Lucene search
+L
MetasploitMost viewed

7296 matches found

Metasploit
Metasploit
•added 2014/11/25 6:34 p.m.•47 views

Mac OS X IOKit Keyboard Driver Root Privilege Escalation

A heap overflow in IOHIKeyboardMapper::parseKeyMapping allows kernel memory corruption in Mac OS X before 10.10. By abusing a bug in the IORegistry, kernel pointers can also be leaked, allowing a full kASLR bypass. Tested on Mavericks 10.9.5, and should work on previous versions. The issue was...

7.8CVSS1.3AI score0.49049EPSS
Exploits5
Metasploit
Metasploit
•added 2014/04/19 10:31 p.m.•47 views

Multiplatform WLAN Enumeration and Geolocation

Enumerate wireless networks visible to the target device. Optionally geolocate the target by gathering local wireless networks and performing a lookup against Google APIs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

Exploits0
Metasploit
Metasploit
•added 2013/11/18 3:11 a.m.•47 views

ManageEngine Desktop Central AgentLogUpload Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability in Desktop Central v7 to v8 build 80293. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution as SYSTEM. This module requires Metasploit: https://metasploit.com/download...

9.8CVSS10AI score0.74528EPSS
Exploits6
Metasploit
Metasploit
•added 2013/10/30 3:25 p.m.•47 views

vTigerCRM v5.4.0/v5.3.0 Authenticated Remote Code Execution

vTiger CRM allows an authenticated user to upload files to embed within documents. Due to insufficient privileges on the 'files' upload folder, an attacker can upload a PHP script and execute arbitrary PHP code remotely. This module was tested against vTiger CRM v5.4.0 and v5.3.0. This module...

8.8CVSS7.7AI score0.43103EPSS
Exploits6
Metasploit
Metasploit
•added 2013/09/16 10:2 a.m.•47 views

Windows Command Shell, Bind TCP (via Lua)

Listen for a connection and spawn a command shell via Lua This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 218 include Msf::Payload::Single include Msf::Sessions::CommandShellOption...

0.1AI score
Exploits0
Metasploit
Metasploit
•added 2013/09/06 5:42 p.m.•47 views

GE Proficy Cimplicity WebView substitute.bcl Directory Traversal

This module abuses a directory traversal in GE Proficy Cimplicity, specifically on the gefebt.exe component used by the WebView, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on GE Proficy Cimplicity 7.5. This module requires Metasploit:...

4.3CVSS0.1AI score0.19111EPSS
Exploits3
Metasploit
Metasploit
•added 2013/07/25 3:14 a.m.•47 views

Oracle MySQL for Microsoft Windows FILE Privilege Abuse

This module takes advantage of a file privilege misconfiguration problem specifically against Windows MySQL servers. This module abuses the FILE privilege to write a payload to Microsoft's All Users Start Up directory which will execute every time a user logs in. The default All Users Start Up...

6CVSS7.4AI score0.31664EPSS
Exploits15
Metasploit
Metasploit
•added 2013/04/04 3:30 p.m.•47 views

Linksys WRT54GL apply.cgi Command Execution

Some Linksys Routers are vulnerable to an authenticated OS command injection in the Web Interface. Default credentials are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload. A ping...

7.5CVSS6.8AI score0.70753EPSS
Exploits8
Metasploit
Metasploit
•added 2013/03/27 8:26 a.m.•47 views

D-Link DIR-615H HTTP Login Utility

This module attempts to authenticate to different D-Link HTTP management services. It has been tested successfully on D-Link DIR-615 Hardware revision H devices. It is possible that this module also works with other models. This module requires Metasploit: https://metasploit.com/download Current...

7.5CVSS7AI score0.53618EPSS
Exploits41
Metasploit
Metasploit
•added 2013/02/03 8:6 p.m.•47 views

Unix Command Shell, Double Reverse TCP SSL (telnet)

Creates an interactive shell through two inbound connections, encrypts using SSL via "-z" option This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 136 include Msf::Payload::Single...

0.1AI score
Exploits0
Metasploit
Metasploit
•added 2013/01/10 9:25 p.m.•47 views

Ruby Command Shell, Reverse TCP

Connect back and create a command shell via Ruby This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 516 include Msf::Payload::Single include Msf::Payload::Ruby include...

7.5AI score
Exploits0
Metasploit
Metasploit
•added 2013/01/03 11:48 p.m.•47 views

JBoss JMX Console Beanshell Deployer WAR Upload and Deployment

This module can be used to install a WAR file payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:BSHDeployer's createScriptDeployment method. This module requires Metasploit: https://metasploit.com/download Current...

