https://metasploit.com/download Current source:...

2.1CVSS7AI score0.02846EPSS
SaveExploits3
Metasploit
Metasploit
•added 2013/03/15 2:13 p.m.•49 views

Linux Manage Download and Execute

This module downloads and runs a file with bash. It first tries to uses curl as its HTTP client and then wget if it's not found. Bash found in the PATH is used to execute the file. This module requires Metasploit: https://metasploit.com/download Current source:...

7.2AI score
SaveExploits0
Total number of security vulnerabilities5000