Lucene search
+L
MetasploitMost viewed

7296 matches found

Metasploit
Metasploit
‱added 2013/02/03 8:6 p.m.‱45 views

Unix Command Shell, Reverse TCP SSL (via php)

Creates an interactive shell via php, uses SSL This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 279 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

7.1AI score
Exploits0
Metasploit
Metasploit
‱added 2013/01/28 10:23 p.m.‱45 views

Linux Gather PPTP VPN chap-secrets Credentials

This module collects PPTP VPN information such as client, server, password, and IP from your target server's chap-secrets file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Gather PPTP...

6.8AI score
Exploits0
Metasploit
Metasploit
‱added 2013/01/16 2:14 a.m.‱45 views

Windows Gather Razer Synapse Password Extraction

This module will enumerate passwords stored by the Razer Synapse client. The encryption key and iv is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. Affects versions earlier than 1.7.15. This module requires Metasploit:...

7.2AI score
Exploits0
Metasploit
Metasploit
‱added 2012/12/07 7:15 p.m.‱45 views

FreeFloat FTP Server Arbitrary File Upload

This module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and...

7.5AI score
Exploits0
Metasploit
Metasploit
‱added 2012/10/10 5:14 p.m.‱45 views

KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability

This module exploits a code execution vulnerability in the KeyScript ActiveX control from keyhelp.ocx. It is packaged in several products or GE, such as Proficy Historian 4.5, 4.0, 3.5, and 3.1, Proficy HMI/SCADA 5.1 and 5.0, Proficy Pulse 1.0, Proficy Batch Execution 5.6, and SI7 I/O Driver...

9.3CVSS0.5AI score0.39711EPSS
Exploits9
Metasploit
Metasploit
‱added 2012/09/13 8:15 p.m.‱45 views

Linux Mettle x86, Reverse TCP Stager

Inject the mettle server payload staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ---------- Linux reverse TCP stager. module MetasploitModule CachedSize = 50 include...

7.3AI score
Exploits0
Metasploit
Metasploit
‱added 2012/06/10 6:8 a.m.‱45 views

MS12-005 Microsoft Office ClickOnce Unsafe Object Package Handling Vulnerability

This module exploits a vulnerability found in Microsoft Office's ClickOnce feature. When handling a Macro document, the application fails to recognize certain file extensions as dangerous executables, which can be used to bypass the warning message. This can allow attackers to trick victims into...

9.3CVSS6.5AI score0.73753EPSS
Exploits14
Metasploit
Metasploit
‱added 2012/05/25 8:6 a.m.‱45 views

RabidHamster R4 Log Entry sprintf() Buffer Overflow

This module exploits a vulnerability found in RabidHamster R4's web server. By supplying a malformed HTTP request, it is possible to trigger a stack-based buffer overflow when generating a log, which may result in arbitrary code execution under the context of the user. This module requires...

8.1AI score
Exploits0
Metasploit
Metasploit
‱added 2012/04/13 1:7 a.m.‱45 views

CyberLink Power2Go name Attribute (p2g) Stack Buffer Overflow Exploit

This module exploits a stack buffer overflow in CyberLink Power2Go version 8.x The vulnerability is triggered when opening a malformed p2g file containing an overly long string in the 'name' attribute of the file element. This results in overwriting a structured exception handler record. This...

9.3CVSS0.3AI score0.45786EPSS
Exploits2
Metasploit
Metasploit
‱added 2012/04/05 5:35 p.m.‱45 views

Schneider Modicon Ladder Logic Upload/Download

The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a to send and receive ladder logic. The protocol is unauthenticated, and allows a rogue host to retrieve the existing logic and to upload new logic. Two modes are supported: "SEND" and "RECV," which behave as one might...

7.2AI score
Exploits0
Metasploit
Metasploit
‱added 2012/03/14 10:13 a.m.‱45 views

NetDecision 4.5.1 HTTP Server Buffer Overflow

This module exploits a vulnerability found in NetDecision's HTTP service located in C:\Program Files\NetDecision\Bin\HttpSvr.exe. By supplying a long string of data to the URL, an overflow may occur if the data gets handled by HTTP Server's active window. In other words, in order to gain remote...

4.3CVSS7.8AI score0.27397EPSS
Exploits4
Metasploit
Metasploit
‱added 2012/01/06 10:43 p.m.‱45 views

Windows Gather File and Registry Artifacts Enumeration

This module will check the file system and registry for particular artifacts. The list of artifacts is read in YAML format from data/post/enumartifactslist.txt or a user specified file. Any matches are written to the loot. This module requires Metasploit: https://metasploit.com/download Current...