5.3CVSS5.6AI score0.79415EPSS
Exploits28
Metasploit
Metasploit
•added 2012/09/15 1:11 p.m.•47 views

Webmin edit_html.cgi file Parameter Traversal Arbitrary File Access

This module exploits a directory traversal in Webmin 1.580. The vulnerability exists in the edithtml.cgi component and allows an authenticated user with access to the File Manager Module to access arbitrary files with root privileges. The module has been tested successfully with Webmin 1.580 over...

5CVSS6.9AI score0.20456EPSS
Exploits3
Metasploit
Metasploit
•added 2012/09/13 3:24 p.m.•47 views

Novell File Reporter Agent Arbitrary File Delete

NFRAgent.exe in Novell File Reporter allows remote attackers to delete arbitrary files via a full pathname in an SRS request with OPERATION set to 4 and CMD set to 5 against /FSF/CMD. This module has been tested successfully on NFR Agent 1.0.4.3 File Reporter 1.0.2 and NFR Agent 1.0.3.22 File...

5CVSS0.5AI score0.16676EPSS
Exploits5
Metasploit
Metasploit
•added 2012/07/12 11:12 a.m.•47 views

Sielco Sistemi Winlog Remote File Access

This module exploits a directory traversal in Sielco Sistemi Winlog. The vulnerability exists in the Runtime.exe service and can be triggered by sending a specially crafted packet to the 46824/TCP port. This module has been successfully tested on Sielco Sistemi Winlog Lite 2.07.14. This module...

4.3CVSS0.5AI score0.27488EPSS
Exploits3
Metasploit
Metasploit
•added 2012/05/31 7:46 p.m.•47 views

PcAnywhere Login Scanner

This module will test pcAnywhere logins on a range of machines and report successful logins. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PcAnywhere Login Scanner', 'Description' = %q This...

7.5CVSS0.1AI score0.53618EPSS
Exploits41
Metasploit
Metasploit
•added 2012/04/05 5:35 p.m.•47 views

Schneider Modicon Remote START/STOP Command

The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a to perform administrative commands without authentication. This module allows a remote user to change the state of the PLC between STOP and RUN, allowing an attacker to end process control by the PLC. This module is...

0.7AI score
Exploits0
Metasploit
Metasploit
•added 2012/02/01 10:26 p.m.•47 views

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Icona SpA C6 Messenger 1.0.0.1. The vulnerability is in the DownloaderActiveX Control DownloaderActiveX.ocx. The insecure control can be abused to download and execute arbitrary files in the context of the currently logged-on user. This module requires...

9.3CVSS10AI score0.46936EPSS
Exploits4
Metasploit
Metasploit
•added 2011/12/05 11:16 p.m.•47 views

Linux Command Shell, Reverse TCP Inline

Connect to target and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 208 include Msf::Payload::Single include Msf::Payload::Linux::Armle::Prepends include...

7.4AI score
Exploits0
Metasploit
Metasploit
•added 2011/12/05 7:19 p.m.•47 views

Shodan Search

This module uses the Shodan API to search Shodan. Accounts are free and an API key is required to use this module. Output from the module is displayed to the screen and can be saved to a file or the MSF database. NOTE: SHODAN filters i.e. port, hostname, os, geo, city can be used in queries, but...

6.9AI score
Exploits0
Metasploit
Metasploit
•added 2011/11/15 4:29 p.m.•47 views

Windows Disconnect Wireless Connection

This module disconnects the current wireless network connection on the specified interface. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Disconnect Wireless Connection', 'Description...

7AI score
Exploits0
Metasploit
Metasploit
•added 2011/11/04 8:20 a.m.•47 views

Mini-Stream 3.0.1.1 Buffer Overflow

This module exploits a stack buffer overflow in Mini-Stream 3.0.1.1 By creating a specially crafted pls file, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

9.3CVSS7.9AI score0.32817EPSS
Exploits2
Metasploit
Metasploit
•added 2011/10/26 6:6 p.m.•47 views

phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection

This module exploits an arbitrary PHP code execution flaw in the phpScheduleIt software. This vulnerability is only exploitable when the magicquotesgpc PHP option is 'off'. Authentication is not required to exploit the bug. Version 1.2.10 and earlier of phpScheduleIt are affected. This module...

