In the previous post I talked about using the db_service -R to use the information in your database/workspace to throw an auxiliary module ...

So a coulple of cool updates lately to metasploit framework. If you check out db_services you'll see a super handy feature of "-R...

Grabbing the index pages of web servers seems like a no brainer and something every pentester is going to perform on a test. The problem I ...

I pushed out the first of a few Lotus Domino modules I've been working on to the metasploit trunk last nite. The first one is a Lotus Do...

intro..webdav stuff...lazy... To get yourself a test environment you can follow this tutorial, its not bad. You'll want to make sure y...

@hdmoore released a new auxiliary module a few days ago that went along with his NTP research he has been doing. msf auxiliary(ntp_monlist...

mindless foursquare fun goes metasploit style... msf > use auxiliary/admin/foursquare msf auxiliary(foursquare) > info Name: Foursquar...

Since everyone else is releasing code to check for/exploit the vmware server/esx/esxi directory traversal vulnerability I pushed up my check...

I recently pushed out (again with MC's) help an Oracle Sid enumeration MSF auxiliary module for Oracle versions less than Oracle 10g Rel...

I basically bastardized hdm's version aux module to create an options module. I wanted something that would look for web servers that a...

rule #1 dont expose your database to the world rule #2 dont have a null sa account, especially if you are violating rule #1... let's see...

Inspired by HD's HTTP version auxiliary module i wanted to see if i could get one going that would be pull down the HTTP Verbs allowable...