Exploits0
Metasploit
Metasploit
‱added 2011/11/18 4:16 p.m.‱45 views

Multiple Linux / Unix Post Sudo Upgrade Shell

This module attempts to upgrade a shell account to UID 0 by reusing the given password and passing it to sudo. This technique relies on sudo versions from 2008 and later which support -A. This module requires Metasploit: https://metasploit.com/download Current source:...

7.4AI score
Exploits0
Metasploit
Metasploit
‱added 2011/11/10 9:13 a.m.‱45 views

Windows Gather Enumerate Computers

This module will enumerate computers included in the primary Active Directory domain. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Enumerate Computers', 'Description' = %q Thi...

7AI score
Exploits0
Metasploit
Metasploit
‱added 2011/11/07 5:34 p.m.‱45 views

TYPO3 Winstaller Default Encryption Keys

This module exploits known default encryption keys found in the TYPO3 Winstaller. This flaw allows for file disclosure in the jumpUrl mechanism. This issue can be used to read any file that the web server user account has access to view. The method used to create the juhash short MD5 hash was...

7.3AI score
Exploits0
Metasploit
Metasploit
‱added 2011/10/18 11:25 p.m.‱45 views

Windows Gather Credential Store Enumeration and Decryption Module

This module will enumerate the Microsoft Credential Store and decrypt the credentials. This module can only access credentials created by the user the process is running as. It cannot decrypt Domain Network Passwords, but will display the username and location. This module requires Metasploit:...

7AI score
Exploits0
Metasploit
Metasploit
‱added 2011/10/09 3:22 a.m.‱45 views

myBB 1.6.4 Backdoor Arbitrary Command Execution

myBB is a popular open source PHP forum software. Version 1.6.4 contained an unauthorized backdoor, distributed as part of the vendor's source package. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

7AI score
Exploits0
Metasploit
Metasploit
‱added 2011/07/16 5:14 a.m.‱45 views

HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.0 and 7.53. By sending a CGI request with a specially OvOSLocale cookie to Toolbar.exe, an attacker may be able to execute arbitrary code. Please note that this module only works against a specific build i.e. NNM...

7.5CVSS8AI score0.7494EPSS
Exploits11
Metasploit
Metasploit
‱added 2011/06/02 1:10 a.m.‱45 views

GoldenFTP PASS Stack Buffer Overflow

This module exploits a vulnerability in the Golden FTP service, using the PASS command to cause a buffer overflow. Please note that in order trigger the vulnerable code, the victim machine must have the "Show new connections" setting enabled. By default, this option is unchecked. This module...

7.5CVSS0.5AI score0.67016EPSS
Exploits5
Metasploit
Metasploit
‱added 2011/03/28 1:20 a.m.‱45 views

Oracle iSQL*Plus Login Utility

This module attempts to authenticate against an Oracle ISQLPlus administration web site using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE. This module does not require a valid SID, but if one is defined, it will be used. Works against Oracle 9.2, 10.1 ...

Exploits0
Metasploit
Metasploit
‱added 2011/03/21 1:23 a.m.‱45 views

Windows Gather USB Drive History

This module will enumerate USB Drive history on a target host. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather USB Drive History', 'Description' = %q This module will enumerate U...

7.3AI score
Exploits0
Metasploit
Metasploit
‱added 2011/03/02 10:18 a.m.‱45 views

SAP Management Console Instance Properties

This module simply attempts to identify the instance properties through the SAP Management Console SOAP Interface. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Management Console Instanc...

7AI score
Exploits0
Metasploit
Metasploit
‱added 2011/02/26 5:56 a.m.‱45 views

Windows Escalate Locked Desktop Unlocker

This module unlocks a locked Windows desktop by patching the respective code inside the LSASS.exe process. This patching process can result in the target system hanging or even rebooting, so be careful when using this module on production systems. This module requires Metasploit:...

7.1AI score
Exploits0
Metasploit
Metasploit
‱added 2010/07/07 2:48 p.m.‱45 views

Microsoft SQL Server Interesting Data Finder

This module will search the specified MSSQL server for 'interesting' columns and data. This module has been tested against the latest SQL Server 2019 docker container image 22/04/2021. This module requires Metasploit: https://metasploit.com/download Current source:...

8AI score
Exploits0
Metasploit
Metasploit
‱added 2010/02/14 8:27 p.m.‱45 views

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

This module abuses two flaws - a metacharacter injection vulnerability in the HTTP management server of RedHat 6.2 systems running the Piranha LVS cluster service and GUI rpm packages: piranha and piranha-gui. The vulnerability allows an authenticated attacker to execute arbitrary commands as the...