6.8CVSS7.7AI score0.26143EPSS
Exploits5
Metasploit
Metasploit
•added 2011/07/09 1:40 a.m.•47 views

Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow

This module exploits a stack buffer overflow in process bcaaa-130.exe port 16102, which comes as part of the Blue Coat Authentication proxy. Please note that by default, this exploit will attempt up to three times in order to successfully gain remote code execution in some cases, it takes as many...

10CVSS8.3AI score0.54648EPSS
Exploits1
Metasploit
Metasploit
•added 2011/06/25 12:54 a.m.•47 views

Siemens FactoryLink 8 CSService Logging Path Param Buffer Overflow

This module exploits a vulnerability found on Siemens FactoryLink 8. The vulnerability occurs when CSService.exe processes a CSMSGListFilesREQ message, the user-supplied path first gets converted to ANSI format CodePage 0, and then gets handled by a logging routine where proper bounds checking is...

7.6AI score
Exploits0
Metasploit
Metasploit
•added 2011/03/25 10:49 p.m.•47 views

VLC AMV Dangling Pointer Vulnerability

This module exploits VLC media player when handling a .AMV file. By flipping the 0x41st byte in the file format video width/height, VLC crashes due to an invalid pointer, which allows remote attackers to gain arbitrary code execution. The vulnerable packages include: VLC 1.1.4, VLC 1.1.5, VLC...

9.3CVSS6.7AI score0.75515EPSS
Exploits7
Metasploit
Metasploit
•added 2011/03/23 7:36 p.m.•47 views

PostgreSQL for Microsoft Windows Payload Execution

On default Microsoft Windows installations of PostgreSQL the postgres service account may write to the current directory which is usually "C:\Program Files\PostgreSQL\\data" where is the major.minor version of PostgreSQL. UDF DLL's may be sourced from there as well. This module uploads a Windows...

7.5AI score
Exploits0
Metasploit
Metasploit
•added 2010/11/13 6:40 a.m.•47 views

Web Site Crawler

Crawl a web site and store information about what was found This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Web Site Crawler', 'Description' = 'Crawl a web site and store information about what...

6.9AI score
Exploits0
Metasploit
Metasploit
•added 2010/10/04 4:26 a.m.•47 views

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

This module exploits a remote code execution vulnerability in Trend Micro Internet Security Pro 2010 ActiveX. When sending an invalid pointer to the extSetOwner function of UfPBCtrl.dll an attacker may be able to execute arbitrary code. This module requires Metasploit:...

9.3CVSS7.6AI score0.39216EPSS
Exploits14
Metasploit
Metasploit
•added 2010/04/26 6:20 p.m.•47 views

Trellian FTP Client 3.01 PASV Remote Buffer Overflow

This module exploits a buffer overflow in the Trellian 3.01 FTP client that is triggered through an excessively long PASV message. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trellian FTP...

9.3CVSS7.5AI score0.31267EPSS
Exploits4
Metasploit
Metasploit
•added 2010/04/16 8:8 a.m.•47 views

Sun Java Web Start Plugin Command Line Argument Injection

This module exploits a flaw in the Web Start plugin component of Sun Java Web Start. The arguments passed to Java Web Start are not properly validated. By passing the lesser known -J option, an attacker can pass arbitrary options directly to the Java runtime. By utilizing the -XXaltjvm option, as...

10CVSS7.6AI score0.69949EPSS
Exploits8
Metasploit
Metasploit
•added 2009/11/13 6:9 p.m.•47 views

Persits XUpload ActiveX AddFile Buffer Overflow

This module exploits a stack buffer overflow in Persits Software Inc's XUpload ActiveX controlversion 3.0.0.3 thats included in HP LoadRunner 9.5. By passing an overly long string to the AddFile method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

6.8CVSS10AI score0.29518EPSS
Exploits4
Metasploit
Metasploit
•added 2009/07/22 7:10 p.m.•47 views

FTP File Server

This module provides a FTP service This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FTP File Server', 'Description' = %q This module provides a FTP service , 'Author' = 'hdm', 'License' =...

7AI score
Exploits0
Metasploit
Metasploit
•added 2009/07/21 3:20 p.m.•47 views

Safari Archive Metadata Command Execution

This module exploits a vulnerability in Safari's "Safe file" feature, which will automatically open any file with one of the allowed extensions. This can be abused by supplying a zip file, containing a shell script, with a metafile indicating that the file should be opened by Terminal.app. This...

