Lucene search
+L
MetasploitMost viewed

7296 matches found

Metasploit
Metasploit
•added 2014/07/11 3:30 p.m.•42 views

D-Link HNAP Request Remote Buffer Overflow

This module exploits an anonymous remote code execution vulnerability on different D-Link devices. The vulnerability is due to a stack based buffer overflow while handling malicious HTTP POST requests addressed to the HNAP handler. This module has been successfully tested on D-Link DIR-505 in an...

10CVSS0.4AI score0.76555EPSS
Exploits6
Metasploit
Metasploit
•added 2014/04/02 8:4 p.m.•42 views

HTTP Header Detection

This module shows HTTP Headers returned by the scanned systems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Header Detection', 'Description' = %q This module shows HTTP Headers returne...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2014/01/04 12:23 a.m.•42 views

Firefox XPCOM Execute Command

This module runs a shell command on the target OS without touching the disk. On Windows, this command will flash the command prompt momentarily. This can be avoided by setting WSCRIPT to true, which drops a jscript "launcher" to disk that hides the prompt. This module requires Metasploit:...

7.1AI score
Exploits0
Metasploit
Metasploit
•added 2013/12/20 3:45 p.m.•42 views

Synology DiskStation Manager SLICEUPLOAD Remote Command Execution

This module exploits a vulnerability found in Synology DiskStation Manager DSM versions 4.x, which allows the execution of arbitrary commands under root privileges. The vulnerability is located in /webman/imageSelector.cgi, which allows to append arbitrary data to a given file using a so called...

10CVSS7.5AI score0.84571EPSS
Exploits5
Metasploit
Metasploit
•added 2013/07/28 5:39 p.m.•42 views

Gather eCryptfs Metadata

This module will collect the contents of all users' .ecrypts directories on the targeted machine. Collected "wrapped-passphrase" files can be cracked with John the Ripper JtR to recover "mount passphrases". This module requires Metasploit: https://metasploit.com/download Current source:...

0.5AI score
Exploits0
Metasploit
Metasploit
•added 2013/04/18 7:34 p.m.•42 views

MediaWiki SVG XML Entity Expansion Remote File Access

This module attempts to read a remote file from the server using a vulnerability in the way MediaWiki handles SVG files. The vulnerability occurs while trying to expand external entities with the SYSTEM identifier. In order to work MediaWiki must be configured to accept upload of SVG files. If...

7AI score
Exploits0
Metasploit
Metasploit
•added 2013/02/03 8:6 p.m.•42 views

Ruby Command Shell, Reverse TCP SSL

Connect back and create a command shell via Ruby, uses SSL This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 444 include Msf::Payload::Single include Msf::Payload::Ruby include...

7.5AI score
Exploits0
Metasploit
Metasploit
•added 2012/11/27 5:29 p.m.•42 views

Network Shutdown Module (sort_values) Remote PHP Code Injection

This module exploits a vulnerability in Eaton Network Shutdown Module version 'Network Shutdown Module sortvalues Remote PHP Code Injection', 'Description' = %q This module exploits a vulnerability in Eaton Network Shutdown Module version 'h0ng10', original discovery, msf module 'sinn3r' PhpEXE s...

6.8AI score
Exploits0
Metasploit
Metasploit
•added 2012/09/14 2:54 p.m.•42 views

Oracle Business Transaction Management FlashTunnelService Remote Code Execution

This module exploits abuses the FlashTunnelService SOAP web service on Oracle Business Transaction Management 12.1.0.7 to upload arbitrary files, without authentication, using the WriteToFile method. The same method contains a directory traversal vulnerability, which allows to upload the files to...

8.1AI score
Exploits0
Metasploit
Metasploit
•added 2012/05/23 3:14 p.m.•42 views

OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow

This module exploits a vulnerability in OpenOffice 2.3.1 and 2.3.0 on Microsoft Windows XP SP3. By supplying a OLE file with a malformed DocumentSummaryInformation stream, an attacker can gain control of the execution flow, which results arbitrary code execution under the context of the user. Thi...

9.3CVSS0.5AI score0.57015EPSS
Exploits10
Metasploit
Metasploit
•added 2012/03/01 10:6 p.m.•42 views

VLC Media Player RealText Subtitle Overflow

This module exploits a stack buffer overflow vulnerability in VideoLAN VLC 'VLC Media Player RealText Subtitle Overflow', 'Description' = %q This module exploits a stack buffer overflow vulnerability in VideoLAN VLC MSFLICENSE, 'Author' = 'Tobias Klein', Vulnerability Discovery 'SkD', Exploit 'ju...