10CVSS8.4AI score0.73662EPSS
Exploits3
Metasploit
Metasploit
‱added 2010/02/08 12:39 a.m.‱45 views

Vermillion FTP Daemon PORT Command Memory Corruption

This module exploits an out-of-bounds array access in the Arcane Software Vermillion FTP server. By sending a specially crafted FTP PORT command, an attacker can corrupt stack memory and execute arbitrary code. This particular issue is caused by processing data bound by attacker controlled input...

0.6AI score
Exploits0
Metasploit
Metasploit
‱added 2009/11/24 7:11 a.m.‱45 views

MS03-046 Exchange 2000 XEXCH50 Heap Overflow

This is an exploit for the Exchange 2000 heap overflow. Due to the nature of the vulnerability, this exploit is not very reliable. This module has been tested against Exchange 2000 SP0 and SP3 running a Windows 2000 system patched to SP4. It normally takes between one and 100 connection attempts ...

7.5CVSS6.6AI score0.76388EPSS
Exploits5
Metasploit
Metasploit
‱added 2009/10/15 3:22 p.m.‱45 views

CA eTrust PestPatrol ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in CA eTrust PestPatrol. When sending an overly long string to the Initialize property of ppctl.dll 5.6.7.9 an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

9.3CVSS7.9AI score0.30619EPSS
Exploits3
Metasploit
Metasploit
‱added 2009/07/28 1:43 p.m.‱45 views

Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACE

This module exploits a sql injection flaw in the MERGEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. This module requires Metasploit: https://metasploit.com/download Current source:...

5.5CVSS7.5AI score0.4181EPSS
Exploits3
Metasploit
Metasploit
‱added 2009/04/13 2:33 p.m.‱45 views

Samba lsa_io_trans_names Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module uses the TALLOC chunk overwrite method credit Ramon and Adriano, which only works with Samba versions 3.0.21-3.0.24. Additionally, this module will not work when the Samba "log level" parameter is higher...

10CVSS7.6AI score0.77806EPSS
Exploits23
Metasploit
Metasploit
‱added 2008/09/15 6:50 p.m.‱45 views

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 184 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

7.4AI score
Exploits0
Metasploit
Metasploit
‱added 2007/07/11 9:16 p.m.‱45 views

SAP DB 7.4 WebTools Buffer Overflow

This module exploits a stack buffer overflow in SAP DB 7.4 WebTools. By sending an overly long GET request, it may be possible for an attacker to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

7.5CVSS7.9AI score0.70004EPSS
Exploits4
Metasploit
Metasploit
‱added 2007/05/18 4:19 a.m.‱45 views

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the ISAlertDataCOM ActiveX Control ISLAert.dll provided by Symantec Norton Internet Security 2004. By sending an overly long string to the "Get" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

10CVSS7.9AI score0.64441EPSS
Exploits3
Metasploit
Metasploit
‱added 2006/11/19 12:1 a.m.‱45 views

FreeBSD Remote NFS RPC Request Denial of Service

This module sends a specially-crafted NFS Mount request causing a kernel panic on host running FreeBSD 6.0. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FreeBSD Remote NFS RPC Request Denial...

7.8CVSS0.2AI score0.64373EPSS
Exploits2
Metasploit
Metasploit
‱added 2006/11/01 12:14 p.m.‱45 views

SIPfoundry sipXphone 2.6.0.27 CSeq Buffer Overflow

This module exploits a buffer overflow in SIPfoundry's sipXphone 2.6.0.27. By sending an overly long CSeq value, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the affected application. This module requires Metasploit:...

7.5CVSS8.2AI score0.66993EPSS
Exploits14
Metasploit
Metasploit
‱added 2006/08/15 2:49 a.m.‱45 views

Microsoft SRV.SYS Mailslot Write Corruption

This module triggers a kernel pool corruption bug in SRV.SYS. Each call to the mailslot write function results in a two byte return value being written into the response packet. The code which creates this packet fails to consider these two bytes in the allocation routine, resulting in a slow...

7.8CVSS7.5AI score0.75027EPSS
Exploits4
Metasploit
Metasploit
‱added 2006/06/15 3:30 p.m.‱45 views

MS06-025 Microsoft RRAS Service Overflow

This module exploits a stack buffer overflow in the Windows Routing and Remote Access Service. Since the service is hosted inside svchost.exe, a failed exploit attempt can cause other system services to fail as well. A valid username and password is required to exploit this flaw on Windows 2000...

