Metasploit Framework
5689 matches across 16 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | tools/password/md5_lookup.rb | 132 | # This class is basically an auxiliary module without relying on msfconsole |
| MEDIUM | tools/password/vxmaster.rb | 112 | # Create the master password list output file |
| MEDIUM | tools/exploit/metasm_shell.rb | 15 | # This file is part of Metasm, the Ruby assembly manipulation suite |
| MEDIUM | tools/dev/hash_cracker_validator.rb | 347 | # Create a john pot tempfile used by the pot-mode tests |
| MEDIUM | tools/dev/detect_dead_reference_links.rb | 298 | # Create the final list of URLs and paths |
| MEDIUM | tools/dev/msftidy.rb | 372 | if @source =~ /^# This file is part of the Metasploit Framework and may be subject to/ |
| MEDIUM | tools/modules/payload_lengths.rb | 50 | # Create the payload instance |
| MEDIUM | test/functional/framework/msfconsole_spec.rb | 33 | ## Create a framework object |
| MEDIUM | test/functional/framework/msfconsole_spec.rb | 113 | ## Create the rspec Test Case |
| MEDIUM | test/functional/meterpreter/meterpreter_java_spec.rb | 65 | # Initialize the exploit instance |
| MEDIUM | test/functional/meterpreter/java_meterpreter_specs.rb | 3 | ## This file is intended to be used in conjunction with a harness, |
| MEDIUM | …st/functional/meterpreter/windows_meterpreter_specs.rb | 3 | ## This file is intended to be used in conjunction with a harness, |
| MEDIUM | test/functional/meterpreter/meterpreter_php_spec.rb | 56 | # Initialize the exploit instance |
| MEDIUM | test/functional/meterpreter/meterpreter_spec_helper.rb | 47 | # Create a new file and write to it |
| MEDIUM | test/functional/meterpreter/meterpreter_win32_spec.rb | 75 | # Initialize the exploit instance |
| MEDIUM | plugins/ffautoregen.rb | 11 | # This class implements a single edit command. |
| MEDIUM | plugins/ffautoregen.rb | 34 | # This method handles the command. |
| MEDIUM | plugins/wiki.rb | 24 | # This class implements a command dispatcher that provides commands to |
| MEDIUM | plugins/wiki.rb | 84 | # Create a table options hash |
| MEDIUM | plugins/wiki.rb | 483 | # The following methods are added here to keep the initialize method |
| MEDIUM | plugins/sample.rb | 14 | # This class implements a sample console command dispatcher. |
| MEDIUM | plugins/sample.rb | 37 | # This method handles the sample command. |
| MEDIUM | plugins/fzuse.rb | 80 | # This method handles the fzuse command. |
| MEDIUM | plugins/nexpose.rb | 495 | # Create a temporary site |
| MEDIUM | plugins/msgrpc.rb | 15 | # This class implements the msfd plugin interface. |
| MEDIUM | plugins/pcap_log.rb | 2 | # This file is part of the Metasploit Framework and may be subject to |
| MEDIUM | plugins/db_tracker.rb | 13 | # This class implements a socket communication tracker |
| MEDIUM | plugins/ips_filter.rb | 14 | # This class implements a socket communication logger |
| MEDIUM | plugins/socket_logger.rb | 12 | # This class implements a socket communication logger |
| MEDIUM | plugins/msfd.rb | 12 | # This class implements the msfd plugin interface. |
| MEDIUM | spec/lib/msf/core/mcp/tools/tool_helper_spec.rb | 6 | # Create a test class that includes the helper inside class << self, |
| MEDIUM | docs/build.rb | 541 | # Create a new branch based on the commits from https://github.com/rapid7/metasploit-framework/wiki to move |
| MEDIUM | docs/build.rb | 549 | # Create a new folder and branch in the old metasploit wiki for where we'd like it to be inside of the metasploi |
| MEDIUM | docs/build.rb | 556 | # Create a new folder to move the wiki contents into |
| MEDIUM | docs/build.rb | 560 | # Create a new branch + commit |
| MEDIUM | docs/build.rb | 567 | # Create a new branch that can be used to create a pull request |
| MEDIUM | scripts/meterpreter/event_manager.rb | 58 | # Create a hash to store the log info in (and throw default info in) |
| MEDIUM | scripts/meterpreter/event_manager.rb | 223 | # Create a directory for any local logging if the user desires |
| MEDIUM | scripts/meterpreter/packetrecorder.rb | 61 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/packetrecorder.rb | 68 | # Create the log directory |
| MEDIUM | scripts/meterpreter/netenum.rb | 32 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/netenum.rb | 35 | # Create the log directory |
| MEDIUM | scripts/meterpreter/vnc.rb | 94 | # Create the raw payload |
| MEDIUM | scripts/meterpreter/vnc.rb | 144 | # Create a host process |
| MEDIUM | scripts/meterpreter/process_memdump.rb | 93 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/process_memdump.rb | 95 | # Create the log directory |
| MEDIUM | scripts/meterpreter/winbf.rb | 135 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/winbf.rb | 138 | # Create the log directory |
| MEDIUM | scripts/meterpreter/virtualbox_sysenter_dos.rb | 50 | # Create a new thread on the shellcode pointer |
| MEDIUM | scripts/meterpreter/remotewinenum.rb | 29 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/remotewinenum.rb | 32 | # Create the log directory |
| MEDIUM | scripts/meterpreter/metsvc.rb | 63 | # Create the persistent VBS |
| MEDIUM | scripts/meterpreter/winenum.rb | 49 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/winenum.rb | 52 | # Create the log directory |
| MEDIUM | scripts/meterpreter/enum_firefox.rb | 19 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/enum_firefox.rb | 35 | # Create the log |
| MEDIUM | scripts/meterpreter/get_filezilla_creds.rb | 42 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/get_filezilla_creds.rb | 44 | # Create the log directory |
| MEDIUM | scripts/meterpreter/gettelnet.rb | 16 | # Create a directory for the logs |
| MEDIUM | scripts/meterpreter/gettelnet.rb | 19 | # Create the log directory |
| 830 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 61 | # - BROWSER_REMOTE_DEBUGGING_URL=http://host.docker.internal:9222/ |
| LOW | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 81 | # If you'd like to use Microsoft Azure OpenAI as your managed LLM service integration with Skyvern, use the environm |
| LOW | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 101 | # 4. In the Amazon Bedrock console, go to "Model Access" |
| LOW | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 121 | # - ENABLE_GROQ=true |
| LOW | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 161 | environment: {} |
| LOW | …ther/gladinet_storage_path_traversal_cve_2025_11371.md | 181 | filepath => Windows\System32\drivers\etc\hosts |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.md | 981 | |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.md | 1001 | # define('DBSSLKEY','/path/to/client.key'); |
| LOW | …xiliary/gather/gladinet_storage_access_ticket_forge.md | 301 | [*] Running automatic check ("set AutoCheck false" to disable) |
| LOW | …ation/modules/auxiliary/scanner/misc/clamav_control.md | 21 | # Default: no |
| LOW | …ation/modules/auxiliary/scanner/misc/clamav_control.md | 41 | # Default: 10M |
| LOW | tools/password/cpassword_decrypt.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/password/cpassword_decrypt.rb | 21 | # mubix (domain/dc enumeration code) |
| LOW | tools/password/md5_lookup.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/password/halflm_second.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/password/hmac_sha1_crack.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/password/vxmaster.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/hardware/elm327_relay.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/hardware/elm327_relay.rb | 361 | |
| LOW | tools/exploit/metasm_shell.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/exploit/virustotal.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/dev/find_and_replace_dead_reference_links.rb | 1 | ## |
| LOW | tools/dev/pre-commit-hook.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/dev/msftidy_docs.rb | 61 | # are usually style issues that may be okay for people who aren't core |
| LOW | tools/dev/hash_cracker_validator.rb | 221 | creds_command << ' creds add user:mysql_probe hash:445ff82636a7ba59 jtr:mysql;' |
