Lucene search
+L
MetasploitMost viewed

7296 matches found

Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•46 views

FTP Fetch, Windows Upload/Execute, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Connect back to the attacker Module Options...

6.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•46 views

FTP Fetch, Windows Upload/Execute, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Listen for a connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

5.4AI score
SaveExploits0
Metasploit
Metasploit
•added 2021/09/20 5:41 p.m.•46 views

Jira Users Enumeration

This module exploits an information disclosure vulnerability that allows an unauthenticated user to enumerate users in the /ViewUserHover.jspa endpoint. This only affects Jira versions use auxiliary/scanner/http/jirauserenum msf auxiliaryjirauserenum show actions ...actions... msf...

5.3CVSS6.2AI score0.99603EPSS
SaveExploits8
Metasploit
Metasploit
•added 2020/03/04 4:2 a.m.•46 views

Install Python for Windows

This module places an embeddable Python3 distribution onto the target file system, granting pentesters access to a lightweight Python interpreter. This module does not require administrative privileges or user interaction with installation prompts. This module requires Metasploit:...

0.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2020/01/09 1:3 p.m.•46 views

Barco WePresent file_transfer.cgi Command Injection

This module exploits an unauthenticated remote command injection vulnerability found in Barco WePresent and related OEM'ed products. The vulnerability is triggered via an HTTP POST request to the filetransfer.cgi endpoint. This module requires Metasploit: https://metasploit.com/download Current...

9.8CVSS0.3AI score0.98952EPSS
SaveExploits10
Metasploit
Metasploit
•added 2019/03/27 9:23 a.m.•46 views

AIS logistics ESEL-Server Unauth SQL Injection RCE

This module will execute an arbitrary payload on an "ESEL" server used by the AIS logistic software. The server typically listens on port 5099 without TLS. There could also be server listening on 5100 with TLS but the port 5099 is usually always open. The login process is vulnerable to an SQL...

9.8CVSS9.9AI score0.6585EPSS
SaveExploits5
Metasploit
Metasploit
•added 2018/10/10 9:39 a.m.•46 views

Apple_iOS Meterpreter, Reverse HTTP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 643824 include...

7.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2018/07/17 11:28 p.m.•46 views

Vtiger CRM - Authenticated Logo Upload RCE

Vtiger 6.3.0 CRM's administration interface allows for the upload of a company logo. Instead of uploading an image, an attacker may choose to upload a file containing PHP code and run this code by accessing the resulting PHP file. This module was tested against vTiger CRM v6.3.0. This module...

8.8CVSS7.8AI score0.40241EPSS
SaveExploits12
Metasploit
Metasploit
•added 2018/07/12 8:0 p.m.•46 views

QNAP Q'Center change_passwd Command Execution

This module exploits a command injection vulnerability in the changepasswd API method within the web interface of QNAP Q'Center virtual appliance versions prior to 1.7.1083. The vulnerability allows the 'admin' privileged user account to execute arbitrary commands as the 'admin' operating system...

8.8CVSS8.2AI score0.59215EPSS
SaveExploits9
Metasploit
Metasploit
•added 2017/12/18 10:32 p.m.•46 views

Cambium cnPilot r200/r201 SNMP Enumeration

Cambium cnPilot r200/r201 devices can be administered using SNMP. The device configuration contains IP addresses, keys, passwords, & lots of juicy information. This module exploits an access control flaw, which allows remotely extracting sensitive information such as account passwords, WiFI PSK, ...

8CVSS0.2AI score0.04858EPSS
SaveExploits2
Metasploit
Metasploit
•added 2017/11/07 2:46 p.m.•46 views

Jenkins XStream Groovy classpath Deserialization Vulnerability

This module exploits CVE-2016-0792 a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions older than 1.642.2 which is caused by unsafe deserialization in XStream with Groovy in the classpath, which allows remote arbitrary code execution. The issue affects default...

