rapid7/metasploit-framework on Hacker News

…seen issues like that from people publishing security tools before. Metasploit is one example: https://github.com/rapid7/metasploit-framework

comment by rpicard · 2026-08-03 · in Show HN: Nightcrawler – A local AI pentesting agent running on a smartphone

…sort of thing, there is a metasploit module you can use to reproduce the unauthenticated attack: https://github.com/rapid7/metasploit-framework/commit/6f4aa5...

comment by albinolobster · 2021-11-05 · in Gitlab servers are being exploited in DDoS attacks

…through SSH and Telnet. [1] is the backdoor. [2] is more details regarding discovery. [1] https://github.com/rapid7/metasploit-framework/blob/master/m... [2] https://blog.rapid7.com/2015/12/20/cve-2015-7755-juniper-scr...

comment by gzer0 · 2021-09-03 · in The NSA's Backdoor in Dual EC

I believe it's the same exploit, check out this reference here [0], and you should see the JS snippet https://github.com/rapid7/metasploit-framework/pull/15007/fi...

comment by rtpg · 2021-04-13 · in Chrome zero-day released on GitHub – fixed on V8 but still works on latest

Couldn't find the PR you're referring to, unless it was this one https://github.com/rapid7/metasploit-framework/pull/15007 which was added by the same author as the OP, but looks like a different exploit as far as I can tell?

comment by moozilla · 2021-04-13 · in Chrome zero-day released on GitHub – fixed on V8 but still works on latest

…offer to do any work themselves. Examples: https://gitlab.com/fdroid/fdroidclient/-/issues/1049 and https://github.com/rapid7/metasploit-framework/issues/9092

comment by progval · 2020-08-31 · in Supporting Linux kernel development in Rust

…have allowed anyone with an internet connection to remotely execute code on their systems via https://github.com/rapid7/metasploit-framework/issues/8064

comment by testvox · 2019-07-30 · in Google unlocks 33% of publisher paywalls on July 30

…the article, and the linked blackhat presentation, this has been broken and exploited for 15 years: https://github.com/rapid7/metasploit-framework/blob/master/m... and/or: https://github.com/rapid7/metasploit-framework/blob/master/d...…

comment by e12e · 2017-07-21 · in NTLM Hash Leaks: Ancient Microsoft Design Flaw

…a (probably incomplete) list of all public exploits in the past three years: - 2013/08: XPCOM RCE ( https://github.com/rapid7/metasploit-framework/blob/master/m... ) - 2013/08: __exposedProps__ ( https://github.com/rapid7/metasploit-framewo…

comment by lima · 2016-11-30 · in Javascript exploit actively used against TorBrowser

…tps://news.ycombinator.com/item?id=12712648 while providing hosting for years to famous projects like https://github.com/rapid7/metasploit-framework Not that I think they should take MS down, of course.

comment by qb45 · 2016-10-19 · in Introducing GitHub Community Guidelines

…open source contributors to sign commits to your project, as we do with the Metasploit Framework: https://github.com/rapid7/metasploit-framework/wiki/Landing-...

comment by techpeace · 2015-08-04 · in Linus Torvalds did not commit this

Metasploit Framework rolls out new banners: https://github.com/rapid7/metasploit-framework/pull/5047

comment by hdmoore · 2015-04-01 · in List of April Fools' Day Announcements

…JS, as it is sandboxed. Not true. It's definitely possible to escape the sandbox. Some examples: https://github.com/rapid7/metasploit-framework/tree/master/m... http://www.mozilla.org/security/announce/2013/mfsa2013-12.ht...…

comment by csandreasen · 2014-07-08 · in Ask HN: Why would you disable JavaScript?

…SSL Keys Using Heartbleed? http://blog.cloudflare.com/answering-the-critical-question-c... [1] see https://github.com/rapid7/metasploit-framework/blob/master/m...

comment by nikcub · 2014-04-12 · in CloudFlare's Heartbleed challenge cracked

…execve payloads support passing arguments to execve, by building the args array on the fly: https://github.com/rapid7/metasploit-framework/blob/master/m... There are also lots of reverse shells like this, and reverse stagers too.…

comment by joev_ · 2014-03-29 · in Shellcode to reverse bind a shell with netcat

The code is here: https://github.com/rapid7/metasploit-framework/blob/master/m... I can't get it to do anything on my s3 or my nexus tablet. My very non-destructive implementation is here: http://9ol.es/ex.html - I'm editing it live btw.

comment by kristopolous · 2014-02-19 · in E-Z-2-Use attack code exploits critical bug in majority of Android phones

And, now metasploit has two competing modules in the works: https://github.com/rapid7/metasploit-framework/pull/2548 https://github.com/rapid7/metasploit-framework/pull/2549

comment by jared314 · 2013-10-19 · in Node v0.10.21 Stable has critical security fix

Metasploit module has been made available: https://github.com/rapid7/metasploit-framework/blob/master/m...

comment by benmmurphy · 2013-01-10 · in New Zero Day Java Vulnerability Being Exploited in the Wild

It's arrived: https://github.com/rapid7/metasploit-framework/blob/master/m... Same story I submitted yesterday : http://news.ycombinator.com/item?id=5030906

comment by fmavituna · 2013-01-10 · in Metasploit Rails 3 Remote Code Execution Hours Away

Available now: https://github.com/rapid7/metasploit-framework/pull/1281 https://gist.github.com/4499206

comment by espes · 2013-01-10 · in Metasploit Rails 3 Remote Code Execution Hours Away

An exploit has been added to metasploit already https://github.com/rapid7/metasploit-framework/commit/3ade5a...

comment by EwanToo · 2012-09-25 · in PhpMyAdmin Mirror Distributing Backdoored App

metasploit module: https://github.com/rapid7/metasploit-framework/blob/master/m...

comment by jaryd · 2012-06-11 · in Security vulnerability in MySQL ubuntu