| LOW | tools/dev/generate_mitre_attack_technique_constants.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/modules/missing_payload_tests.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/modules/module_commits.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/modules/verify_datastore.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/modules/file_pull_requests.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/modules/committer_count.rb | 1 | #!/usr/bin/env ruby |
| LOW | tools/recon/makeiplist.rb | 1 | #!/usr/bin/env ruby |
| LOW | app/concerns/mdm/workspace/boundary_range.rb | 1 | module Mdm::Workspace::BoundaryRange |
| LOW | test/kubernetes/lucee/Chart.yaml | 1 | apiVersion: v2 |
| LOW | test/kubernetes/lucee/values.yaml | 41 | # allowPrivilegeEscalation: false |
| LOW | test/kubernetes/lucee/values.yaml | 81 | # - secretName: chart-example-tls |
| LOW | test/kubernetes/secrets/Chart.yaml | 1 | apiVersion: v2 |
| LOW | test/kubernetes/thinkphp/Chart.yaml | 1 | apiVersion: v2 |
| LOW | test/kubernetes/thinkphp/values.yaml | 21 | serviceAccount: |
| LOW | test/kubernetes/thinkphp/values.yaml | 41 | # capabilities: |
| LOW | test/kubernetes/thinkphp/values.yaml | 81 | # - chart-example.local |
| LOW | plugins/ffautoregen.rb | 1 | module Msf |
| LOW | plugins/wiki.rb | 1 | ## |
| LOW | plugins/wiki.rb | 21 | |
| LOW | plugins/wiki.rb | 61 | # arguments to the wiki method with a wiki_type of 'mediawiki' |
| LOW | plugins/wiki.rb | 421 | end |
| LOW | plugins/lab.rb | 541 | # |
| LOW | plugins/sample.rb | 1 | module Msf |
| LOW | plugins/sample.rb | 61 | |
| LOW | plugins/msgrpc.rb | 1 | # |
| LOW | plugins/wmap.rb | 1 | # |
| LOW | plugins/wmap.rb | 21 | # @!attribute njobs |
| LOW | plugins/token_adduser.rb | 1 | # |
| LOW | plugins/request.rb | 201 | # @option opts [String] :auth_username An optional username to use with |
| LOW | plugins/request.rb | 221 | # @param opt_parser [Rex::Parser::Arguments] the argument parser for the |
| LOW | plugins/request.rb | 241 | # @option opts [String] :method The HTTP method to use in the request. |
| LOW | plugins/db_tracker.rb | 1 | module Msf |
| LOW | plugins/alias.rb | 221 | # Validate a proposed alias with the +name+ and having the value +value+ |
| LOW | plugins/alias.rb | 301 | ## Register the commands above |
| LOW | plugins/thread.rb | 81 | |
| 2599 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | …xploit/linux/http/lucee_admin_imgprocess_file_write.md | 86 | at lucee.runtime.type.util.StructSupport.invalidKey(StructSupport.java:67) |
| CRITICAL | …xploit/linux/http/lucee_admin_imgprocess_file_write.md | 125 | at lucee.runtime.type.util.StructSupport.invalidKey(StructSupport.java:67) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 105 | at com.vmware.vsan.client.services.ProxygenController.invokeService(ProxygenController.java:130) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 106 | at com.vmware.vsan.client.services.ProxygenController.invokeServiceWithJson(ProxygenController.java:64) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 111 | at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 112 | at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:133) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 113 | at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocable |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 114 | at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappin |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 115 | at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHand |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 116 | at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:85) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 117 | at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 118 | at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:901) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 119 | at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 120 | at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 122 | at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 125 | at org.eclipse.equinox.http.servlet.internal.registration.EndpointRegistration.service(EndpointRegistration.java:153) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 126 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:50) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 127 | at com.vmware.o6jia.context.web.filter.WelcomeFileFilter.doFilter(WelcomeFileFilter.java:48) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 129 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 130 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 131 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 133 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 134 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 135 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 137 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 138 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 139 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 141 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 142 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 143 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 145 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 146 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 147 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 149 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 150 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 151 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 153 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 154 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 155 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 157 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 158 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 159 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 161 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 162 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 163 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 165 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 166 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 167 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 169 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 170 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 171 | at com.vmware.vise.security.SessionManagementFilter.doFilter(SessionManagementFilter.java:219) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 172 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 174 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 175 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 176 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 178 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 179 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 180 | at com.vmware.o6jia.context.web.filter.ContextPathAwareDelegatingFilter.doFilter(ContextPathAwareDelegatingFilter.java: |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 182 | at org.eclipse.equinox.http.servlet.internal.registration.FilterRegistration.doFilter(FilterRegistration.java:121) |
| CRITICAL | …s/exploit/linux/http/vmware_vcenter_vsan_health_rce.md | 183 | at org.eclipse.equinox.http.servlet.internal.servlet.FilterChainImpl.doFilter(FilterChainImpl.java:45) |
| 65 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 62 | # ========================= |
| MEDIUM | …ules/exploit/linux/http/skyvern_ssti_cve_2025_49619.md | 64 | # ========================= |
| MEDIUM | …t/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.md | 25 | #------------------------------------------- |
| MEDIUM | …t/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.md | 28 | #------------------------------------------- |
| MEDIUM | …dules/auxiliary/gather/osticket_arbitrary_file_read.md | 965 | # ==================================================== |
