Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19531 ProjectSend r1335 - r1605 RCE module	Nov 21, 2024	jheysel-r7
Land #19584 Judge0 sandbox escape CVE-2024-28185, CVE-2024-28189	Nov 20, 2024	jheysel-r7
Land #19593 Add exploit for CVE-2023-28324 (Unauthenticated RCE in Ivanti EPM) This exploits an unauthenticated RCE in Ivanti's EPM where a .NET remoting client can invoke a method that results in an OS command being executed in the context of NT AUTHORITY\SYSTEM.	Nov 20, 2024	jheysel-r7
Land #19557, Add Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module	Nov 12, 2024	bwatters-r7
Land #19518, Add support for RISC-V 32-bit / 64-bit Little Endian payloads	Nov 01, 2024	dwelch-r7
Land #19528, Add Python exec payload Add a python/exec payload to execute OS commands	Oct 31, 2024	bwatters-r7

Title

Date

Author

Land #19531 ProjectSend r1335 - r1605 RCE module

Nov 21, 2024

jheysel-r7

Land #19584 Judge0 sandbox escape CVE-2024-28185, CVE-2024-28189

Nov 20, 2024

jheysel-r7

Land #19593 Add exploit for CVE-2023-28324 (Unauthenticated RCE in Ivanti EPM) This exploits an unauthenticated RCE in Ivanti's EPM where a .NET remoting client can invoke a method that results in an OS command being executed in the context of NT AUTHORITY\SYSTEM.

Nov 20, 2024

jheysel-r7

Land #19557, Add Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module

Nov 12, 2024

bwatters-r7

Land #19518, Add support for RISC-V 32-bit / 64-bit Little Endian payloads

Nov 01, 2024

dwelch-r7

Land #19528, Add Python exec payload Add a python/exec payload to execute OS commands

Oct 31, 2024

bwatters-r7

Latest Pull Requests

Name	Labels	Author
Added mwalas-r7 to the mail map	rn-no-release-notes	mwalas-r7
Retest with connection pool changes		adfoster-r7
Fix failure in secrets dump edge case	module , bug , rn-fix	smashery
Remove connection pool patch		adfoster-r7
Load Readline without a conditional	rn-no-release-notes	sjanusz-r7
Fix IRB deadlock recursive locking on Ctrl+C	rn-no-release-notes	sjanusz-r7

Name

Labels

Author

Added mwalas-r7 to the mail map

rn-no-release-notes

mwalas-r7

Retest with connection pool changes

adfoster-r7

Fix failure in secrets dump edge case

module , bug , rn-fix

smashery

Remove connection pool patch

adfoster-r7

Load Readline without a conditional

rn-no-release-notes

sjanusz-r7

Fix IRB deadlock recursive locking on Ctrl+C

rn-no-release-notes

sjanusz-r7

Create a Pull Request

Recent Blog Posts

Fri Nov 22 2024

Metasploit Weekly Wrap-Up 11/22/2024

Metasploit added a login scanner for the TeamCity application to enable users to check for weak credentials. Learn more about this week's Metasploit Wrap-Up....

Fri Nov 15 2024