Blog
Dec 15, 2010
MSFU Updates – December 2010
This month we have again been steadily updating the Metasploit Module Reference section of Metasploit Unleashed and also added some great new content covering the setup and usage of databases with Metasploit under BackTrack4 R2. This month also saw the introduction of the excellent GUI front-end, Armitage.
OffSec Team
1 min read
This month we have again been steadily updating the Metasploit Module Reference section of Metasploit Unleashed and also added some great new content covering the setup and usage of databases with Metasploit under BackTrack4 R2. This month also saw the introduction of the excellent GUI front-end, Armitage.
General Additions and Updates:
- Added Configuring Databases Section
- Added Using the MSF Database Section
- Rewrote the Pivoting Section
- Updated the Packet Sniffing Section with packetrecorder Coverage
- Updated the WMAP Web Scanner Section
- Updated the VBScript Infection Methods Section
- Updated the Meterpreter Screen Capture Section
Additions to the Module Reference Section:
- ftp/anonymous
- ftp/ftp_login
- ftp/ftp_version
- http/cert
- http/dir_listing
- http/dir_scanner
As always, we ask that if you find this content useful, please consider making a donation to Hackers for Charity to show your appreciation
Stay in the know: Become an OffSec Insider
Get the latest updates about resources, events & promotions from OffSec!
Latest from OffSec
Research & Tutorials
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
May 15, 2025
3 min read
Research & Tutorials
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.
May 8, 2025
2 min read
Research & Tutorials
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
May 1, 2025
3 min read