| MEDIUM | …dules/auxiliary/gather/osticket_arbitrary_file_read.md | 984 | # --------------------------------------------------- |
| MEDIUM | …dules/auxiliary/gather/osticket_arbitrary_file_read.md | 1005 | # =================================================== |
| MEDIUM | plugins/openvas.rb | 210 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 212 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 123 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 125 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 153 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 155 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 268 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 270 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 407 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 409 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 430 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 432 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 452 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 454 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 539 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 541 | #-------------------------- |
| MEDIUM | plugins/openvas.rb | 564 | #------------------------------ |
| MEDIUM | plugins/openvas.rb | 566 | #------------------------------ |
| MEDIUM | plugins/besecure.rb | 75 | #-------------------------- |
| MEDIUM | plugins/besecure.rb | 77 | #-------------------------- |
| MEDIUM | plugins/besecure.rb | 163 | #-------------------------- |
| MEDIUM | plugins/besecure.rb | 165 | #-------------------------- |
| MEDIUM | plugins/besecure.rb | 321 | #------------------------------ |
| MEDIUM | plugins/besecure.rb | 323 | #------------------------------ |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 47 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 49 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 347 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 349 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 467 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 469 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 560 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 566 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 748 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 750 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 914 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 916 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 1023 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/vuln_attempt_registration_spec.rb | 1025 | # --------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 60 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 77 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 108 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 132 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 156 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 189 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 229 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 281 | # ------------------------------------------------------------------------- |
| MEDIUM | spec/lib/msf/core/exploit/remote/ms_icpr_spec.rb | 356 | # ------------------------------------------------------------------------- |
| MEDIUM | …ib/msf/core/exploit/remote/http/web_enrollment_spec.rb | 52 | # ------------------------------------------------------------------------- |
| MEDIUM | …ib/msf/core/exploit/remote/http/web_enrollment_spec.rb | 83 | # ------------------------------------------------------------------------- |
| MEDIUM | …ib/msf/core/exploit/remote/http/web_enrollment_spec.rb | 110 | # ------------------------------------------------------------------------- |
| MEDIUM | …ib/msf/core/exploit/remote/http/web_enrollment_spec.rb | 174 | # ------------------------------------------------------------------------- |
| MEDIUM | …ib/msf/core/exploit/remote/http/web_enrollment_spec.rb | 208 | # ------------------------------------------------------------------------- |
| MEDIUM | scripts/meterpreter/event_manager.rb | 10 | #------------------------------------------------------------------------------- |
| 291 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | tools/password/vxmaster.rb | 49 | def vxworks_pass_from_sum_refine(sum, bsum, pass) |
| LOW | tools/dev/find_release_notes.rb | 67 | def update_release_notes_entry(n) |
| LOW | tools/dev/find_release_notes.rb | 103 | def get_release_notes_from_module_name(n, input) |
| LOW | tools/dev/find_release_notes.rb | 111 | def get_release_notes_from_pr(n, pr) |
| LOW | tools/modules/file_pull_requests.rb | 90 | def get_pull_requests_from_commits(commits) |
| LOW | tools/modules/file_pull_requests.rb | 109 | def get_pull_request_from_commit(commit) |
| LOW | test/lib/regexr.rb | 30 | def find_strings_that_dont_exist_in_data(data, regexes = []) |
| LOW | test/lib/regexr.rb | 65 | def find_strings_that_exist_in_data_except(data, regexes = [], exceptions = []) |
| LOW | test/lib/msf_matchers.rb | 88 | def contain_no_failures_except(failures = [], exceptions = []) |
| LOW | test/functional/framework/msfconsole_spec.rb | 187 | def generate_java_meterpreter_session(input, output) |
| LOW | test/functional/framework/msfconsole_spec.rb | 191 | def generate_php_meterpreter_session(input, output) |
| LOW | test/functional/meterpreter/meterpreter_spec_helper.rb | 13 | def hlp_run_command_check_output(name, command, success_strings = [], fail_strings = [], fail_exception_strings |
| LOW | plugins/session_notifier.rb | 48 | def cmd_set_session_smtp_address(*args) |
| LOW | plugins/session_notifier.rb | 52 | def cmd_set_session_smtp_port(*args) |
| LOW | plugins/session_notifier.rb | 61 | def cmd_set_session_smtp_username(*args) |
| LOW | plugins/session_notifier.rb | 65 | def cmd_set_session_smtp_password(*args) |
| LOW | plugins/session_notifier.rb | 69 | def cmd_set_session_smtp_from(*args) |
| LOW | plugins/session_notifier.rb | 73 | def cmd_set_session_mobile_number(*args) |
| LOW | plugins/session_notifier.rb | 82 | def cmd_set_session_mobile_carrier(*args) |
| LOW | plugins/session_notifier.rb | 86 | def cmd_set_session_minimum_ip(*args) |
| LOW | plugins/session_notifier.rb | 97 | def cmd_set_session_maximum_ip(*args) |
| LOW | plugins/session_notifier.rb | 108 | def cmd_set_session_gotify_address(*args) |
| LOW | plugins/session_notifier.rb | 120 | def cmd_set_session_gotify_sslcert_path(*args) |
| LOW | plugins/session_notifier.rb | 131 | def cmd_set_session_dingtalk_webhook(*args) |
| LOW | plugins/session_notifier.rb | 142 | def cmd_set_session_serverjang_webhook(*args) |
| LOW | plugins/session_notifier.rb | 153 | def cmd_save_session_notifier_settings(*_args) |
| LOW | plugins/session_notifier.rb | 158 | def cmd_start_session_notifier(*_args) |
| LOW | plugins/session_notifier.rb | 192 | def cmd_stop_session_notifier(*_args) |
| LOW | plugins/session_notifier.rb | 197 | def cmd_restart_session_notifier(*args) |
| LOW | plugins/nessus.rb | 425 | def cmd_nessus_server_properties(*args) |
| LOW | plugins/nessus.rb | 709 | def cmd_nessus_report_host_details(*args) |
| LOW | plugins/nessus.rb | 776 | def cmd_nessus_report_download(*args) |
| LOW | plugins/nessus.rb | 808 | def cmd_nessus_report_host_ports(*args) |
| LOW | plugins/nessus.rb | 1106 | def cmd_nessus_db_scan_workspace(*args) |
| LOW | plugins/nessus.rb | 1231 | def cmd_nessus_scan_pause_all(*args) |
| LOW | plugins/nessus.rb | 1347 | def cmd_nessus_scan_resume_all(*args) |
| LOW | plugins/nessus.rb | 1518 | def cmd_nessus_scan_export_status(*args) |
| LOW | plugins/nessus.rb | 1625 | def cmd_nessus_plugin_details(*args) |
| LOW | plugins/payloads_manager.rb | 468 | def archived_payload_source_path(payload_path, context: nil, require_exists: true) |
| LOW | plugins/payloads_manager.rb | 485 | def fetch_to_archive_with_redirects(uri, requested_name = nil, limit = 5, max_size = MAX_FETCH_SIZE) |
| LOW | plugins/nexpose.rb | 240 | def cmd_nexpose_report_templates(*_args) |
| LOW | plugins/openvas.rb | 213 | def cmd_openvas_target_create(*args) |