8.8CVSS0.5AI score0.83259EPSS
SaveExploits23
Metasploit
Metasploit
•added 2017/10/30 7:4 p.m.•46 views

Linux Meterpreter, Reverse HTTPS Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1166612 include...

7.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2017/10/23 10:18 a.m.•46 views

Kaltura Remote PHP Code Execution over Cookie

This module exploits an Object Injection vulnerability in Kaltura. By exploiting this vulnerability, unauthenticated users can execute arbitrary code under the context of the web server user. Kaltura makes use of a hardcoded cookie secret which allows to sign arbitrary cookie data. After passing...

9.8CVSS8.6AI score0.75497EPSS
SaveExploits12
Metasploit
Metasploit
•added 2017/09/23 12:57 p.m.•46 views

IBM Notes encodeURI DOS

This module exploits a vulnerability in the native browser that comes with IBM Lotus Notes. If successful, it could cause the Notes client to hang and have to be restarted. This module requires Metasploit: https://metasploit.com/download Current source:...

6.5CVSS6.5AI score0.30074EPSS
SaveExploits11
Metasploit
Metasploit
•added 2017/01/07 3:51 a.m.•46 views

Get the Vehicle Information Such as the VIN from the Target Module

Post Module to query DTCs, Some common engine info and Vehicle Info. It returns such things as engine speed, coolant temp, Diagnostic Trouble Codes as well as All info stored by Mode $09 Vehicle Info, VIN, etc This module requires Metasploit: https://metasploit.com/download Current source:...

6.9AI score
SaveExploits0
Metasploit
Metasploit
•added 2016/08/01 6:26 p.m.•46 views

Internet Explorer 11 VBScript Engine Memory Corruption

This module exploits the memory corruption vulnerability CVE-2016-0189 present in the VBScript engine of Internet Explorer 11. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Internet Explorer ...

7.5CVSS0.4AI score0.93165EPSS
SaveExploits10
Metasploit
Metasploit
•added 2016/06/28 7:28 a.m.•46 views

Ruby on Rails ActionPack Inline ERB Code Execution

This module exploits a remote code execution vulnerability in the inline request processor of the Ruby on Rails ActionPack component. This vulnerability allows an attacker to process ERB to the inline JSON processor, which is then rendered, permitting full RCE within the runtime, without logging ...

7.3CVSS1AI score0.81445EPSS
SaveExploits7
Metasploit
Metasploit
•added 2016/03/29 2:1 a.m.•46 views

Generic JCL Test for Mainframe Exploits

Provide JCL which can be used to submit a job to JES2 on z/OS which will exit and return 0. This can be used as a template for other JCL based payloads This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This is a prototy...

7AI score
SaveExploits0
Metasploit
Metasploit
•added 2015/05/19 1:6 p.m.•46 views

Load Scripts Into PowerShell Session

This module will download and execute one or more PowerShell scripts over a present powershell session. Setting VERBOSE to true will show the stager results. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

SaveExploits0
Metasploit
Metasploit
•added 2015/03/09 3:36 p.m.•46 views

IPass Control Pipe Remote Command Execution

This module exploits a vulnerability in the IPass Client service. This service provides a named pipe which can be accessed by the user group BUILTIN\Users. This pipe can be abused to force the service to load a DLL from a SMB share. This module requires Metasploit: https://metasploit.com/download...

9CVSS6.8AI score0.52125EPSS
SaveExploits5
Metasploit
Metasploit
•added 2015/01/28 7:42 p.m.•46 views

ManageEngine Multiple Products Arbitrary File Download

This module exploits an arbitrary file download vulnerability in the FailOverHelperServlet on ManageEngine OpManager, Applications Manager and IT360. This vulnerability is unauthenticated on OpManager and Applications Manager, but authenticated in IT360. This module will attempt to login using th...

