Lucene search
+L
MetasploitMost viewed

7296 matches found

Metasploit
Metasploit
•added 2018/12/24 8:3 a.m.•40 views

blueman set_dhcp_handler D-Bus Privilege Escalation

This module attempts to gain root privileges by exploiting a Python code injection vulnerability in blueman versions prior to 2.0.3. The org.blueman.Mechanism.EnableNetwork D-Bus interface exposes the setdhcphandler function which uses user input in a call to eval, without sanitization, resulting...

8.4CVSS8.3AI score0.0634EPSS
Exploits4
Metasploit
Metasploit
•added 2018/07/12 12:16 p.m.•40 views

IPTABLES rules removal

This module will be applied on a session connected to a shell. It will remove all IPTABLES rules. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IPTABLES rules removal', 'Description' = %q Thi...

0.1AI score
Exploits0
Metasploit
Metasploit
•added 2018/07/03 10:21 a.m.•40 views

Wordpress Arbitrary File Deletion

An arbitrary file deletion vulnerability in the WordPress core allows any user with privileges of an Author to completely take over the WordPress site and to execute arbitrary code on the server. This module requires Metasploit: https://metasploit.com/download Current source:...

0.8AI score
Exploits0
Metasploit
Metasploit
•added 2017/08/19 10:12 a.m.•40 views

R Command Shell, Bind TCP

Continually listen for a connection and spawn a command shell via R This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 125 include Msf::Payload::Single include Msf::Payload::R include...

7.2AI score
Exploits0
Metasploit
Metasploit
•added 2017/02/10 12:28 a.m.•40 views

Microsoft SQL Server Clr Stored Procedure Payload Execution

This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...

7.6AI score
Exploits0
Metasploit
Metasploit
•added 2016/11/07 5:45 p.m.•40 views

Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflow

Several Dlink routers contain a pre-authentication stack buffer overflow vulnerability, which is exposed on the LAN interface on port 80. This vulnerability affects the HNAP SOAP protocol, which accepts arbitrarily long strings into certain XML parameters and then copies them into the stack. This...

9.8CVSS9.7AI score0.79947EPSS
Exploits6
Metasploit
Metasploit
•added 2016/09/28 6:55 p.m.•40 views

MYSQL Directory Write Test

Enumerate writeable directories using the MySQL SELECT INTO DUMPFILE feature, for more information see the URL in the references. Note: For every writable directory found, a file with the specified FILENAME containing the text test will be written to the directory. This module requires Metasploit...

7AI score
Exploits0
Metasploit
Metasploit
•added 2016/09/07 12:22 a.m.•40 views

Hak5 WiFi Pineapple Preconfiguration Command Injection

This module exploits a login/csrf check bypass vulnerability on WiFi Pineapples version 2.0 'Hak5 WiFi Pineapple Preconfiguration Command Injection', 'Description' = %q This module exploits a login/csrf check bypass vulnerability on WiFi Pineapples version 2.0 'catatonicprime', 'License' =...

7.5CVSS0.4AI score0.36954EPSS
Exploits7
Metasploit
Metasploit
•added 2015/12/14 6:40 p.m.•40 views

Redis File Upload

This module can be used to leverage functionality exposed by Redis to achieve somewhat arbitrary file upload to a file and directory to which the user account running the redis instance has access. It is not totally arbitrary because the exact contents of the file cannot be completely controlled...

7.4AI score
Exploits0
Metasploit
Metasploit
•added 2015/12/03 4:11 a.m.•40 views

phpFileManager 0.9.8 Remote Code Execution

This module exploits a remote code execution vulnerability in phpFileManager 0.9.8 which is a filesystem management tool on a single file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

8.8CVSS7.9AI score0.27377EPSS
Exploits3
Metasploit
Metasploit
•added 2015/10/07 3:19 a.m.•40 views

HTTP Host Header Injection Detection

Checks if the host is vulnerable to Host header injection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Host Header Injection Detection', 'Description' = 'Checks if the host is vulnerabl...

7.5CVSS0.2AI score0.83614EPSS
Exploits7
Metasploit
Metasploit
•added 2015/07/20 5:13 p.m.•40 views

WordPress All-in-One Migration Export

This module allows you to export Wordpress data such as the database, plugins, themes, uploaded files, etc via the All-in-One Migration plugin without authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

7AI score
Exploits0
Metasploit
Metasploit
•added 2015/04/15 7:33 p.m.•40 views

BSD x64 Shell Bind TCP

Bind an arbitrary command to an arbitrary port This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 136 include Msf::Payload::Single include Msf::Payload::Bsd include...