| LOW | plugins/openvas.rb | 230 | def cmd_openvas_target_delete(*args) |
| LOW | plugins/openvas.rb | 392 | def cmd_openvas_task_resume_or_start(*args) |
| LOW | plugins/openvas.rb | 482 | def cmd_openvas_report_delete(*args) |
| LOW | plugins/openvas.rb | 498 | def cmd_openvas_report_download(*args) |
| LOW | plugins/openvas.rb | 520 | def cmd_openvas_report_import(*args) |
| LOW | plugins/aggregator.rb | 268 | def cmd_aggregator_cable_remove(*args) |
| LOW | plugins/aggregator.rb | 282 | def cmd_aggregator_session_park(*args) |
| LOW | plugins/aggregator.rb | 305 | def cmd_aggregator_default_forward(*_args) |
| LOW | plugins/aggregator.rb | 311 | def cmd_aggregator_session_forward(*args) |
| LOW | plugins/aggregator.rb | 333 | def cmd_aggregator_disconnect(*_args) |
| LOW | plugins/besecure.rb | 228 | def cmd_besecure_report_download(*args) |
| LOW | plugins/besecure.rb | 295 | def cmd_besecure_report_import(*args) |
| LOW | spec/acceptance/meterpreter_spec.rb | 166 | def get_file_attachment_contents(path) |
| LOW | spec/acceptance/command_shell_spec.rb | 168 | def get_file_attachment_contents(path) |
| LOW | …hared/contexts/msf/simple/framework/modules/loading.rb | 47 | def derive_ancestor_reference_names(options={}) |
| LOW | …hared/contexts/msf/simple/framework/modules/loading.rb | 84 | def expect_to_load_module_ancestor(options={}) |
| LOW | …hared/contexts/msf/simple/framework/modules/loading.rb | 106 | def expect_to_load_module_ancestors(options={}) |
| LOW | spec/support/matchers/match_table.rb | 22 | def with_whitespace_highlighted(string) |
| 794 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/modules/exploits/test/egghunter.rb | 76 | # just return otherwise |
| MEDIUM | test/functional/meterpreter/java_meterpreter_specs.rb | 3 | ## This file is intended to be used in conjunction with a harness, |
| MEDIUM | test/functional/meterpreter/java_meterpreter_specs.rb | 3 | ## This file is intended to be used in conjunction with a harness, |
| MEDIUM | …st/functional/meterpreter/windows_meterpreter_specs.rb | 3 | ## This file is intended to be used in conjunction with a harness, |
| MEDIUM | …st/functional/meterpreter/windows_meterpreter_specs.rb | 3 | ## This file is intended to be used in conjunction with a harness, |
| LOW | plugins/lab.rb | 103 | # then you are probably specifying a full path so let's just use normal file completion |
| LOW | plugins/alias.rb | 233 | # don't mess around, just return false in this case, prevents wasted processing |
| LOW | plugins/alias.rb | 245 | # don't mess around, just return false if we match |
| MEDIUM | spec/acceptance/mssql_spec.rb | 149 | # Run the given block in a 'test harness' which will handle all of the boilerplate for asserting module results, clean |
| MEDIUM | spec/acceptance/mysql_spec.rb | 125 | # Run the given block in a 'test harness' which will handle all of the boilerplate for asserting module results, clean |
| MEDIUM | spec/acceptance/postgres_spec.rb | 133 | # Run the given block in a 'test harness' which will handle all of the boilerplate for asserting module results, clean |
| MEDIUM | spec/acceptance/ldap_spec.rb | 150 | # Run the given block in a 'test harness' which will handle all of the boilerplate for asserting module results, clean |
| MEDIUM | spec/acceptance/smb_spec.rb | 133 | # Run the given block in a 'test harness' which will handle all of the boilerplate for asserting module results, clean |
| MEDIUM | spec/support/acceptance/countdown.rb | 3 | # A utility class which can be used in conjunction with Timeout mechanisms |
| MEDIUM | spec/support/matchers/query_the_database.rb | 9 | # * <tt>with</tt> - Used in conjunction with <tt>when_calling</tt> to pass parameters to the method to examine. |
| LOW | spec/lib/msf/core/rhosts_walker_spec.rb | 33 | # Slice the datastore options that we care about, ignoring other values that just add noise such as VERBOSE/WORKSP |
| MEDIUM | scripts/meterpreter/scraper.rb | 33 | # Some of this script was developed in conjunction with _MAX_ (max[at]remote-exploit.org) |
| MEDIUM | lib/msf/ui/console/module_action_commands.rb | 11 | # A mixin to enable the ModuleCommandDispatcher to leverage module ACTIONs as commands. |
| MEDIUM | lib/msf/ui/console/command_dispatcher/modules.rb | 1794 | # copying module names in conjunction with the `use <paste-buffer>` command |
| LOW | lib/msf/ui/console/command_dispatcher/common.rb | 102 | # For short lists, just set it directly |
| LOW | lib/msf/ui/console/command_dispatcher/session.rb | 238 | # then you are probably specifying a full path so let's just use normal file completion |
| LOW | lib/msf/ui/console/command_dispatcher/resource.rb | 92 | # then you are probably specifying a full path so let's just use normal file completion |
| LOW | lib/msf/ui/console/command_dispatcher/dns.rb | 95 | # Hard to auto-complete a rule with any meaningful value; just return |
| LOW | lib/msf/ui/console/command_dispatcher/db.rb | 324 | # help methods, just use it's "-h" so we don't have to recreating |
| MEDIUM | lib/msf/core/exploit.rb | 307 | # Allow all exploits to leverage context keyed encoding |
| LOW | lib/msf/core/payload_set.rb | 298 | # the payload set we simply create an instance of the class and do some |
| MEDIUM | lib/msf/core/exploit_event.rb | 4 | # notifications about events pertaining to exploitation. |
| MEDIUM | lib/msf/core/exploit/seh.rb | 9 | # robust fashion using the Rex::Exploitation::Seh class. |
| LOW | lib/msf/core/exploit/remote/tincd_exploit_client.rb | 246 | # modified decrypt routine, simply use the cipher as is. |
| LOW | lib/msf/core/exploit/remote/browser_autopwn2.rb | 76 | # again, it will just return whatever's been stored in the @browser_profile_prefix instance variable. |
| LOW | lib/msf/core/exploit/remote/socket_server.rb | 140 | # payload. In that case, just use the address of the interface |
| MEDIUM | lib/msf/core/exploit/remote/jndi_injection.rb | 4 | # This is a mixin containing methods to facilitate exploiting JNDI injection flaws (such as Log4Shell) by using a |
| LOW | lib/msf/core/exploit/remote/unirpc.rb | 50 | # so just use secure mode to cover all bases |
| LOW | lib/msf/core/exploit/remote/http_client.rb | 840 | # Otherwise just return the signature string for compatibility |
| LOW | lib/msf/core/exploit/remote/http_client.rb | 970 | # Otherwise just return the signature string for compatibility |
| MEDIUM | lib/msf/core/exploit/remote/telnet.rb | 82 | # This hash is defined in order help facilitate easy debug printing |
| LOW | lib/msf/core/exploit/remote/http/exchange.rb | 15 | # If we already built the exchange builds array, then just return it. |
| LOW | lib/msf/core/exploit/remote/http/exchange.rb | 147 | # If we reach here we couldn't find the Exchange Server version, so just return nil to indicate this. |
| LOW | lib/msf/core/post/file.rb | 910 | # just use append to finish the rest |
| LOW | lib/msf/core/post/windows/cli_parse.rb | 146 | if ma = /^error:.*/i.match(results) # if line starts with Error: just pass to regular parser |
| MEDIUM | lib/msf/core/post/windows/task_scheduler.rb | 97 | # elevate privileges if the session is not already running under |
| MEDIUM | lib/msf/core/post/windows/task_scheduler.rb | 138 | # elevate privileges if the session is not already running under |
| MEDIUM | lib/msf/core/post/windows/task_scheduler.rb | 214 | # will also try to elevate privileges if the session is not already |
| MEDIUM | lib/msf/core/module/platform.rb | 269 | # utilize this as a catch-all. |
| MEDIUM | lib/msf/core/payload/php.rb | 25 | # Canonicalize the list of disabled functions to facilitate choosing a |
| MEDIUM | lib/msf/core/payload/single.rb | 22 | # used in conjunction with a stager. When a stager is used, generate will |
| LOW | lib/msf/core/payload/linux/reverse_tcp_x86.rb | 102 | # If the lower byte will be the same, just set the upper byte |
| LOW | lib/msf/core/payload/windows/prepend_migrate.rb | 178 | # and so we can just set ebx to the size of the payload |
| LOW | lib/msf/core/payload/windows/prepend_migrate.rb | 352 | # and so we can just set r8 to the size of the payload |
