The Rapid7 Exploit Database is an archive of Metasploit modules for publicly known exploits, 0days, remote exploits, shellcode, and more for researches and penetration testers to review. 3,000 plus modules are all available with relevant links to other technical documentation and source code. All of the modules included in the Exploit Database are also included in the Metasploit framework and utilized by our penetration testing tool, Metasploit Pro.
GitList v0.6.0 Argument Injection Vulnerability Exploit
Disclosed: April 26, 2018
This module exploits an argument injection vulnerability in GitList v0.6.0. The vulnerability arises from GitList improperly validating input using the php function 'escapeshellarg'.
Foxit PDF Reader Pointer Overwrite UAF Exploit
Disclosed: April 20, 2018
Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability in the Text Annotations component and the TypedArray's use uninitialized pointers. The vulnerabilities can be combined to leak a vtable memory address, which can be adjusted to point to the base address of the executable. A ROP chain can be c...
Oracle Weblogic Server Deserialization RCE Exploit
Disclosed: April 17, 2018
An unauthenticated attacker with network access to the Oracle Weblogic Server T3 interface can send a serialized object to the interface to execute code on vulnerable hosts.
Nagios XI Chained Remote Code Execution Exploit
Disclosed: April 17, 2018
This module exploits a few different vulnerabilities in Nagios XI 5.2.6-5.4.12 to gain remote root access. The steps are: 1. Issue a POST request to /nagiosql/admin/settings.php which sets the database user to root. 2. SQLi on /nagiosql/admin/helpedit.php allows us to enumerate API keys. 3. The API keys are ...
Metasploit msfd Remote Code Execution Exploit
Disclosed: April 11, 2018
Metasploit's msfd-service makes it possible to get a msfconsole-like interface over a TCP socket. If this socket is accessible on a remote interface, an attacker can execute commands on the victim's machine. If msfd is running with higher privileges than the current local user, this module can also be used for privilege ...
Metasploit msfd Remote Code Execution via Browser Exploit
Disclosed: April 11, 2018
Metasploit's msfd-service makes it possible to get a msfconsole-like interface over a TCP socket. This module connects to the msfd-socket through the victim's browser. To execute msfconsole-commands in JavaScript from a web application, this module places the payload in the POST-data. These POST-requests can be sen...
Drupal Drupalgeddon 2 Forms API Property Injection Exploit
Disclosed: March 28, 2018
This module exploits a Drupal property injection in the Forms API. Drupal 6.x, < 7.58, 8.2.x, < 8.3.9, < 8.4.6, and < 8.5.1 are vulnerable.
Mac OS X APFS Encrypted Volume Password Disclosure Exploit
Disclosed: March 21, 2018
This module exploits a flaw in OSX 10.13 through 10.13.3 that discloses the passwords of encrypted APFS volumes. In OSX a normal user can use the 'log' command to view the system logs. In OSX 10.13 to 10.13.2 when a user creates an encrypted APFS volume the password is visible in plaintext within these logs.
Etcd Keys API Information Gathering Exploit
Disclosed: March 16, 2018
This module queries the etcd API to recursively retrieve all of the stored key value pairs. Etcd by default does not utilize authentication.