9.3CVSS0.1AI score0.41444EPSS
Exploits10
Metasploit
Metasploit
•added 2012/01/31 7:11 a.m.•42 views

PHP Command Shell, Bind TCP (via php) IPv6

Listen for a connection and spawn a command shell via php IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php inclu...

Exploits0
Metasploit
Metasploit
•added 2012/01/17 6:28 p.m.•42 views

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution

This module allows remote attackers to place arbitrary files on a users file system by abusing the "CacheDocumentXMLWithId" method from the "XMLCacheMgr" class in the HP Easy Printer HPTicketMgr.dll ActiveX Control HPTicketMgr.dll 2.7.2.0. Code execution can be achieved by first uploading the...

9.3CVSS0.7AI score0.40986EPSS
Exploits9
Metasploit
Metasploit
•added 2012/01/06 8:24 p.m.•42 views

Sybase Easerver 6.3 Directory Traversal

This module exploits a directory traversal vulnerability found in Sybase EAserver's Jetty webserver on port 8000. Code execution seems unlikely with EAserver's default configuration unless the web server allows WRITE permission. This module requires Metasploit: https://metasploit.com/download...

5CVSS0.63612EPSS
Exploits2
Metasploit
Metasploit
•added 2011/12/30 4:16 p.m.•42 views

CoCSoft StreamDown 6.8.0 Buffer Overflow

Stream Down 6.8.0 seh based buffer overflow triggered when processing the server response packet. During the overflow a structured exception handler is overwritten. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework clas...

6.8CVSS7.5AI score0.30074EPSS
Exploits6
Metasploit
Metasploit
•added 2011/12/14 6:27 a.m.•42 views

Unix Command Shell, Bind TCP (via Ruby) IPv6

Continually listen for a connection and spawn a command shell via Ruby This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 142 include Msf::Payload::Single include...

0.2AI score
Exploits0
Metasploit
Metasploit
•added 2011/10/18 11:34 p.m.•42 views

Multi Gather DNS Forward Lookup Bruteforce

Brute force subdomains and hostnames via wordlist. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather DNS Forward Lookup Bruteforce', 'Description' = %q Brute force subdomains and...

0.4AI score
Exploits0
Metasploit
Metasploit
•added 2011/10/11 12:38 a.m.•42 views

Windows Gather Meebo Password Extractor

This module extracts login account password stored by Meebo Notifier, a desktop version of Meebo's Online Messenger. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Meebo Passwor...

7AI score
Exploits0
Metasploit
Metasploit
•added 2011/07/28 10:39 p.m.•42 views

Multi Gather FileZilla FTP Client Credential Collection

This module will collect credentials from the FileZilla FTP client if it is installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Multi Gather FileZilla FTP Client...

7.1AI score
Exploits0
Metasploit
Metasploit
•added 2011/07/19 5:6 p.m.•42 views

Windows Gather Process Memory Grep

This module allows for searching the memory space of a process for potentially sensitive data. Please note: When the HEAP option is enabled, the module will have to migrate to the process you are grepping, and will not migrate back automatically. This means that if the user terminates the...

6.8AI score
Exploits0
Metasploit
Metasploit
•added 2011/07/17 3:1 p.m.•42 views

Iconics GENESIS32 Integer Overflow Version 9.21.201.01

The GenBroker service on port 38080 is affected by three integer overflow vulnerabilities while handling opcode 0x4b0, which is caused by abusing the the memory allocations needed for the number of elements passed by the client. This results unexpected behaviors such as direct registry calls,...

0.4AI score
Exploits0
Metasploit
Metasploit
•added 2011/03/23 3:37 a.m.•42 views

HP OpenView NNM nnmRptConfig nameParams Buffer Overflow

This module exploits a vulnerability in HP NNM's nnmRptConfig.exe. A remote user can send a long string data to the nameParams parameter via a POST request, which causes an overflow on the stack when function ov.sprintfnew is used, and gain arbitrary code execution.' This module requires...