0.1AI score
Exploits0
Metasploit
Metasploit
•added 2015/03/18 8:45 a.m.•40 views

TWiki Debugenableplugins Remote Code Execution

TWiki 4.0.x-6.0.0 contains a vulnerability in the Debug functionality. The value of the debugenableplugins parameter is used without proper sanitization in an Perl eval statement which allows remote code execution. This module requires Metasploit: https://metasploit.com/download Current source:...

9.1CVSS9.2AI score0.55637EPSS
Exploits12
Metasploit
Metasploit
•added 2015/02/22 4:20 p.m.•40 views

WordPress WPLMS Theme Privilege Escalation

The WordPress WPLMS theme from version 1.5.2 to 1.8.4.1 allows an authenticated user of any user level to set any system option due to a lack of validation in the importdata function of /includes/func.php. The module first changes the admin e-mail address to prevent any notifications being sent t...

6.9AI score
Exploits0
Metasploit
Metasploit
•added 2014/12/22 4:21 p.m.•40 views

Windows Meterpreter (Reflective Injection), Hidden Bind TCP Stager

Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Listen for a connection from a hidden port and spawn a command shell to the allowed host. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5AI score
Exploits0
Metasploit
Metasploit
•added 2014/11/19 4:9 p.m.•40 views

Send Cisco Discovery Protocol (CDP) Packets

This module sends Cisco Discovery Protocol CDP packets. Note that any responses to the CDP packets broadcast from this module will need to be analyzed with an external packet analysis tool, such as tcpdump or Wireshark in order to learn more about the Cisco switch and router environment. This...

0.2AI score
Exploits0
Metasploit
Metasploit
•added 2014/11/17 5:1 p.m.•40 views

UNIX Gather Remmina Credentials

Post module to obtain credentials saved for RDP and VNC from Remmina's configuration files. These are encrypted with 3DES using a 256-bit key generated by Remmina which is by design stored in relatively plain text in a file that must be properly protected. This module requires Metasploit:...

6.7AI score
Exploits0
Metasploit
Metasploit
•added 2014/10/12 2:33 a.m.•40 views

HP Data Protector EXEC_INTEGUTIL Remote Code Execution

This exploit abuses a vulnerability in the HP Data Protector. The vulnerability exists in the Backup client service, which listens by default on TCP/5555. The EXECINTEGUTIL request allows to execute arbitrary commands from a restricted directory. Since it includes a perl executable, it's possible...

7.7AI score
Exploits0
Metasploit
Metasploit
•added 2014/09/12 1:57 p.m.•40 views

Advantech WebAccess dvs.ocx GetColor Buffer Overflow

This module exploits a buffer overflow vulnerability in Advantec WebAccess. The vulnerability exists in the dvs.ocx ActiveX control, where a dangerous call to sprintf can be reached with user controlled data through the GetColor function. This module has been tested successfully on Windows XP SP3...

7.5CVSS7.4AI score0.61384EPSS
Exploits6
Metasploit
Metasploit
•added 2014/08/29 5:42 p.m.•40 views

Wing FTP Server Authenticated Command Execution

This module exploits the embedded Lua interpreter in the admin web interface for versions 3.0.0 and above. When supplying a specially crafted HTTP POST request an attacker can use os.execute to execute arbitrary system commands on the target with SYSTEM privileges. This module requires Metasploit...

7.7AI score
Exploits0
Metasploit
Metasploit
•added 2014/08/29 8:8 a.m.•40 views

Linux Gather NetworkManager 802-11-Wireless-Security Credentials

This module collects 802-11-Wireless-Security credentials such as Access-Point name and Pre-Shared-Key from Linux NetworkManager connection configuration files. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

7.1AI score
Exploits0
Metasploit
Metasploit
•added 2014/08/09 6:56 a.m.•40 views

VirtualBox 3D Acceleration Virtual Machine Escape

This module exploits a vulnerability in the 3D Acceleration support for VirtualBox. The vulnerability exists in the remote rendering of OpenGL-based 3D graphics. By sending a sequence of specially crafted rendering messages, a virtual machine can exploit an out of bounds array access to corrupt...

6.9CVSS6.9AI score0.08195EPSS
Exploits11
Metasploit
Metasploit
•added 2014/05/16 1:32 p.m.•40 views

Ubee DDW3611b Cable Modem Wifi Enumeration

This module will extract WEP keys and WPA preshared keys from certain Ubee cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubee DDW3611b Cable Modem Wifi Enumeration', 'Descriptio...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2014/03/26 6:48 p.m.•40 views

Linux Execute Command

A very small shellcode for executing commands. This module is sometimes helpful for testing purposes. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 52 includ...

