Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #19944, adding dynamic session for module CVE-2025-0655 Update dtale_rce_cve_2025_0655.rb to use dynamically generated session	Mar 07, 2025	msutovsky-r7
Land #19935, SonicWall NSv HTTP Login Module Land #19935, SonicWall NSv HTTP Login Module	Mar 05, 2025	dledda-r7
Land #19899, D-Tale remote code execution module Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)	Mar 03, 2025	msutovsky-r7
Land #19879, Add MsDtypSecurityDescriptor to_sddl_text Land #19879, Add MsDtypSecurityDescriptor to_sddl_text	Feb 27, 2025	dledda-r7
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin	Feb 25, 2025	dledda-r7
Land #19894, SimpleHelp Path Traversal CVE-2024-57727 Land #19894, SimpleHelp Path Traversal CVE-2024-57727	Feb 25, 2025	dledda-r7

Title

Date

Author

Land #19944, adding dynamic session for module CVE-2025-0655 Update dtale_rce_cve_2025_0655.rb to use dynamically generated session

Mar 07, 2025

msutovsky-r7

Land #19935, SonicWall NSv HTTP Login Module Land #19935, SonicWall NSv HTTP Login Module

Mar 05, 2025

dledda-r7

Land #19899, D-Tale remote code execution module Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)

Mar 03, 2025

msutovsky-r7

Land #19879, Add MsDtypSecurityDescriptor to_sddl_text Land #19879, Add MsDtypSecurityDescriptor to_sddl_text

Feb 27, 2025

dledda-r7

Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin

Feb 25, 2025

dledda-r7

Land #19894, SimpleHelp Path Traversal CVE-2024-57727 Land #19894, SimpleHelp Path Traversal CVE-2024-57727

Feb 25, 2025

dledda-r7

Latest Pull Requests

Name	Labels	Author
Add a warning for MS08-068 when applicable	library , easy , rn-enhancement , usability	zeroSteiner
Update dtale_rce_cve_2025_0655.rb to use dynamically generated session	bug	Takahiro-Yoko
Skip reload lib for usage in a gem	rn-no-release-notes , attic	adfoster-r7
Update ubuntu versions for Github actions	rn-no-release-notes	adfoster-r7
include ERB::Util for html_escape	rn-fix	fabpiaf
SonicWall NSv HTTP Login Module	module , docs , rn-modules	msutovsky-r7

Name

Labels

Author

Add a warning for MS08-068 when applicable

library , easy , rn-enhancement , usability

zeroSteiner

Update dtale_rce_cve_2025_0655.rb to use dynamically generated session

bug

Takahiro-Yoko

Skip reload lib for usage in a gem

rn-no-release-notes , attic

adfoster-r7

Update ubuntu versions for Github actions

rn-no-release-notes

adfoster-r7

include ERB::Util for html_escape

rn-fix

fabpiaf

SonicWall NSv HTTP Login Module

module , docs , rn-modules

msutovsky-r7

Create a Pull Request

Recent Blog Posts

Thu Mar 06 2025

Metasploit Wrap-Up 03/06/2025

New module content (3) Get NAA Credentials Authors: skelsec, smashery, and xpn Type: Auxiliary Pull request: #19712 contributed by smashery Path: admin/sccm/get_naa_credentials Description: Adds an auxiliary module which perf...

Fri Feb 28 2025

Metasploit Weekly Wrap-Up: 02/28/2025

This week's Metasploit Weekly Wrap-Up saw 5 new modules. One module adds credential harvesting for MySCADA MyPro Manager using CVE-2025-24865 & CVE-2025-22896....

Fri Feb 21 2025

Metasploit Weekly Wrap-Up 02/21/2025

This Metasploit release includes an exploit module that chains two vulnerabilities; one exploited in the wild by APT groups, & a 0-day found by Rapid7....

View More Metasploit Blog Posts