5.1CVSS6.9AI score0.58105EPSS
Exploits8
Metasploit
Metasploit
•added 2008/09/15 6:50 p.m.•47 views

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 184 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

7.4AI score
Exploits0
Metasploit
Metasploit
•added 2008/09/01 4:41 a.m.•47 views

PHP Execute Command

Execute a single system command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php def initializeinfo =...

0.4AI score
Exploits0
Metasploit
Metasploit
•added 2008/04/03 9:36 a.m.•47 views

Windows Command, Double Reverse TCP Connection (via Perl)

Creates an interactive shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 148 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def initializeinfo...

7.1AI score
Exploits0
Metasploit
Metasploit
•added 2008/03/01 5:20 p.m.•47 views

Novell iPrint Client ActiveX Control ExecuteRequest Buffer Overflow

This module exploits a stack buffer overflow in Novell iPrint Client 4.26. When sending an overly long string to the ExecuteRequest property of ienipp.ocx an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

10CVSS0.5AI score0.6514EPSS
Exploits8
Metasploit
Metasploit
•added 2006/12/17 7:57 a.m.•47 views

PHP Command, Double Reverse TCP Connection (via Perl)

Creates an interactive shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php include...

7.4AI score
Exploits0
Metasploit
Metasploit
•added 2006/01/16 2:59 a.m.•47 views

freeFTPd 1.0 Username Overflow

This module exploits a stack buffer overflow in the freeFTPd multi-protocol file transfer service. This flaw can only be exploited when logging has been enabled non-default. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS7.4AI score0.71506EPSS
Exploits8
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•46 views

FTP Fetch, Windows Upload/Execute, Reverse TCP Stager with UUID Support

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Connect back to the attacker with UUID Support Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•46 views

FTP Fetch, Windows Upload/Execute, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Connect back to the attacker Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•46 views

FTP Fetch, Windows Upload/Execute, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Listen for a connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

5.4AI score
Exploits0
Metasploit
Metasploit
•added 2021/09/20 5:41 p.m.•46 views

Jira Users Enumeration

This module exploits an information disclosure vulnerability that allows an unauthenticated user to enumerate users in the /ViewUserHover.jspa endpoint. This only affects Jira versions use auxiliary/scanner/http/jirauserenum msf auxiliaryjirauserenum show actions ...actions... msf...

5.3CVSS6.2AI score0.99603EPSS
Exploits8
Metasploit
Metasploit
•added 2020/03/04 4:2 a.m.•46 views

Install Python for Windows

This module places an embeddable Python3 distribution onto the target file system, granting pentesters access to a lightweight Python interpreter. This module does not require administrative privileges or user interaction with installation prompts. This module requires Metasploit:...

0.2AI score
Exploits0
Metasploit
Metasploit
•added 2020/01/09 1:3 p.m.•46 views

Barco WePresent file_transfer.cgi Command Injection

This module exploits an unauthenticated remote command injection vulnerability found in Barco WePresent and related OEM'ed products. The vulnerability is triggered via an HTTP POST request to the filetransfer.cgi endpoint. This module requires Metasploit: https://metasploit.com/download Current...

9.8CVSS0.3AI score0.98952EPSS
Exploits10
Metasploit
Metasploit
•added 2019/07/26 12:42 a.m.•46 views

Windows x86 Pingback, Bind TCP Inline

Open a socket and report UUID when a connection is received Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 314 include Msf::Payload::Windows include Msf::Payload::Sing...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2019/03/27 9:23 a.m.•46 views

AIS logistics ESEL-Server Unauth SQL Injection RCE

This module will execute an arbitrary payload on an "ESEL" server used by the AIS logistic software. The server typically listens on port 5099 without TLS. There could also be server listening on 5100 with TLS but the port 5099 is usually always open. The login process is vulnerable to an SQL...

9.8CVSS9.9AI score0.6585EPSS
Exploits5
Metasploit
Metasploit
•added 2018/10/10 9:39 a.m.•46 views

Apple_iOS Meterpreter, Reverse HTTP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 643824 include...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2018/07/12 8:0 p.m.•46 views

QNAP Q'Center change_passwd Command Execution

This module exploits a command injection vulnerability in the changepasswd API method within the web interface of QNAP Q'Center virtual appliance versions prior to 1.7.1083. The vulnerability allows the 'admin' privileged user account to execute arbitrary commands as the 'admin' operating system...

8.8CVSS8.2AI score0.59215EPSS
Exploits9
Total number of security vulnerabilities5000