7.4AI score
Exploits0
Metasploit
Metasploit
•added 2014/03/25 8:13 a.m.•40 views

Linux Execute Command

A very small shellcode for executing commands. This module is sometimes helpful for testing purposes as well as on targets with extremely limited buffer space. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source:...

7.6AI score
Exploits0
Metasploit
Metasploit
•added 2014/02/17 9:31 p.m.•40 views

Firefox Exec Shellcode from Privileged Javascript Shell

This module allows execution of native payloads from a privileged Firefox Javascript shell. It places the specified payload into memory, adds the necessary protection flags, and calls it, which can be useful for upgrading a Firefox javascript shell to a Meterpreter session without touching the...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2014/01/02 4:48 p.m.•40 views

Command Shell, Bind TCP (via Firefox XPCOM script)

Creates an interactive shell via Javascript with access to Firefox's XPCOM API This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include...

0.1AI score
Exploits0
Metasploit
Metasploit
•added 2014/01/02 4:48 p.m.•40 views

Command Shell, Reverse TCP (via Firefox XPCOM script)

Creates an interactive shell via Javascript with access to Firefox's XPCOM API This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include...

7.1AI score
Exploits0
Metasploit
Metasploit
•added 2013/10/30 3:25 p.m.•40 views

NAS4Free Arbitrary Remote Code Execution

NAS4Free allows an authenticated user to post PHP code to a special HTTP script and have the code executed remotely. This module was successfully tested against NAS4Free version 9.1.0.1.804. Earlier builds are likely to be vulnerable as well. This module requires Metasploit:...

6CVSS0.4AI score0.13729EPSS
Exploits5
Metasploit
Metasploit
•added 2013/09/16 6:38 p.m.•40 views

Command Shell, Reverse TCP (via nodejs)

Creates an interactive shell via nodejs This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework It would be better to have a commonjs payload, but because the implementations differ so greatly when it comes to require paths f...

0.4AI score
Exploits0
Metasploit
Metasploit
•added 2013/06/20 6:40 p.m.•40 views

Unix Command Shell, Reverse TCP (via Zsh)

Connect back and create a command shell via Zsh. Note: Although Zsh is often available, please be aware it isn't usually installed by default. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

0.3AI score
Exploits0
Metasploit
Metasploit
•added 2013/05/07 10:1 p.m.•40 views

SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution

This module abuses the SAP NetWeaver SXPGCALLSYSTEM function, on the SAP SOAP RFC Service, to execute remote commands. This module needs SAP credentials with privileges to use the /sap/bc/soap/rfc in order to work. The module has been tested successfully on Windows 2008 64-bit and Linux 64-bit...

10AI score
Exploits0
Metasploit
Metasploit
•added 2013/03/28 2:10 a.m.•40 views

MongoDB nativeHelper.apply Remote Code Execution

This module exploits the nativeHelper feature from spiderMonkey which allows remote code execution by calling it with specially crafted arguments. This module has been tested successfully on MongoDB 2.2.3 on Ubuntu 10.04 and Debian Squeeze. This module requires Metasploit:...

6CVSS7.9AI score0.44543EPSS
Exploits7
Metasploit
Metasploit
•added 2013/03/24 10:44 a.m.•40 views

D-Link DIR 645 Password Extractor

This module exploits an authentication bypass vulnerability in DIR 645 'D-Link DIR 645 Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in DIR 645 'OSVDB', '90733' , 'BID', '58231' , 'PACKETSTORM', '120591' , 'Author' = 'Roberto Paleari ',...

7.7AI score
Exploits0
Metasploit
Metasploit
•added 2013/03/18 9:16 p.m.•40 views

Sysax Multi-Server 6.10 SSHD Key Exchange Denial of Service

This module sends a specially-crafted SSH Key Exchange causing the service to crash. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sysax Multi-Server 6.10 SSHD Key Exchange Denial of Service'...

0.4AI score
Exploits0
Metasploit
Metasploit
•added 2012/12/26 11:28 p.m.•40 views

Windows Gather Spark IM Password Extraction

This module will enumerate passwords stored by the Spark IM client. The encryption key is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. This module requires Metasploit: https://metasploit.com/download Current source:...

0.2AI score
Exploits0
Metasploit
Metasploit
•added 2012/11/07 11:6 a.m.•40 views

SAPRouter Admin Request

Display the remote connection table from a SAPRouter. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, or is a port of a plugin available in the Onapsis Bizploit Opensource ERP...

7AI score
Exploits0
Metasploit
Metasploit
•added 2012/11/02 7:52 p.m.•40 views

Concrete5 Member List Enumeration

This module extracts username information from the Concrete5 member page This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Concrete5 Member List Enumeration', 'Description' = %q This module...