| LOW | lib/msf/core/exe/segment_injector.rb | 196 | # if there is no entry point, just return after we bail or spawn shellcode |
| LOW | lib/msf/core/rpc/json/v1_0/rpc_command.rb | 112 | # modified; otherwise, the object will simply pass-through. |
| LOW | lib/msf/core/modules/loader/base.rb | 134 | # read_module_content is responsible for calling {#load_error}, so just return here. |
| MEDIUM | lib/msf/util/document_generator/document_normalizer.rb | 279 | !mod.kind_of?(Msf::Exploit::FILEFORMAT) && # Definitely not a file format |
| LOW | lib/msf/base/sessions/meterpreter.rb | 654 | # otherwise just use the base for the session type tied to this handler. |
| LOW | lib/msf/base/sessions/meterpreter.rb | 668 | # otherwise just use the base for the session type tied to this handler. |
| LOW | lib/rex/transformer.rb | 49 | # If the src instance's class is supported, just add it to the dst |
| LOW | …ex/post/hwbridge/ui/console/command_dispatcher/core.rb | 417 | [ # We can just use Meterpreters script path |
| LOW | lib/rex/post/meterpreter/client_core.rb | 117 | # binaries, we end up with a case where this fails. So here we just return the |
| LOW | …post/meterpreter/ui/console/command_dispatcher/kiwi.rb | 618 | # Otherwise, just add a blank value |
| MEDIUM | …erpreter/ui/console/command_dispatcher/priv/elevate.rb | 77 | # Attempt to elevate the meterpreter to that of local system. |
| 153 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | tools/dev/detect_dead_reference_links.rb | 101 | # Check if the URL is valid |
| LOW | test/ldap/samba-ad-setup.sh | 11 | # Check if samba is setup |
| LOW | plugins/nessus.rb | 309 | # Check if config file exists and load it |
| LOW | plugins/wmap.rb | 784 | # Check if an exclusion regex has been defined |
| LOW | scripts/meterpreter/process_memdump.rb | 111 | # Check if Allocated |
| LOW | scripts/meterpreter/virusscan_bypass.rb | 201 | # Set registry to run executable at startup |
| LOW | scripts/meterpreter/service_manager.rb | 60 | # Check if sufficient privileges are present for certain actions |
| LOW | scripts/meterpreter/hashdump.rb | 154 | #Check if hashes exist (if 20, then we've got a hash) |
| LOW | scripts/meterpreter/hostsedit.rb | 40 | #Set path to the hosts file |
| LOW | lib/msf/ui/console/driver.rb | 75 | # Check if files have been modified and force immediate loading if so |
| LOW | lib/msf/ui/console/driver.rb | 664 | # Check if we want to write the log to file |
| LOW | lib/msf/ui/console/driver.rb | 672 | # Check if we want to write the log file to a directory |
| LOW | lib/msf/ui/console/driver.rb | 680 | # Check if the subdirectory exists |
| LOW | lib/msf/ui/console/command_dispatcher.rb | 111 | # Check if the item is negative, as this will not always be a range |
| LOW | lib/msf/ui/console/command_dispatcher/auxiliary.rb | 64 | # Check if this is a scanner module or doesn't target remote hosts |
| LOW | lib/msf/ui/console/command_dispatcher/core.rb | 2237 | # Check if we need to append the default filename if user provided an output directory |
| LOW | lib/msf/ui/console/command_dispatcher/db.rb | 2302 | # Check if the stderr text includes 'root', this only happens if the scan requires root privileges |
| LOW | lib/msf/core/plugin_manager.rb | 77 | # Add it to the list of plugins |
| LOW | lib/msf/core/opt_meterpreter_debug_logging.rb | 48 | # Check if we log to rpath |
| LOW | lib/msf/core/exploit/laravel_crypto_killer.rb | 16 | # Check if cipher is valid |
| LOW | lib/msf/core/exploit/file_dropper.rb | 123 | # Check if file_rm method is available (local exploit, mixin support, module support) |
| LOW | lib/msf/core/exploit/file_dropper.rb | 135 | # Check if dir_rm method is available (local exploit, mixin support, module support) |
| LOW | lib/msf/core/exploit/file_dropper.rb | 278 | # Check if the path being removed is the same as the working directory |
| LOW | lib/msf/core/exploit/java.rb | 154 | # Check if the keystore exists from previous run. If it does, delete it. |
| LOW | lib/msf/core/exploit/remote/tincd_exploit_client.rb | 264 | # Check if we already received a newline, meaning we got an |
| LOW | lib/msf/core/exploit/remote/browser_autopwn2.rb | 689 | # Check if target is on our whitelist |
| LOW | …f/core/exploit/remote/http/gitlab/form/authenticate.rb | 32 | # Check if a valid gitlab cookie is returned |
| LOW | lib/msf/core/exploit/remote/http/wordpress/login.rb | 19 | # Check if a valid wordpress cookie is returned |
| LOW | …/remote/http/manage_engine_adaudit_plus/target_info.rb | 248 | # Check if the GPOWatcherData endpoint is available |
| LOW | …xploit/remote/http/manage_engine_adaudit_plus/login.rb | 49 | # Check if we have an initial adapcsrf cookie with the expected format |
| LOW | …xploit/remote/http/manage_engine_adaudit_plus/login.rb | 117 | # Check if we are actually logged in by visiting the home page. |
| LOW | lib/msf/core/exploit/remote/http/nagios_xi/login.rb | 124 | # Check if we are perhaps dealing with a Nagios XI app that hasn't been fully installed yet |
| LOW | lib/msf/core/exploit/remote/http/nagios_xi/login.rb | 236 | # Check if we need to sign the license agreement |
| LOW | lib/msf/core/post/hardware/zigbee/utils.rb | 53 | # Verify if a device has been specified. |
| LOW | lib/msf/core/post/hardware/zigbee/utils.rb | 156 | # Check if we are dealing with a beacon frame |
| LOW | lib/msf/core/post/windows/packrat.rb | 219 | # Check if the applications's base folder exists in user's directory on the remote computer. |
| LOW | lib/msf/core/post/windows/accounts.rb | 69 | # Check if host is an Active Directory domain controller |
| LOW | lib/msf/core/post/windows/services.rb | 288 | # Check if the specified Windows service exists. |
| LOW | lib/msf/core/module/failure.rb | 86 | # Check if RHOST is a valid IP address to avoid ActiveRecord issues on validation |
| LOW | lib/msf/core/module_manager/reloading.rb | 41 | # Check if the namespace module has a loader |
| LOW | lib/msf/core/payload/android.rb | 97 | # Set not_after to a random time 2~ years before the first bad date. |
| LOW | lib/msf/core/payload/windows/reverse_tcp.rb | 152 | # Check if a bind port was specified |
| LOW | lib/msf/core/payload/windows/prepend_migrate.rb | 105 | # Check if we can find block_api in the payload |
| LOW | lib/msf/core/payload/windows/prepend_migrate.rb | 282 | # Check if we can find block_api in the payload |
| LOW | lib/msf/core/mcp/rpc_manager.rb | 274 | # Check if the managed child process is still alive. |
| LOW | lib/msf/core/mcp/security/rate_limiter.rb | 20 | # Check if request is allowed, consume token if yes |
| LOW | lib/msf/core/db_manager/host.rb | 79 | # Set host_id to the ID of the host entry in the database that was found. |
| LOW | …eb_services/authentication/strategies/user_password.rb | 18 | # Check if request contains valid data and should be authenticated. |
| LOW | …re/web_services/authentication/strategies/api_token.rb | 8 | # Check if request contains valid data and should be authenticated. |
| LOW | lib/msf/core/auxiliary/auth_brute.rb | 298 | # Set noconn to indicate that in this case, each_user_pass |
| LOW | lib/msf/core/auxiliary/gladinet.rb | 34 | # Check if content contains a machineKey |
| LOW | lib/msf/core/auxiliary/gladinet.rb | 75 | # Check if target is a Gladinet CentreStack/Triofox installation |
| LOW | lib/msf/core/auxiliary/cnpilot.rb | 43 | # Check if App is Cambium cnPilot |
| LOW | lib/msf/core/auxiliary/epmp.rb | 43 | # Check if App is Cambium ePMP 1000 |
| LOW | lib/msf/util/exe/common.rb | 65 | # Check if it exists now |
| LOW | lib/msf/base/sessions/command_shell.rb | 421 | # Check if src exists |
| LOW | lib/msf/base/sessions/command_shell.rb | 431 | # Write file to local machine |
| LOW | …ex/post/hwbridge/ui/console/command_dispatcher/core.rb | 570 | # Insert the module into the list of extensions |
| LOW | lib/rex/post/meterpreter/packet.rb | 751 | # Insert it into the list of TLVs |
| LOW | …post/meterpreter/ui/console/command_dispatcher/core.rb | 1680 | # Insert the module into the list of extensions |