10CVSS7.7AI score0.70111EPSS
Exploits4
Metasploit
Metasploit
•added 2011/01/11 2:2 a.m.•42 views

Windows Gather Logged On User Enumeration (Registry)

This module will enumerate current and recently logged on Windows users. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Logged On User Enumeration Registry', 'Description' = %q...

7AI score
Exploits0
Metasploit
Metasploit
•added 2011/01/07 12:28 a.m.•42 views

Multi Gather Generic Operating System Environment Settings

This module prints out the operating system environment variables. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Generic Operating System Environment Settings', 'Description' = %...

0.4AI score
Exploits0
Metasploit
Metasploit
•added 2010/12/11 11:36 p.m.•42 views

Cisco IOS SNMP Configuration Grabber (TFTP)

This module will download the startup or running configuration from a Cisco IOS device using SNMP and TFTP. A read-write SNMP community is required. The SNMP community scanner module can assist in identifying a read-write community. The target must be able to connect back to the Metasploit system...

0.1AI score
Exploits0
Metasploit
Metasploit
•added 2010/06/15 5:45 a.m.•42 views

Samba trans2open Overflow (*BSD x86)

This exploits the buffer overflow found in Samba versions 2.2.0 to 2.2.8. This particular module is capable of exploiting the flaw on x86 Linux systems that do not have the noexec stack option set. This module requires Metasploit: https://metasploit.com/download Current source:...

10CVSS7.7AI score0.84502EPSS
Exploits24
Metasploit
Metasploit
•added 2009/03/18 11:28 p.m.•42 views

Mac OS X mDNSResponder UPnP Location Overflow

This module exploits a buffer overflow that occurs when processing specially crafted requests set to mDNSResponder. All Mac OS X systems between version 10.4 and 10.4.9 without the 2007-005 patch are affected. This module requires Metasploit: https://metasploit.com/download Current source:...

9.4CVSS7.4AI score0.49999EPSS
Exploits2
Metasploit
Metasploit
•added 2009/03/17 1:24 a.m.•42 views

Orbit Downloader Connecting Log Creation Buffer Overflow

This module exploits a stack buffer overflow in Orbit Downloader 2.8.4. When an attacker serves up a malicious web site, arbitrary code may be executed. The PAYLOAD windows/shellbindtcp works best. This module requires Metasploit: https://metasploit.com/download Current source:...

9.3CVSS10AI score0.39984EPSS
Exploits8
Metasploit
Metasploit
•added 2009/01/05 5:18 a.m.•42 views

TrendMicro OfficeScanNT Listener Traversal Arbitrary File Access

This module tests for directory traversal vulnerability in the UpdateAgent function in the OfficeScanNT Listener TmListen.exe service in Trend Micro OfficeScan. This allows remote attackers to read arbitrary files as SYSTEM via dot dot sequences in an HTTP request. This module requires Metasploit...

5CVSS7.1AI score0.2014EPSS
Exploits2
Metasploit
Metasploit
•added 2008/11/20 3:42 a.m.•42 views

Unix Command Shell, Bind TCP (via Ruby)

Continually listen for a connection and spawn a command shell via Ruby This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 137 include Msf::Payload::Single include...

0.2AI score
Exploits0
Metasploit
Metasploit
•added 2008/09/30 1:32 p.m.•42 views

DATAC RealWin SCADA Server Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 Build 6.0.10.37. By sending a specially crafted FCINFOTAG/SETCONTROL packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...

10CVSS7.9AI score0.64828EPSS
Exploits8
Metasploit
Metasploit
•added 2008/09/15 6:51 p.m.•42 views

Linksys WRT54 Access Point apply.cgi Buffer Overflow

This module exploits a stack buffer overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers. According to iDefense who discovered this vulnerability, all WRT54G versions prior to 4.20.7 and all WRT54GS version prior to 1.05.2 may be affected. This module requires Metasploit:...