7.5CVSS7.3AI score0.83399EPSS
SaveExploits11
Metasploit
Metasploit
•added 2015/01/28 6:24 p.m.•46 views

MS14-070 Windows tcpip!SetAddrOptions NULL Pointer Dereference

A vulnerability within the Microsoft TCP/IP protocol driver tcpip.sys can allow a local attacker to trigger a NULL pointer dereference by using a specially crafted IOCTL. This flaw can be abused to elevate privileges to SYSTEM. This module requires Metasploit: https://metasploit.com/download...

7.2CVSS0.5AI score0.22666EPSS
SaveExploits12
Metasploit
Metasploit
•added 2015/01/24 4:14 p.m.•46 views

Huawei Datacard Information Disclosure Vulnerability

This module exploits an unauthenticated information disclosure vulnerability in Huawei SOHO routers. The module will gather information by accessing the /api pages where authentication is not required, allowing configuration changes as well as information disclosure, including any stored SMS. Thi...

4.3CVSS6.8AI score0.06129EPSS
SaveExploits5
Metasploit
Metasploit
•added 2014/09/01 3:57 a.m.•46 views

ARRIS / Motorola SBG6580 Cable Modem SNMP Enumeration Module

This module allows SNMP enumeration of the ARRIS / Motorola SURFboard SBG6580 Series Wi-Fi Cable Modem Gateway. It supports the username and password for the device user interface as well as wireless network keys and information. The default community used is "public". This module requires...

7.5AI score
SaveExploits0
Metasploit
Metasploit
•added 2014/02/25 9:7 p.m.•46 views

GE Proficy CIMPLICITY gefebt.exe Remote Code Execution

This module abuses the gefebt.exe component in GE Proficy CIMPLICITY, reachable through the CIMPLICIY CimWebServer. The vulnerable component allows to execute remote BCL files in shared resources. An attacker can abuse this behavior to execute a malicious BCL and drop an arbitrary EXE. The last o...

7.5CVSS7.4AI score0.70223EPSS
SaveExploits5
Metasploit
Metasploit
•added 2013/12/19 11:48 p.m.•46 views

HP SiteScope issueSiebelCmd Remote Code Execution

This module exploits a code execution flaw in HP SiteScope. The vulnerability exists in the APISiteScopeImpl web service, specifically in the issueSiebelCmd method, which allows the user to execute arbitrary commands without authentication. This module has been tested successfully on HP SiteScope...

7.5CVSS8.1AI score0.71003EPSS
SaveExploits5
Metasploit
Metasploit
•added 2013/10/23 9:1 p.m.•46 views

HP Intelligent Management SOM Account Creation

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the AccountService RpcServiceServlet from the SOM component, in order to create a SOM account with Account Management permissions. This module has been tested successfully on HP...

7.5CVSS7.1AI score0.23927EPSS
SaveExploits3
Metasploit
Metasploit
•added 2013/09/16 10:2 a.m.•46 views

Unix Command Shell, Reverse TCP (via Lua)

Creates an interactive shell via Lua This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 224 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def initializeinfo ...

7.1AI score
SaveExploits0
Metasploit
Metasploit
•added 2013/08/13 9:27 p.m.•46 views

Joomla Media Manager File Upload Vulnerability

This module exploits a vulnerability found in Joomla 2.5.x up to 2.5.13, as well as 3.x up to 3.1.4 versions. The vulnerability exists in the Media Manager component, which comes by default in Joomla, allowing arbitrary file uploads, and results in arbitrary code execution. The module has been...

6.8CVSS10AI score0.48191EPSS
SaveExploits5
Metasploit
Metasploit
•added 2013/08/11 11:19 p.m.•46 views

Open-FTPD 1.2 Arbitrary File Upload

This module exploits multiple vulnerabilities found in Open FTP server. The software contains an authentication bypass vulnerability and a arbitrary file upload vulnerability that allows a remote attacker to write arbitrary files to the file system as long as there is at least one user who has...