| 214 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …tion/modules/exploit/multi/http/wp_acf_extended_rce.md | 74 | --admin_email='admin@example.com' \ |
| LOW | …loit/multi/http/wp_king_addons_privilege_escalation.md | 85 | wp core install --path='/var/www/html' --url='http://localhost:5556' --title='Exploit Market' --admin_user='admin' --adm |
| LOW | …ion/modules/exploit/multi/http/wp_ai_engine_mcp_rce.md | 94 | docker exec wp-ai-engine-lab wp core install --path='/var/www/html' --url='http://localhost:5555' --title='Exploit Marke |
| LOW | …t/smb/shares/readonly/my_directory/accessible_file.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq |
| LOW | …t/smb/shares/readonly/my_directory/accessible_file.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq |
| LOW | …t/smb/shares/modifiable/recursive/admin_root/readme.md | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq |
| LOW | …t/smb/shares/modifiable/recursive/admin_root/readme.md | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliq |
| LOW | test/kubernetes/secrets/templates/dockerconfigjson.yaml | 8 | '{"auths":{"https://index.docker.io/v1/":{"username":"username","password":"password","email":"admin@example.com","a |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 19 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 19 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 58 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 58 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 81 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 81 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 104 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 104 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 130 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 130 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 156 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 156 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 182 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 182 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 207 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 207 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 232 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/lint/module_enforce_notes_spec.rb | 232 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …ubocop/cop/lint/module_disclosure_date_present_spec.rb | 19 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …ubocop/cop/lint/module_disclosure_date_present_spec.rb | 19 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …ubocop/cop/lint/module_disclosure_date_present_spec.rb | 40 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …ubocop/cop/lint/module_disclosure_date_present_spec.rb | 40 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 27 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 27 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 48 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 48 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 68 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 68 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 92 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 92 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 112 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | …rubocop/cop/lint/module_disclosure_date_format_spec.rb | 112 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 23 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 23 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 43 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 43 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 63 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 63 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 84 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 84 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 103 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 103 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 124 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 124 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 143 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 143 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 164 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 164 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 183 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 183 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 204 | 'Description' => 'Lorem ipsum dolor sit amet', |
| LOW | spec/rubocop/cop/layout/module_hash_on_new_line_spec.rb | 204 | 'Description' => 'Lorem ipsum dolor sit amet', |
| 63 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | lib/msf/core/exploit/remote/http_client.rb | 856 | # This section handles a few simple cases of pattern matching and service |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 409 | # Step 1: fetch the available applications / servers from the Admin server |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 509 | # Step 2: get the current app server configuration variables, such as the current auth method used |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 519 | # Step 3: start the fake CAM server / exploit server |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 539 | # Step 4: send the server config update packet, and ignore what it sends back |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 546 | # Step 5: send the CAM auth request and obtain the authentication object |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 594 | # Step 6: create a Process object |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 628 | # Step 7: add the commands into the process object |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 635 | # Step 8: register the Process object with a random name |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 640 | # Step 9: execute the Process! |
| LOW | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 645 | # Step 10: restore the auth method and enjoy the shell! |
| LOW | …les/exploits/multi/browser/firefox_webidl_injection.rb | 116 | // Step 2: load the chrome-level window up with a data URI, which |
| LOW | …xploits/multi/http/opmanager_sumpdu_deserialization.rb | 146 | # Step 1: Establish a valid HTTP session |
| LOW | …xploits/multi/http/opmanager_sumpdu_deserialization.rb | 174 | # Step 2: Add the requestHandler to the HTTP session |
| LOW | …xploits/multi/http/opmanager_sumpdu_deserialization.rb | 192 | # Step 3: Exploit the deserialization vulnerability to run commands |
| LOW | …ts/multi/http/oracle_ebs_cve_2025_61882_exploit_rce.rb | 180 | # Step 1 : Start HTTP server for XSL file serving |
| LOW | …ts/multi/http/oracle_ebs_cve_2025_61882_exploit_rce.rb | 194 | # Step 2: Get CSRF token |
| LOW | …ts/multi/http/oracle_ebs_cve_2025_61882_exploit_rce.rb | 202 | # Step 3: Smuggle payload |
| LOW | …ts/multi/http/oracle_ebs_cve_2025_61882_exploit_rce.rb | 208 | # Step 4: Send exploit request |
| LOW | …ts/multi/http/oracle_ebs_cve_2025_61882_exploit_rce.rb | 212 | # Step 5: Wait for XSLT file download |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 59 | # Step 1: Retrieve PHPSESSID |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 80 | # Step 2: Attempt File Upload |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 106 | # Step 3: Verify File in Directory Listing |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 129 | # Step 1: Detect the OS |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 154 | # Step 2: Retrieve the actual uploaded filename |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 171 | # Step 3: Execute the detection script |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 183 | # Step 4: Choose payload based on OS |
| LOW | …dules/exploits/multi/http/clinic_pms_fileupload_rce.rb | 192 | # Step 5: Upload the payload |
| LOW | …ploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb | 531 | # Step 0: Setup heap |
