Hacker GitHub

← All repos

rapid7/metasploit-framework

View on GitHub ↗ ★ 39,291 Ruby

Metasploit Framework

38 mentions on Hacker News by 37 people: 16 stories, 22 comments · first 2012-06-11 · latest 2026-08-03

Mentions per year 38 mentions · busiest year 2014 (8)
20082026
AllStoriesComments NewestTopOldest
  1. …seen issues like that from people publishing security tools before. Metasploit is one example: https://github.com/rapid7/metasploit-framework
    comment by rpicard · 2026-08-03 · in Show HN: Nightcrawler – A local AI pentesting agent running on a smartphone
  2. ▲ 2
    Metasploit: Add Systemd BSOD QR Payload?
    story by pabs3 · 2023-12-08 · 0 comments
  3. ▲ 2
    Metasploit Framework
    story by thunderbong · 2023-05-25 · 0 comments
  4. …sort of thing, there is a metasploit module you can use to reproduce the unauthenticated attack: https://github.com/rapid7/metasploit-framework/commit/6f4aa5...
    comment by albinolobster · 2021-11-05 · in Gitlab servers are being exploited in DDoS attacks
  5. …through SSH and Telnet. [1] is the backdoor. [2] is more details regarding discovery. [1] https://github.com/rapid7/metasploit-framework/blob/master/m... [2] https://blog.rapid7.com/2015/12/20/cve-2015-7755-juniper-scr...
    comment by gzer0 · 2021-09-03 · in The NSA's Backdoor in Dual EC
  6. I believe it's the same exploit, check out this reference here [0], and you should see the JS snippet https://github.com/rapid7/metasploit-framework/pull/15007/fi...
    comment by rtpg · 2021-04-13 · in Chrome zero-day released on GitHub – fixed on V8 but still works on latest
  7. Couldn't find the PR you're referring to, unless it was this one https://github.com/rapid7/metasploit-framework/pull/15007 which was added by the same author as the OP, but looks like a different exploit as far as I can tell?
    comment by moozilla · 2021-04-13 · in Chrome zero-day released on GitHub – fixed on V8 but still works on latest
  8. …offer to do any work themselves. Examples: https://gitlab.com/fdroid/fdroidclient/-/issues/1049 and https://github.com/rapid7/metasploit-framework/issues/9092
    comment by progval · 2020-08-31 · in Supporting Linux kernel development in Rust
  9. ▲ 1
    Metasploit module for SAP “RECON” CVE-2020-6287 that adds an admin user
    story by what_the_sec · 2020-07-23 · 0 comments
  10. …have allowed anyone with an internet connection to remotely execute code on their systems via https://github.com/rapid7/metasploit-framework/issues/8064
    comment by testvox · 2019-07-30 · in Google unlocks 33% of publisher paywalls on July 30
  11. ▲ 1
    Add Jenkins ACL Bypass and Metaprogramming RCE CVE-2019-1003002
    story by based2 · 2019-03-23 · 0 comments
  12. ▲ 1
    Metasploit
    story by aboutruby · 2019-02-27 · 0 comments
  13. ▲ 1
    Reliable MS17-010 exploit Win2000 up to Server 2016 is now public
    story by wolframio · 2018-01-29 · 0 comments
  14. …the article, and the linked blackhat presentation, this has been broken and exploited for 15 years: https://github.com/rapid7/metasploit-framework/blob/master/m... and/or: https://github.com/rapid7/metasploit-framework/blob/master/d...…
    comment by e12e · 2017-07-21 · in NTLM Hash Leaks: Ancient Microsoft Design Flaw
  15. ▲ 1
    Module request: EternalPulsar (Metasploit)
    story by remx · 2017-05-16 · 0 comments
  16. ▲ 4
    Zero day critical vulnerability in Apache Struts
    story by sidcool · 2017-03-09 · 0 comments
  17. …a (probably incomplete) list of all public exploits in the past three years: - 2013/08: XPCOM RCE ( https://github.com/rapid7/metasploit-framework/blob/master/m... ) - 2013/08: __exposedProps__ ( https://github.com/rapid7/metasploit-framewo…
    comment by lima · 2016-11-30 · in Javascript exploit actively used against TorBrowser
  18. …tps://news.ycombinator.com/item?id=12712648 while providing hosting for years to famous projects like https://github.com/rapid7/metasploit-framework Not that I think they should take MS down, of course.