8.5AI score
SaveExploits0
Metasploit
Metasploit
•added 2013/03/25 7:48 a.m.•46 views

D-Link DIR-300A / DIR-320 / DIR-615D HTTP Login Utility

This module attempts to authenticate to different D-Link HTTP management services. It has been tested on D-Link DIR-300 Hardware revision A, D-Link DIR-615 Hardware revision D and D-Link DIR-320 devices. It is possible that this module also works with other models. This module requires Metasploit...

7.5CVSS7AI score0.53618EPSS
SaveExploits41
Metasploit
Metasploit
•added 2013/01/20 3:40 p.m.•46 views

PHP-Charts v1.0 PHP Code Execution Vulnerability

This module exploits a PHP code execution vulnerability in php-Charts version 1.0 which could be abused to allow users to execute arbitrary PHP code under the context of the webserver user. The 'url.php' script calls eval with user controlled data from any HTTP GET parameter name. This module...

0.2AI score
SaveExploits0
Metasploit
Metasploit
•added 2013/01/17 8:14 p.m.•46 views

Java Applet Method Handle Remote Code Execution

This module abuses the Method Handle class from a Java Applet to run arbitrary Java code outside of the sandbox. The vulnerability affects Java version 7u7 and earlier. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

10CVSS1AI score0.78696EPSS
SaveExploits6
Metasploit
Metasploit
•added 2013/01/05 6:40 a.m.•46 views

IBM Cognos tm1admsd.exe Overflow

This module exploits a stack buffer overflow in IBM Cognos Analytic Server Admin service. The vulnerability exists in the tm1admsd.exe component, due to a dangerous copy of user controlled data to the stack, via memcpy, without validating the supplied length and data. The module has been tested...

10CVSS1.3AI score0.5485EPSS
SaveExploits8
Metasploit
Metasploit
•added 2012/11/20 10:15 p.m.•46 views

NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution

This module abuses a lack of authorization in the NetIQ Privileged User Manager service unifid.exe to execute arbitrary perl code. The problem exists in the ldapagnt module. The module has been tested successfully on NetIQ PUM 2.3.1 over Windows 2003 SP2, which allows to execute arbitrary code wi...

10CVSS0.6AI score0.6275EPSS
SaveExploits3
Metasploit
Metasploit
•added 2012/07/10 4:40 p.m.•46 views

Hastymail 2.1.1 RC1 Command Injection

This module exploits a command injection vulnerability found in Hastymail 2.1.1 RC1 due to the insecure usage of the calluserfuncarray function on the "lib/ajaxfunctions.php" script. Authentication is required on Hastymail in order to exploit the vulnerability. The module has been successfully...

7.5CVSS7AI score0.24119EPSS
SaveExploits9
Metasploit
Metasploit
•added 2012/03/21 9:4 a.m.•46 views

OS X Gather Chicken of the VNC Profile

This module will download the "Chicken of the VNC" client application's profile file, which is used to store other VNC servers' information such as the IP and password. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

6.8AI score
SaveExploits0
Metasploit
Metasploit
•added 2012/01/31 7:11 a.m.•46 views

PHP Command Shell, Bind TCP (via perl) IPv6

Listen for a connection and spawn a command shell via perl persistent over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include...

7.5AI score
SaveExploits0
Metasploit
Metasploit
•added 2011/12/28 9:41 p.m.•46 views

CorpWatch Company ID Information Search

This module interfaces with the CorpWatch API to get publicly available info for a given CorpWatch ID of the company. If you don't know the CorpWatch ID, please use the corpwatchlookupname module first. This module requires Metasploit: https://metasploit.com/download Current source:...

6.9AI score
SaveExploits0
Metasploit
Metasploit
•added 2011/12/23 5:27 p.m.•46 views

OpenTFTP SP 1.4 Error Packet Overflow

This module exploits a buffer overflow in OpenTFTP Server SP 1.4. The vulnerable condition triggers when the TFTP opcode is configured as an error packet, the TFTP service will then format the message using a sprintf function, which causes an overflow, therefore allowing remote code execution und...