| LOW | …ploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb | 534 | # Step 1: Reverse FL order |
| LOW | …ploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb | 537 | # Step 2: Put fake pointer and make FL order back to normal |
| LOW | …ploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb | 540 | # Step 3: Trigger overflow |
| LOW | …ploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb | 543 | # Step 4: Allocate at arbitrary address and change zend_mm_heap |
| LOW | …s/linux/http/optergy_bms_backdoor_rce_cve_2019_7276.rb | 87 | # Step 1: get the challenge and compute the response answer for the backdoor execution |
| LOW | …s/linux/http/optergy_bms_backdoor_rce_cve_2019_7276.rb | 109 | # Step 2: execute payload (RCE) using the backdoor and challenge response obtained from step 1. |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 88 | # Step 1: Prepare payload |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 94 | # Step 2: Prepare entrypoint script (loops indefinitely) |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 115 | # Step 3: Pull Alpine image |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 118 | # Step 4: Create a temporary container (stopped) to copy files in |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 137 | # Step 5: Start container with internal entrypoint |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 141 | # Step 6: Add cleanup commands for RC |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 146 | # Step 7: Clean up host temp files |
| LOW | modules/exploits/linux/persistence/docker_image.rb | 150 | # Step 8: Stop tmp image |
| LOW | …indows/local/cve_2020_0787_bits_arbitrary_file_move.rb | 196 | # Step 1: Check target environment is correct. |
| LOW | …indows/local/cve_2020_0787_bits_arbitrary_file_move.rb | 206 | # Step 2: Generate the malicious DLL and upload it to a temp location. |
| LOW | …indows/local/cve_2020_0787_bits_arbitrary_file_move.rb | 227 | # Step 3: Load the main DLL that will trigger the exploit and conduct the arbitrary file copy. |
| LOW | …indows/local/cve_2020_0787_bits_arbitrary_file_move.rb | 242 | # Step 4: Execute `usoclient StartInteractiveScan` to trigger the payload |
| LOW | …/exploits/windows/local/cve_2022_26904_superprofile.rb | 195 | # Step 1: Check target environment is correct. |
| LOW | …/exploits/windows/local/cve_2022_26904_superprofile.rb | 202 | # Step 2: Generate the malicious DLL and upload it to a temp location. |
| LOW | …/exploits/windows/local/cve_2022_26904_superprofile.rb | 218 | # Step 3: Load the main DLL that will trigger the exploit and conduct the arbitrary file copy. |
| LOW | modules/exploits/windows/smb/ms17_010_eternalblue.rb | 1180 | # Step 0: pre-calculate what we can |
| LOW | modules/exploits/windows/smb/ms17_010_eternalblue.rb | 1185 | # Step 1: Connect to IPC$ share |
| LOW | modules/exploits/windows/smb/ms17_010_eternalblue.rb | 1215 | # Step 2: Create a large SMB1 buffer |
| LOW | modules/exploits/windows/smb/ms17_010_eternalblue.rb | 1219 | # Step 3: Groom the pool with payload packets, and open/close SMB1 packets |
| LOW | modules/exploits/windows/smb/ms17_010_eternalblue.rb | 1256 | # Step 4: Send the payload |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.rb | 123 | # Step 1: Login |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.rb | 132 | # Step 2: Locate or create ticket |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.rb | 150 | # Step 3: Generate and submit payload |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.rb | 164 | # Step 4: Download PDF |
| LOW | …dules/auxiliary/gather/osticket_arbitrary_file_read.rb | 172 | # Step 5: Extract file from PDF |
| 1 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | documentation/modules/auxiliary/gather/leakix_search.md | 22 | 1. Do: `set LEAKIX_APIKEY <your-api-key>` |
| HIGH | …t/meterpreter/ui/console/command_dispatcher/android.rb | 587 | print_error("e.g. wlan_geolocate -a YOUR_API_KEY") |
| HIGH | data/wordlists/flask_secret_keys.txt | 11643 | ENTER-YOUR-API-KEY-HERE |
| HIGH | data/wordlists/flask_secret_keys.txt | 31031 | your_api_key |
| HIGH | data/wordlists/flask_secret_keys.txt | 31032 | yourapikey |
| HIGH | data/wordlists/flask_secret_keys.txt | 31035 | <YOUR_API_KEY> |
| HIGH | data/wordlists/flask_secret_keys.txt | 31035 | <YOUR_API_KEY> |
| HIGH | data/wordlists/flask_secret_keys.txt | 31036 | {{YOURAPIKEY}} |
| HIGH | data/wordlists/flask_secret_keys.txt | 31038 | YOUR_API_KEY |
| HIGH | data/wordlists/flask_secret_keys.txt | 31043 | YOUR-API-KEY-HERE |
| HIGH | data/wordlists/flask_secret_keys.txt | 31172 | <YOUR-SECRET-HERE> |
| HIGH | data/wordlists/flask_secret_keys.txt | 31174 | YOUR-SECRET-HERE |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | tools/hardware/killerbee_msfrelay.py | 88 | except Exception as e: |
| LOW | lib/msf/core/exploit/remote/http/splunk/helpers.rb | 67 | except Exception as e: |
| LOW | …re/modules/external/python/metasploit/login_scanner.py | 37 | except Exception as e: |
| LOW | …re/modules/external/python/metasploit/probe_scanner.py | 49 | except Exception as e: |
| LOW | …re/modules/external/python/metasploit/probe_scanner.py | 96 | except Exception: |
| MEDIUM | lib/telephony/modem.rb | 43 | print("Error opening serial port #{@serialport} : #{e.class} #{e} #{e.backtrace}\r\n") |
| MEDIUM | lib/telephony/modem.rb | 66 | print("Error sending command to modem: #{e.class} #{e} #{e.backtrace}\r\n") |
| MEDIUM | lib/telephony/modem.rb | 97 | print("Error reading from modem: #{e.class} #{e} #{e.backtrace}\r\n") |
| MEDIUM | lib/telephony/modem.rb | 118 | print( "Error switching to command state: FAILED\r\n" ) |
| MEDIUM | lib/telephony/modem.rb | 134 | print( "Error switching to data state: FAILED\r\n" ) |
| LOW | modules/auxiliary/gather/office365userenum.py | 169 | except Exception as e: |
| LOW | modules/auxiliary/gather/office365userenum.py | 218 | except Exception as e: |
| LOW | modules/auxiliary/gather/mikrotik_winbox_fileread.py | 128 | except Exception as e: |
| LOW | modules/auxiliary/gather/mikrotik_winbox_fileread.py | 140 | except Exception as e: |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 100 | except Exception as e: |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 156 | except Exception as e: |
| MEDIUM | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 89 | def get_rsa_from_server(target, timeout=5): |
| MEDIUM | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 133 | def oracle(target, pms, cke_2nd_prefix, cipher_handshake=ch_def, messageflow=Fal |
| LOW | modules/auxiliary/scanner/http/rdp_web_login.py | 107 | except Exception as exc: |
| MEDIUM | modules/auxiliary/scanner/http/rdp_web_login.py | 68 | def parse_ntlm_t1(message): |
| LOW | modules/auxiliary/scanner/http/rpyc_rce.py | 54 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 147 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 169 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 187 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 207 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 256 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/_msf_impacket.py | 51 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/_msf_impacket.py | 75 | except Exception as e: |
| LOW | modules/auxiliary/scanner/smb/impacket/_msf_impacket.py | 96 | except Exception as e: |
| MEDIUM | modules/auxiliary/scanner/smb/impacket/_msf_impacket.py | 42 | def do_get(self, src_path): |
| MEDIUM | modules/auxiliary/scanner/smb/impacket/_msf_impacket.py | 56 | def do_put(self, s): |
| LOW | data/exploits/CVE-2026-31431/CVE-2026-31431.py | 31 | except Exception: |
| LOW | data/exploits/CVE-2026-31431/CVE-2026-31431.py | 209 | except Exception as e: |
| LOW | data/exploits/CVE-2026-31431/CVE-2026-31431.py | 235 | except Exception as e: |
| LOW | data/exploits/CVE-2026-31431/CVE-2026-31431.py | 286 | except Exception as e: |
| LOW | data/exploits/CVE-2021-38648/cve_2021_38648.py | 22 | except Exception: |
| LOW | …ware_view_planner_4_6_uploadlog_rce/log_upload_wsgi.py | 90 | except Exception as e: |
