The world’s most used penetration testing framework
Knowledge is power, especially when it’s shared. A collaboration between the open-source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.
Metasploit Recent Releases Jan 04, 2022 ( 4.21.0-2022010401 )
Improved
- Pro: We have updated Metasploit Pro to use the latest version of Log4j.
- PR 15831 – Established SSH connections can now leverage the pivoting capabilities of the
SshCommandShellBindsession type. - PR 15882 – This update prevents exploits from running a payload when the exploit drops files onto the target, and the payload doesn’t have the capability to clean those dropped files up. If users choose to bypass this protection they can override the setting by specifying
set AllowNoCleanup true
Fixed
- PR 15984 – This fixes a bug in the SNMP library which caused it to ignore version 1, despite specifically set options.
- PR 16003 – This fixes an issue with GitHub actions where the Ruby 3.1.0 version string is not yet being parsed correctly leading to automation failures
Modules
- PR 15961 – This adds the initial implementation of an LDAP server implemented in Rex and updates the existing log4shell scanner module to use it. It also provides a new example module
تعليقات
إرسال تعليق