7.5CVSS0.6AI score0.70144EPSS
Exploits18
Metasploit
Metasploit
‱added 2005/12/26 2:34 p.m.‱45 views

Icecast Header Overwrite

This module exploits a buffer overflow in the header parsing of icecast versions 2.0.1 and earlier, discovered by Luigi Auriemma. Sending 32 HTTP headers will cause a write one past the end of a pointer array. On win32 this happens to overwrite the saved instruction pointer, and on linux dependin...

7.5CVSS0.7AI score0.7827EPSS
Exploits5
Metasploit
Metasploit
‱added 2026/07/10 7:2 p.m.‱44 views

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

6.2AI score
Exploits0
Metasploit
Metasploit
‱added 2026/07/10 7:2 p.m.‱44 views

FTP Fetch

Fetch and execute an x86 payload from an FTP server. Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
‱added 2026/07/10 7:2 p.m.‱44 views

FTP Fetch, Reverse TCP Stager with UUID Support (Windows x64)

Fetch and execute an x64 payload from an FTP server. Connect back to the attacker with UUID Support Windows x64 Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
‱added 2022/09/08 7:49 p.m.‱44 views

Windows shellcode stage, Reverse Hop HTTP/HTTPS Stager

Custom shellcode stage. Tunnel communication over an HTTP or HTTPS hop point. Note that you must first upload data/hop/hop.php to the PHP server you wish to use as a hop. Module Options msf use payload/windows/custom/reversehophttp msf payloadreversehophttp show actions ...actions... msf...

7.1AI score
Exploits0
Metasploit
Metasploit
‱added 2022/09/08 7:49 p.m.‱44 views

Windows shellcode stage, Hidden Bind Ipknock TCP Stager

Custom shellcode stage. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The socket will appear as "closed," thu...

7.1AI score
Exploits0
Metasploit
Metasploit
‱added 2020/09/22 5:41 p.m.‱44 views

Jenkins CLI Deserialization

An unauthenticated Java object deserialization vulnerability exists in the CLI component for Jenkins versions v2.56 and below. The readFrom method within the Command class in the Jenkins CLI remoting component deserializes objects received from clients without first checking / sanitizing the data...

9.8CVSS8.6AI score0.99679EPSS
Exploits36
Metasploit
Metasploit
‱added 2019/10/27 4:25 p.m.‱44 views

Adobe ColdFusion RDS Authentication Bypass

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication using the RDS component. Due to default settings or misconfiguration, its password can be set to an empty value. This allows an attacker to create a session via the RDS login that can be carried over to th...

0.8AI score
Exploits0
Metasploit
Metasploit
‱added 2019/10/21 4:11 p.m.‱44 views

Nostromo Directory Traversal Remote Command Execution

This module exploits a remote command execution vulnerability in Nostromo 'Nostromo Directory Traversal Remote Command Execution', 'Description' = %q This module exploits a remote command execution vulnerability in Nostromo 'Quentin Kaiser ', metasploit module 'sp0re', original public exploit ,...

9.8CVSS10AI score0.99057EPSS
Exploits24
Metasploit
Metasploit
‱added 2018/08/19 6:10 p.m.‱44 views

Phpmyadmin credentials stealer

This module gathers Phpmyadmin creds from target linux machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Phpmyadmin credentials stealer', 'Description' = %q This module gathers Phpmyadmi...

0.1AI score
Exploits0
Metasploit
Metasploit
‱added 2018/08/10 8:45 p.m.‱44 views

Hashicorp Consul Remote Command Execution via Services API

This module exploits Hashicorp Consul's services API to gain remote command execution on Consul nodes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Hashicorp Consul Remote Command Execution...

7.5AI score
Exploits0
Metasploit
Metasploit
‱added 2018/07/30 7:25 p.m.‱44 views

Cisco ASA Directory Traversal

This module exploits a directory traversal vulnerability in Cisco's Adaptive Security Appliance ASA software and Firepower Threat Defense FTD software. It lists the contents of Cisco's VPN web service which includes directories, files, and currently logged in users. This module requires Metasploi...

7.5CVSS0.3AI score0.99903EPSS
Exploits18
Metasploit
Metasploit
‱added 2018/02/28 4:24 a.m.‱44 views

Memcached Stats Amplification Scanner

This module can be used to discover Memcached servers which expose the unrestricted UDP port 11211. A basic "stats" request is executed to check if an amplification attack is possible against a third party. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS7.2AI score0.88368EPSS
Exploits3
Total number of security vulnerabilities5000