| MEDIUM | data/exploits/CVE-2023-4911/cve_2023_4911.py | 253 | print("Error: %s" % error_msg) |
| LOW | data/exploits/CVE-2025-60787/sign_request.py | 82 | except Exception as e: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | lib/net/dns/question.rb | 37 | # To obtain the binary data from a question object you can use |
| MEDIUM | lib/msf/core/exploit/laravel_crypto_killer.rb | 9 | # The tool requires a valid `APP_KEY` to be used, you can also try to bruteforce them if you think there is a potential |
| LOW | lib/msf/core/exploit/remote/http_server/html.rb | 117 | # writing style, so make sure you have the following before using: |
| MEDIUM | lib/msf/core/post/linux/f5_mcp.rb | 19 | # If you're just reading data, you can use `mcp_simple_query()` to build |
| MEDIUM | external/source/exploits/CVE-2019-2215/poc.c | 355 | // clear the TIF_SECCOMP flag and everything else :P (feel free to modify this to just clear the single flag) |
| LOW | modules/exploits/example_webapp.rb | 129 | # since we will check res to see if auth was a success, make sure to capture the return |
| LOW | modules/exploits/osx/mdns/upnp_location.rb | 206 | # And we make sure to put our payload in the USN header |
| LOW | modules/exploits/multi/vpn/tincd_bof.rb | 172 | # Don't forget to stop firewalld for testing, as the port is still closed otherwise |
| LOW | modules/exploits/unix/local/netbsd_mail_local.rb | 276 | fprintf(stderr, "[+] done! Don't forget to change atrun(1) " |
| LOW | …dules/exploits/unix/http/contentkeeperweb_mimencode.rb | 119 | print_status("Don't forget to clean up afterwards (chmod -s /bin/bash and restore an original copy of the OVERWRIT |
| LOW | …exploits/linux/misc/asterisk_ami_originate_auth_rce.rb | 202 | print_good("!!!Don't forget to clean evidence from #{datastore['CONF']}!!!") |
| LOW | modules/exploits/linux/local/docker_runc_escape.rb | 351 | # shell in the docker container, make sure to restore it now. |
| MEDIUM | modules/exploits/linux/http/cisco_asax_sfr_rce.rb | 32 | Finally, it's worth noting that this attack bypasses the affects of the |
| MEDIUM | …indows/http/php_cgi_arg_injection_rce_cve_2024_4577.rb | 97 | # To debug your payloads you can add this: |
| LOW | …s/http/manageengine_servicedesk_plus_cve_2021_44077.rb | 130 | print_warning("Yo, don't forget to clean up ..\\bin\\msiexec.exe") |
| LOW | …es/auxiliary/gather/prometheus_node_exporter_gather.rb | 53 | # since we will check res to see if auth was a success, make sure to capture the return |
| LOW | …les/auxiliary/admin/networking/cisco_asa_extrabacon.rb | 185 | print_warning("Don't forget to run PASS_ENABLE after logging in!") |
| MEDIUM | …/auxiliary/server/capture/http_javascript_keylogger.rb | 211 | <p><font color="red"><i>This form submits data to the Metasploit listener for demonstration purposes.</i></font> |
| LOW | modules/auxiliary/scanner/http/http_traversal.rb | 336 | # Ah, don't forget to restore our method |
| LOW | modules/auxiliary/scanner/http/http_traversal.rb | 336 | # Ah, don't forget to restore our method |
| LOW | …/auxiliary/scanner/http/coldfusion_locale_traversal.rb | 149 | # file probably specified by user, make sure to add in actual traversal |
| LOW | modules/auxiliary/scanner/mysql/mysql_writable_dirs.rb | 35 | # make sure you handle the errors yourself |
| LOW | modules/auxiliary/scanner/mysql/mysql_file_enum.rb | 38 | # make sure you handle the errors yourself |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | modules/post/multi/manage/screenshare.rb | 199 | // required function will instead be invoked 1 second later as requested. |
| HIGH | modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb | 504 | print_status("Attacking #{app[0]} on #{peer} as requested with TLS #{ssl ? 'on' : 'off'}") |
| HIGH | modules/exploits/linux/samba/setinfopolicy_heap.rb | 21 | because of an error on the PIDL auto-generated code. Making a specially crafted |
| HIGH | …ble/security_center/pull_encrypted_database_fields.php | 3 | // generated by Claude Code |
| HIGH | data/post/tenable/security_center/dump_crack_hashes.php | 3 | // generated by Claude Code |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | tools/hardware/killerbee_msfrelay.py | 8 | |
| LOW | tools/hardware/killerbee_msfrelay.py | 15 | |
| LOW | tools/hardware/killerbee_msfrelay.py | 20 | |
| LOW | lib/msf/core/modules/external/python/metasploit/cli.py | 1 | |
| LOW | modules/auxiliary/gather/office365userenum.py | 3 | |
| LOW | modules/auxiliary/gather/mikrotik_winbox_fileread.py | 11 | |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 5 | |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 6 | |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 8 | |
| LOW | …ules/auxiliary/scanner/teradata/teradata_odbc_login.py | 6 | |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 9 | |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 12 | |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 13 | |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 16 | |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 17 | |
| LOW | modules/auxiliary/scanner/smb/impacket/dcomexec.py | 10 | |
| LOW | modules/auxiliary/scanner/smb/impacket/dcomexec.py | 11 | |
| LOW | modules/auxiliary/scanner/smb/impacket/dcomexec.py | 12 | |
| LOW | modules/auxiliary/scanner/smb/impacket/dcomexec.py | 13 | |
| LOW | modules/auxiliary/scanner/smb/impacket/wmiexec.py | 10 | |
| LOW | modules/auxiliary/scanner/smb/impacket/wmiexec.py | 11 | |
| LOW | modules/auxiliary/scanner/smb/impacket/wmiexec.py | 12 | |
| LOW | …ware_view_planner_4_6_uploadlog_rce/log_upload_wsgi.py | 3 | |
| LOW | data/exploits/CVE-2023-4911/cve_2023_4911.py | 6 | |
| LOW | data/exploits/CVE-2023-4911/cve_2023_4911.py | 8 | |
| LOW | data/exploits/CVE-2021-3156/userspec_generic.py | 48 | |
| LOW | data/exploits/CVE-2021-4034/cve_2021_4034.py | 1 | |
| LOW | data/exploits/CVE-2021-4034/cve_2021_4034.py | 3 | |
| LOW | data/exploits/CVE-2021-4034/cve_2021_4034.py | 4 | |
| LOW | data/meterpreter/python/met_rsa.py | 2 | |
| LOW | data/meterpreter/python/met_rsa.py | 3 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | tools/hardware/killerbee_msfrelay.py | 130 | |
| LOW | …msf/core/modules/external/python/metasploit/version.py | 168 | |
| LOW | external/source/shellcode/windows/x64/build.py | 81 | |
| LOW | external/source/shellcode/windows/x86/build.py | 99 | |
| LOW | external/source/shellcode/windows/x86/src/hash.py | 91 | |
| LOW | external/source/shellcode/windows/x86/src/hash.py | 133 | |
| LOW | modules/auxiliary/gather/office365userenum.py | 162 | |
| LOW | modules/auxiliary/gather/office365userenum.py | 189 | |
| LOW | modules/auxiliary/gather/office365userenum.py | 252 | |
| LOW | modules/auxiliary/dos/http/slowloris.py | 101 | |
| LOW | modules/auxiliary/admin/http/grafana_auth_bypass.py | 105 | |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 133 | |
| LOW | modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py | 163 | |
| LOW | modules/auxiliary/scanner/smb/impacket/secretsdump.py | 114 | |
| LOW | modules/auxiliary/scanner/smb/impacket/_msf_impacket.py | 84 | |
| LOW | modules/auxiliary/scanner/smb/impacket/dcomexec.py | 83 | |
| LOW | modules/auxiliary/scanner/smb/impacket/dcomexec.py | 103 | |
| LOW | modules/auxiliary/scanner/smb/impacket/wmiexec.py | 72 | |
| LOW | …ware_view_planner_4_6_uploadlog_rce/log_upload_wsgi.py | 46 | |
| LOW | data/exploits/CVE-2023-4911/cve_2023_4911.py | 112 | |
| LOW | data/exploits/CVE-2021-3156/nss_generic2.py | 119 | |
| LOW | data/exploits/CVE-2021-3156/nss_u16.py | 38 | |
| LOW | data/exploits/CVE-2021-3156/nss_u14.py | 40 | |
| LOW | data/exploits/CVE-2021-3156/userspec_generic.py | 126 | |
| LOW | data/meterpreter/python/met_rsa.py | 55 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | tools/dev/generate_mitre_attack_technique_constants.rb | 12 | # Usage: |
| LOW | tools/dev/generate_mitre_attack_technique_constants.rb | 95 | # Example usage: |
| LOW | lib/msf/core/exploit/remote/http/wordpress/sqli.rb | 7 | # Usage: |
| LOW | lib/rex/parser/nmap_xml.rb | 24 | # Usage: |