infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Metasploit Framework
25,744 Commits
7 Branches
556 Tags
419 MiB
Ruby 97.9%
C 0.8%
Python 0.4%
HTML 0.2%
JavaScript 0.2%
Other 0.1%
 
 
 
 
 
 
Go to file
kaospunk 48359faaaf Add gitlab-shell command injection module 
This request adds a module for gitlab-shell command
injection for versions prior to 1.7.4. This has been
tested by installing version 7.1.1 on Ubuntu and then
using information at http://intelligentexploit.com/view-details.html?id=17746
to modify the version of gitlab-shell to a vulnerable one. This
was done as I could not find a better method for downloading
and deploying an older, vulnerable version of Gitlab.
 		2014-08-05 23:21:57 -04:00
config Add some friendlier defaults to database.yml 2013-04-19 15:43:25 -05:00
data Replace hpricot by nokogiri 2014-07-17 00:14:07 +02:00
db Uses new MDM version. A few versions were apparently skipped, so the 2013-07-17 11:46:08 -05:00
documentation Merge remote-tracking branch 'metasploit-framework/master' into masked-cred-format-update 2014-03-19 15:47:46 -05:00
external Fix the makefile to use the right directory 2014-08-03 13:38:15 -05:00
lib Hide icon flash on taskbar during cmd_psh_payload 2014-08-02 15:52:52 -05:00
modules Add gitlab-shell command injection module 2014-08-05 23:21:57 -04:00
plugins adds most rubocop cleanups, not all 2014-08-04 00:11:25 -05:00
scripts Merge branch 'upstream/master' into stop_abusing_expand_path 2014-03-11 23:13:39 +10:00
spec Land #2075, Powershell Improvements 2014-07-31 00:49:39 +01:00
test removes IDs/Revisions, resplats test/modules 2014-08-04 01:04:23 -05:00
tools Add NTP fuzzer from @jhart-r7 2014-07-21 12:38:12 -05:00
.gitignore Unignore .ruby-version 2014-07-17 11:30:26 -05:00
.gitmodules Add RDI submodule, port Kitrap0d 2013-11-27 16:04:41 +10:00
.mailmap Add @trosen-r7's alias for commits 2014-06-05 10:40:38 -05:00
.rspec Use Fivemat formatting for rspec 2013-10-08 12:50:28 -05:00
.rubocop.yml Ignore PercentLiteralDelimiters and WordArray 2014-07-30 10:28:12 -05:00
.rubocop_todo.yml Also remove the offenses from the todo 2014-07-30 10:30:58 -05:00
.ruby-gemset Remove gitignore, change to metasploit-framework 2013-09-13 12:44:19 -05:00
.ruby-version Update .ruby-version 2014-07-17 00:15:38 +02:00
.simplecov Better Rubymine compatibility for .simplecov 2013-01-18 11:12:16 -06:00
.travis.yml Travis shouldn't autofail msftidy fails... yet 2014-04-08 14:05:42 -05:00
.yardopts Add .plugins to yardoc'able directories. 2014-07-11 14:23:01 -05:00
CONTRIBUTING.md Add Rubocop to the Metasploit project 2014-07-15 10:43:08 -07:00
COPYING Rapid7 Comma Inc 2014-03-13 09:46:20 -05:00
Gemfile Land #3537 from @PagedeGeek, msfcrawler fix 2014-07-17 13:38:15 -05:00
Gemfile.local.example Add Gemfile.local.example 2014-06-18 14:55:03 -05:00
Gemfile.lock Land #3537 from @PagedeGeek, msfcrawler fix 2014-07-17 13:38:15 -05:00
HACKING Update link for The Metasploit Development Environment 2014-07-15 10:16:47 -05:00
LICENSE Add IE11SandboxEscapes source 2014-05-29 11:38:43 -05:00
README.md Encourage use of the installer for users. 2014-04-11 15:55:18 -05:00
Rakefile Update to metasploit_data_models 0.11.0 2013-05-09 13:25:26 -05:00
msfbinscan Modify msfbinscan help 2013-12-30 12:23:47 -06:00
msfcli Adds ability to load post modules in msfcli 2013-12-19 11:53:40 -06:00
msfconsole Removed SVN from msfupdate 2013-10-10 12:25:00 +00:00
msfd Retab all the things (except external/) 2013-09-30 13:47:53 -05:00
msfelfscan Add disasm option to msfelfscan 2013-12-26 16:26:45 -02:00
msfencode Remove a couple more instances of "shit" 2014-03-04 15:00:48 -06:00
msfmachscan Retab all the things (except external/) 2013-09-30 13:47:53 -05:00
msfpayload That one, too. 2014-03-04 14:38:25 -06:00
msfpescan Retab all the things (except external/) 2013-09-30 13:47:53 -05:00
msfrop Retab all the things (except external/) 2013-09-30 13:47:53 -05:00
msfrpc Retab all the things (except external/) 2013-09-30 13:47:53 -05:00
msfrpcd Retab all the things (except external/) 2013-09-30 13:47:53 -05:00
msfupdate Always use maybe_wait_and_exit in msfupdate 2013-11-15 17:26:21 -06:00
msfvenom fix typo in msfvenom 2014-03-31 14:55:59 -05:00

README.md

Metasploit Build Status Code Climate

The Metasploit Framework is released under a BSD-style license. See COPYING for more details.

The latest version of this software is available from http://metasploit.com/

Bug tracking and development information can be found at: https://dev.metasploit.com/redmine/projects/framework/

The public GitHub source repository can be found at: https://github.com/rapid7/metasploit-framework

Questions and suggestions can be sent to: msfdev(at)metasploit.com

The framework mailing list is the place to discuss features and ask for help. To subscribe, visit the following web page: https://mail.metasploit.com/mailman/listinfo/framework

The mailing list archives are available from: https://mail.metasploit.com/pipermail/framework/

Installing

Generally, you should use the free installer which contains all dependencies and will get you up and running with a few clicks. See the Dev Environment Setup if you'd like to deal with dependencies on your own.

Using Metasploit

Metasploit can do all sorts of things. The first thing you'll want to do is start msfconsole, but after that, you'll probably be best served by reading some of the great tutorials online:

Contributing

See the Dev Environment Setup guide on GitHub which will walk you through the whole process starting from installing all the dependencies, to cloning the repository, and finally to submitting a pull request. For slightly more info, see Contributing.