6.9AI score
Exploits0
Metasploit
Metasploit
•added 2012/09/10 10:42 p.m.•40 views

Apple iOS MobileSafari LibTIFF Buffer Overflow

This module exploits a buffer overflow in the version of libtiff shipped with firmware versions 1.00, 1.01, 1.02, and 1.1.1 of the Apple iPhone. iPhones which have not had the BSD tools installed will need to use a special payload. This module requires Metasploit: https://metasploit.com/download...

7.5CVSS0.3AI score0.53046EPSS
Exploits13
Metasploit
Metasploit
•added 2012/06/08 4:10 p.m.•40 views

Tom Sawyer Software GET Extension Factory Remote Code Execution

This module exploits a remote code execution vulnerability in the tsgetx71ex553.dll ActiveX control installed with Tom Sawyer GET Extension Factory due to an incorrect initialization under Internet Explorer. While the Tom Sawyer GET Extension Factory is installed with some versions of VMware...

9.3CVSS10AI score0.41956EPSS
Exploits9
Metasploit
Metasploit
•added 2012/06/08 4:3 a.m.•40 views

Sielco Sistemi Winlog Buffer Overflow 2.07.14 - 2.07.16

This module exploits a buffer overflow in Sielco Sistem Winlog 'Sielco Sistemi Winlog Buffer Overflow 2.07.14 - 2.07.16', 'Description' = %q This module exploits a buffer overflow in Sielco Sistem Winlog MSFLICENSE, 'Author' = 'Michael Messner ' , 'References' = 'BID', '53811', 'CVE', '2012-3815'...

9.3CVSS7.9AI score0.4434EPSS
Exploits2
Metasploit
Metasploit
•added 2012/05/19 7:53 p.m.•40 views

HP StorageWorks P4000 Virtual SAN Appliance Command Execution

This module exploits a vulnerability found in HP's StorageWorks P4000 VSA on versions prior to 9.5. By using a default account credential, it is possible to inject arbitrary commands as part of a ping request via port 13838. This module requires Metasploit: https://metasploit.com/download Current...

7.7CVSS0.7AI score0.47799EPSS
Exploits2
Metasploit
Metasploit
•added 2011/08/19 11:49 p.m.•40 views

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution

This module allows remote attackers to place arbitrary files on a users file system by abusing via Directory Traversal attack the "saveXML" method from the "XMLSimpleAccessor" class in the HP Easy Printer HPTicketMgr.dll ActiveX Control HPTicketMgr.dll 2.7.2.0. Code execution can be achieved by...

7.5CVSS1.1AI score0.7374EPSS
Exploits9
Metasploit
Metasploit
•added 2011/07/07 2:53 p.m.•40 views

OS X Gather Mac OS X System Information Enumeration

This module gathers basic system information from Mac OS X Tiger 10.4, through Mojave 10.14. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OS X Gather Mac OS X System Information Enumeration'...

7.1AI score
Exploits0
Metasploit
Metasploit
•added 2011/05/30 3:44 a.m.•40 views

Windows LoadLibrary Path

Load an arbitrary library path This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Executes a command on the target machine module MetasploitModule CachedSize = 202 include Msf::Payload::Windows::LoadLibrary end...

0.3AI score
Exploits0
Metasploit
Metasploit
•added 2011/03/03 8:51 p.m.•40 views

Citrix Access Gateway Command Execution

The Citrix Access Gateway provides support for multiple authentication types. When utilizing the external legacy NTLM authentication module known as ntlmauthenticator the Access Gateway spawns the Samba 'samedit' command line utility to verify a user's identity and password. By embedding shell...

9.3CVSS8.1AI score0.27795EPSS
Exploits7
Metasploit
Metasploit
•added 2011/01/25 1:2 p.m.•40 views

Windows Manage Local User Account Deletion

This module deletes a local user account from the specified server, or the local machine if no server is given. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Local User Account...

7.2AI score
Exploits0
Metasploit
Metasploit
•added 2011/01/24 10:14 p.m.•40 views

SMB Domain User Enumeration

Determine what domain users are logged into a remote system via a DCERPC to NetWkstaUserEnum. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Domain User Enumeration', 'Description' =...

7.3AI score
Exploits0
Metasploit
Metasploit
•added 2010/12/07 5:44 p.m.•40 views

Trixbox langChoice PHP Local File Inclusion

This module injects php into the trixbox session file and then, in a second call, evaluates that code by manipulating the langChoice parameter as described in OSVDB-50421. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

6.8CVSS10AI score0.20271EPSS
Exploits2
Total number of security vulnerabilities5000