10CVSS8.6AI score0.65284EPSS
SaveExploits6
Metasploit
Metasploit
•added 2011/12/08 12:42 a.m.•46 views

Yaws Web Server Directory Traversal

This module exploits a directory traversal bug in Yaws v1.9.1 or less. The module can only be used to retrieve files. However, code execution might be possible. Because when the malicious user sends a PUT request, a file is actually created, except no content is written. This module requires...

6.5CVSS6.8AI score0.16142EPSS
SaveExploits3
Metasploit
Metasploit
•added 2011/12/04 7:44 p.m.•46 views

Windows Gather Privileges Enumeration

This module will print if UAC is enabled, and if the current account is ADMIN enabled. It will also print UID, foreground SESSION ID, is SYSTEM status and current process PRIVILEGES. This module requires Metasploit: https://metasploit.com/download Current source:...

7AI score
SaveExploits0
Metasploit
Metasploit
•added 2011/11/25 1:39 a.m.•46 views

Multi Gather Mozilla Thunderbird Signon Credential Collection

This module will collect credentials from Mozilla Thunderbird by downloading the necessary files such as 'signons.sqlite', 'key3.db', and 'cert8.db' for offline decryption with third party tools. If necessary, you may also set the PARSE option to true to parse the sqlite file, which contains...

SaveExploits0
Metasploit
Metasploit
•added 2011/10/12 12:1 a.m.•46 views

Windows Manage Process Migration

This module will migrate a Meterpreter session from one process to another. A given process PID to migrate to or the module can spawn one and migrate to that newly spawned process. This module requires Metasploit: https://metasploit.com/download Current source:...

6.9AI score
SaveExploits0
Metasploit
Metasploit
•added 2011/08/25 7:7 p.m.•46 views

Multi Generic Operating System Session Close

This module closes the specified session. This can be useful as a finisher for automation tasks This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Generic Operating System Session Close',...

10AI score
SaveExploits0
Metasploit
Metasploit
•added 2011/08/11 6:18 p.m.•46 views

Windows Gather Credential Collector

This module harvests credentials found on the host and stores them in the database. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Credential Collector', 'Description' = %q This...

7.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2011/07/16 5:14 a.m.•46 views

HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.0 and 7.53. By sending a CGI request with a specially OvOSLocale cookie to Toolbar.exe, an attacker may be able to execute arbitrary code. Please note that this module only works against a specific build i.e. NNM...

7.5CVSS8AI score0.7494EPSS
SaveExploits11
Metasploit
Metasploit
•added 2011/03/02 1:44 p.m.•46 views

Wireshark CLDAP Dissector DOS

This module causes infinite recursion to occur within the CLDAP dissector by sending a specially crafted UDP packet. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wireshark CLDAP Dissector...

4.3CVSS0.5AI score0.13064EPSS
SaveExploits3
Metasploit
Metasploit
•added 2010/11/04 3:44 p.m.•46 views

Network Associates PGP KeyServer 7 LDAP Buffer Overflow

This module exploits a stack buffer overflow in the LDAP service that is part of the NAI PGP Enterprise product suite. This module was tested against PGP KeyServer v7.0. Due to space restrictions, egghunter is used to find our payload - therefore you may wish to adjust WfsDelay. This module...

7.5CVSS0.1AI score0.68324EPSS
SaveExploits3
Metasploit
Metasploit
•added 2010/06/21 4:53 p.m.•46 views

JBoss Vulnerability Scanner

This module scans a JBoss instance for a few vulnerabilities. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'JBoss Vulnerability Scanner', 'Description' = %q This module scans a JBoss instance...

9.8CVSS0.1AI score0.90713EPSS
SaveExploits47
Total number of security vulnerabilities5000