metasploit-framework

metasploit-framework copied to clipboard

auxiliary/scanner/http/phpmyadmin_login : URI not friendly

3

## Steps to reproduce 1. `use auxiliary/scanner/http/phpmyadmin_login` 2. Fill the different options. If you're using `LAMP`, your path to phpadmin should be `localhost/phpmyadmin`, so you set `TARGETURI` to `/phpmyadmin` 3....

RobinLanglois

Support Windows 11 in Capcom.sys LPE Module

6

I tested it on windows 11 22000.194 and it's not working, but when I use this one: https://github.com/tandasat/ExploitCapcom works perfectly, could someone update the version of metasploit please?

gabriel-maxx

Add row indicator to `show targets` command

1

## This PR cannot be merged until this [PR](https://github.com/rapid7/rex-text/pull/49) in rex-text is merged. This PR adds support for row indicators for `show targets` command. # Expected output  ## JSON...

cgranleese-r7

Native Windows Credential Extraction

4

## Summary Apparently, according to this wonderful [tweet](https://twitter.com/NinjaParanoid/status/1516442028963659777?s=20&t=-vjke0l-j2wM_f7aN4pzFQ), mimikatz is effectively redundant with native windows functionality invoked by `rundll32 keymgr.dll, KRShowKeyMgr` It would be great if we could leverage RG...

sempervictus

`directory?` method fails properly under certain circumstances but places 'nix command-shell session in a unusable state

2

I found this testing https://github.com/rapid7/metasploit-framework/pull/17385. To recreate the failure, get a shell session on a 'nix VM and run the module `post/test/file` module: ``` =[ metasploit v6.2.35-dev-07231a6a8e ] + --...

bwatters-r7

Why only android/meterpreter/reverse_https is slow and timing out ?

2

I am testing a connection between 2 android devices over the internet ( not Lan), and it works perfectly if i use `android/meterpreter/reverse_tcp`, but `android/meterpreter/reverse_https` is very slow and i...

legilimency31

Error running command download: Rex::TimeoutError Operation timed out.

1

I was downloading some files from an android cell phone, and after a certain time this error occurs, I remain connected to the cell phone, I can browse and execute...

baktian

Can't capture my android webcam (stdapi_webcam_start: Operation failed: 1) with meterpreter/reverse_tcp

1

## Steps to reproduce How'd you do it? 1. I started ngrok to make the payload work fine. 1. I used these commands to do the Android payload : `msfvenom...

TariCheck

Add documentation for Network Pivoting

1

This adds documentation for `Network Pivoting` under the `Pentesting` section.

cdelafuente-r7

Update cmdstager docs

2

While working with @Ayantaker on https://github.com/rapid7/metasploit-framework/pull/17116, I left this explanation for using cmdstagers: https://github.com/rapid7/metasploit-framework/pull/17094#issuecomment-1270496633 They said it was useful, and I was somewhat surprised that we did not talk about...

bwatters-r7