7.5CVSS7.4AI score0.70753EPSS
Exploits8
Metasploit
Metasploit
•added 2008/09/01 11:28 a.m.•42 views

EMC AlphaStor Device Manager Arbitrary Command Execution

EMC AlphaStor Device Manager is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

10CVSS7.3AI score0.35753EPSS
Exploits6
Metasploit
Metasploit
•added 2007/11/07 6:42 p.m.•42 views

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

This module exploits a stack buffer overflow in Mercury Mail Transport System 4.51. By sending a specially crafted argument to the AUTH CRAM-MD5 command, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS1.1AI score0.64513EPSS
Exploits8
Metasploit
Metasploit
•added 2006/10/27 2:25 p.m.•42 views

Novell eDirectory NDS Server Host Header Overflow

This module exploits a stack buffer overflow in Novell eDirectory 8.8.1. The web interface does not validate the length of the HTTP Host header prior to using the value of that header in an HTTP redirect. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS7.4AI score0.83891EPSS
Exploits11
Metasploit
Metasploit
•added 2006/09/08 6:35 p.m.•42 views

Symantec Remote Management Buffer Overflow

This module exploits a stack buffer overflow in Symantec Client Security 3.0.x. This module has only been tested against Symantec Client Security 3.0.2 build 10.0.2.2000. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewor...

10CVSS7.4AI score0.73558EPSS
Exploits7
Metasploit
Metasploit
•added 2006/01/18 3:43 p.m.•42 views

Polymorphic XOR Additive Feedback Encoder

This encoder implements a polymorphic XOR additive feedback encoder. The decoder stub is generated based on dynamic instruction substitution and dynamic block ordering. Registers are also selected dynamically. This module requires Metasploit: https://metasploit.com/download Current source:...

7AI score
Exploits0
Metasploit
Metasploit
•added 2005/12/26 2:34 p.m.•42 views

eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflow

This module exploits a stack buffer overflow in eDirectory 8.7.3 iMonitor service. This vulnerability was discovered by Peter Winter-Smith of NGSSoftware. NOTE: repeated exploitation attempts may cause eDirectory to crash. It does not restart automatically in a default installation. This module...

7.5CVSS7.4AI score0.55424EPSS
Exploits7
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch, Windows Command Shell, Bind IPv6 TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for an IPv6 connection Windows x86 Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch, Windows Upload/Execute, Reverse Ordinal TCP Stager (No NX or Win7)

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule includ...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch

Fetch and execute an x86 payload from an FTP server. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch, Windows Upload/Execute, Find Tag Ordinal Stager

Fetch and execute an x86 payload from an FTP server. Uploads an executable and runs it staged. Use an established connection Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch

Fetch and execute an x86 payload from an FTP server. Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2026/07/10 7:2 p.m.•41 views

FTP Fetch, Windows shellcode stage, Reverse Ordinal TCP Stager (No NX or Win7)

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Connect back to the attacker Module Options...

6.2AI score
Exploits0
Metasploit
Metasploit
•added 2021/03/18 5:41 p.m.•41 views

VMware View Planner Unauthenticated Log File Upload RCE

This module exploits an unauthenticated log file upload within the loguploadwsgi.py file of VMWare View Planner 4.6 prior to 4.6 Security Patch 1. Successful exploitation will result in RCE as the apache user inside the appacheServer Docker container. Module Options msf use...

9.8CVSS9.4AI score0.99005EPSS
Exploits9
Metasploit
Metasploit
•added 2019/09/04 5:18 a.m.•41 views

OpenEMR 5.0.1 Patch 6 SQLi Dump

This module exploits a SQLi vulnerability found in OpenEMR version 5.0.1 Patch 6 and lower. The vulnerability allows the contents of the entire database with exception of log and task tables to be extracted. This module saves each table as a .csv file in your loot directory and has been tested wi...

9.8CVSS9.5AI score0.1278EPSS
Exploits2
Metasploit
Metasploit
•added 2019/04/26 1:55 a.m.•41 views

GTP Echo Scanner

This module sends UDP GTP GTP-U echo requests to the target RHOSTS and reports on which ones respond, thus identifying General Packet Radio Service GPRS servers. This module does not support scanning with SCTP. This module requires Metasploit: https://metasploit.com/download Current source:...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2019/03/31 3:4 a.m.•42 views

APT Package Manager Persistence

This module will run a payload when the package manager is used. No handler is ran automatically so you must configure an appropriate exploit/multi/handler to connect. This module creates a pre-invoke hook for APT in apt.conf.d. The hook name syntax is numeric followed by text. This module requir...

6.9AI score
Exploits0
Metasploit
Metasploit
•added 2019/03/22 4:34 p.m.•41 views

Cisco RV130W Routers Management Interface Remote Command Execution

A vulnerability in the web-based management interface of the Cisco RV130W Wireless-N Multifunction VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based...

7.8AI score
Exploits0
Total number of security vulnerabilities5000