Metasploit Framework
 
 
 
 
 
 
Go to file
floyd 9d848c8c3b Adding tincd post-auth stack buffer overflow exploit module for several OS
Minor changes to comments

Updated URLs

Added Fedora ROP, cleaned up

Fixing URLs again, typos

Added support for Archlinux (new target)

Added support for OpenSuse (new target)

Tincd is now a separate file, uses the TCP mixin/REX sockets.

Started ARM exploiting

Style changes, improvements according to egyp7's comments

Style changes according to sane rubocop messages

RSA key length other than 256 supported. Different key lengths for client/server supported.

Drop location for binary can be customized

Refactoring: Replaced pop_inbuffer with slice

Refactoring: fail_with is called, renamed method to send_recv to match other protocol classes,
using rand_text_alpha instead of hardcoded \x90,

Fixed fail command usage

Version exploiting ARM with ASLR brute force

Cleaned up version with nicer program flow

More elegant solution for data too large for modulus

Minor changes in comments only (comment about firewalld)

Correct usage of the TCP mixin

Fixes module option so that the path to drop the binary on the server is not validated against the local filesystem

Added comments

Minor edits

Space removal at EOL according to msftidy
2014-11-10 12:03:17 +01:00
app turn nil publics and privates into blanks 2014-09-05 16:06:58 -05:00
config updating how we use cucumber to match lukes changes 2014-09-02 18:57:55 -05:00
data Add ppsx template 2014-10-16 17:55:22 -05:00
db Update schema with detected_arch 2014-09-18 12:35:09 -05:00
documentation Switch to Msf::OperatingSystems::Match::WINDOWS 2014-09-29 15:50:25 -05:00
external Add zsh completion definitions for utilities 2014-09-27 20:12:02 -04:00
features tagging the module tests as WIP since proxies keep showing up in options 2014-09-16 14:35:57 -05:00
lib Adding tincd post-auth stack buffer overflow exploit module for several OS 2014-11-10 12:03:17 +01:00
modules Adding tincd post-auth stack buffer overflow exploit module for several OS 2014-11-10 12:03:17 +01:00
plugins Land #3588, @tobd-r7's Fix SpaceBeforeModifierKeyword Rubocop warning 2014-08-04 14:25:03 -07:00
script rails generate cucumber:install 2014-08-27 14:10:04 -05:00
scripts Fully-qualify Msf::ServiceState 2014-10-17 11:58:11 -05:00
spec Land 3847, specs for Rex::Oui 2014-10-17 13:22:51 -05:00
test Fix up comment splats with the correct URI 2014-10-17 11:47:33 -05:00
tools Fix up comment splats with the correct URI 2014-10-17 11:47:33 -05:00
.gitignore Revert "Various merge resolutions from master <- staging" 2014-08-22 10:17:44 -05:00
.gitmodules Add RDI submodule, port Kitrap0d 2013-11-27 16:04:41 +10:00
.mailmap Add @trosen-r7's alias for commits 2014-06-05 10:40:38 -05:00
.rspec Add modern --require to .rspec 2014-10-08 10:55:40 -05:00
.rubocop.yml Enforce binary encoding on non-modules, no encoding on modules 2014-08-25 13:12:29 -07:00
.ruby-gemset Remove gitignore, change to metasploit-framework 2013-09-13 12:44:19 -05:00
.ruby-version Bump to p547 to fix a regression in p545 2014-05-30 14:27:54 -05:00
.simplecov Remove fastlib 2014-09-18 15:24:21 -05:00
.travis.yml fixing a merge error with travis.yml 2014-09-02 19:07:39 -05:00
.yardopts Revert "Various merge resolutions from master <- staging" 2014-08-22 10:17:44 -05:00
CONTRIBUTING.md Detypo CONTRIBUTING.md 2014-09-10 18:26:09 -05:00
COPYING Rapid7 Comma Inc 2014-03-13 09:46:20 -05:00
Gemfile Land #3373, recog 2014-10-03 18:05:58 -05:00
Gemfile.local.example Revert "Various merge resolutions from master <- staging" 2014-08-22 10:17:44 -05:00
Gemfile.lock Adding missing lock changes from #4030 2014-10-15 20:39:13 -05:00
HACKING Update link for The Metasploit Development Environment 2014-07-15 10:16:47 -05:00
LICENSE Remove fastlib 2014-09-18 15:24:21 -05:00
README.md Encourage use of the installer for users. 2014-04-11 15:55:18 -05:00
Rakefile Revert "Various merge resolutions from master <- staging" 2014-08-22 10:17:44 -05:00
metasploit-framework.gemspec Bump to meterpreter_bins 0.0.10 2014-10-15 19:36:48 -05:00
msfbinscan Remove fastlib 2014-09-18 15:24:21 -05:00
msfcli Update msfcli to use HasActions 2014-10-13 10:24:05 -05:00
msfconsole @wvu-r7 is a skilled negotiator. s/stdout/stderr/ 2014-10-17 13:13:44 -05:00
msfd Remove fastlib 2014-09-18 15:24:21 -05:00
msfelfscan Remove fastlib 2014-09-18 15:24:21 -05:00
msfencode Remove fastlib 2014-09-18 15:24:21 -05:00
msfmachscan Remove fastlib 2014-09-18 15:24:21 -05:00
msfpayload Delete Encoder possibility in msfpayload 2014-10-06 11:22:53 +02:00
msfpescan Remove fastlib 2014-09-18 15:24:21 -05:00
msfrop Remove fastlib 2014-09-18 15:24:21 -05:00
msfrpc Remove fastlib 2014-09-18 15:24:21 -05:00
msfrpcd Remove fastlib 2014-09-18 15:24:21 -05:00
msfupdate Always use maybe_wait_and_exit in msfupdate 2013-11-15 17:26:21 -06:00
msfvenom Merge branch 'master' into bug/MSP-11368/boot-profiling 2014-09-22 10:00:07 -05:00

README.md

Metasploit Build Status Code Climate

The Metasploit Framework is released under a BSD-style license. See COPYING for more details.

The latest version of this software is available from http://metasploit.com/

Bug tracking and development information can be found at: https://dev.metasploit.com/redmine/projects/framework/

The public GitHub source repository can be found at: https://github.com/rapid7/metasploit-framework

Questions and suggestions can be sent to: msfdev(at)metasploit.com

The framework mailing list is the place to discuss features and ask for help. To subscribe, visit the following web page: https://mail.metasploit.com/mailman/listinfo/framework

The mailing list archives are available from: https://mail.metasploit.com/pipermail/framework/

Installing

Generally, you should use the free installer which contains all dependencies and will get you up and running with a few clicks. See the Dev Environment Setup if you'd like to deal with dependencies on your own.

Using Metasploit

Metasploit can do all sorts of things. The first thing you'll want to do is start msfconsole, but after that, you'll probably be best served by reading some of the great tutorials online:

Contributing

See the Dev Environment Setup guide on GitHub which will walk you through the whole process starting from installing all the dependencies, to cloning the repository, and finally to submitting a pull request. For slightly more info, see Contributing.