    comment by qb45 · 2016-10-19 · in Introducing GitHub Community Guidelines
  19. ▲ 1
    JSSE SKIP-TLS MITM Proxy
    story by rcvalle · 2015-08-11 · 0 comments
  20. …open source contributors to sign commits to your project, as we do with the Metasploit Framework: https://github.com/rapid7/metasploit-framework/wiki/Landing-...
    comment by techpeace · 2015-08-04 · in Linus Torvalds did not commit this
  21. ▲ 6
    OpenSSL Alternative Chains Certificate Forgery (CVE-2015-1793) MITM Proxy
    story by rcvalle · 2015-07-24 · 0 comments
  22. Metasploit Framework rolls out new banners: https://github.com/rapid7/metasploit-framework/pull/5047
    comment by hdmoore · 2015-04-01 · in List of April Fools' Day Announcements
  23. ▲ 3
    CVE-2014-6271: Metasploit Module
    story by warriar · 2014-09-25 · 0 comments
  24. ▲ 2
    Android (Stock) Browser: cross-domain cookie/response extraction module
    story by thefreeman · 2014-09-08 · 0 comments
  25. …JS, as it is sandboxed. Not true. It's definitely possible to escape the sandbox. Some examples: https://github.com/rapid7/metasploit-framework/tree/master/m... http://www.mozilla.org/security/announce/2013/mfsa2013-12.ht...…
    comment by csandreasen · 2014-07-08 · in Ask HN: Why would you disable JavaScript?
  26. ▲ 2
    The Metasploit Framework
    story by sunilkumarc · 2014-06-09 · 0 comments
  27. …SSL Keys Using Heartbleed? http://blog.cloudflare.com/answering-the-critical-question-c... [1] see https://github.com/rapid7/metasploit-framework/blob/master/m...
    comment by nikcub · 2014-04-12 · in CloudFlare's Heartbleed challenge cracked
  28. …execve payloads support passing arguments to execve, by building the args array on the fly: https://github.com/rapid7/metasploit-framework/blob/master/m... There are also lots of reverse shells like this, and reverse stagers too.…
    comment by joev_ · 2014-03-29 · in Shellcode to reverse bind a shell with netcat
  29. ▲ 13
    WhatsApp database dumper for Metasploit
    story by taylorbuley · 2014-03-13 · 2 comments
  30. The code is here: https://github.com/rapid7/metasploit-framework/blob/master/m... I can't get it to do anything on my s3 or my nexus tablet. My very non-destructive implementation is here: http://9ol.es/ex.html - I'm editing it live btw.
    comment by kristopolous · 2014-02-19 · in E-Z-2-Use attack code exploits critical bug in majority of Android phones
  31. And, now metasploit has two competing modules in the works: https://github.com/rapid7/metasploit-framework/pull/2548 https://github.com/rapid7/metasploit-framework/pull/2549
    comment by jared314 · 2013-10-19 · in Node v0.10.21 Stable has critical security fix
  32. Metasploit module has been made available: https://github.com/rapid7/metasploit-framework/blob/master/m...
    comment by benmmurphy · 2013-01-10 · in New Zero Day Java Vulnerability Being Exploited in the Wild
  33. ▲ 4
    Metasploit Rails 2.x, 3.x Remote Code Execution module released
    story by FiloSottile · 2013-01-10 · 1 comment
  34. It's arrived: https://github.com/rapid7/metasploit-framework/blob/master/m... Same story I submitted yesterday : http://news.ycombinator.com/item?id=5030906
    comment by fmavituna · 2013-01-10 · in Metasploit Rails 3 Remote Code Execution Hours Away
  35. Available now: https://github.com/rapid7/metasploit-framework/pull/1281 https://gist.github.com/4499206
    comment by espes · 2013-01-10 · in Metasploit Rails 3 Remote Code Execution Hours Away
  36. An exploit has been added to metasploit already https://github.com/rapid7/metasploit-framework/commit/3ade5a...
    comment by EwanToo · 2012-09-25 · in PhpMyAdmin Mirror Distributing Backdoored App
  37. ▲ 1
    Metasploit Framework
    story by railswarrior · 2012-09-16 · 0 comments
  38. metasploit module: https://github.com/rapid7/metasploit-framework/blob/master/m...
    comment by jaryd · 2012-06-11 · in Security vulnerability in MySQL ubuntu