Blog
Jan 17, 2011
MSFU Updates – January 2011
This past month has seen a number of additions to our free Metasploit Unleashed training course, primarily in our on-going effort to build out the Metasploit Module Reference section. The Metasploit team has been developing at a rapid pace with new features and modules being frequently added. We are also continuing to go through the course content itself and verify the functionality of the provided material.
OffSec Team
1 min read
This past month has seen a number of additions to our free Metasploit Unleashed training course, primarily in our on-going effort to build out the Metasploit Module Reference section. The Metasploit team has been developing at a rapid pace with new features and modules being frequently added. We are also continuing to go through the course content itself and verify the functionality of the provided material.
Updates
- Updated the Event Log Management Section
- Updated the Interacting with the Registry Section
- Updated the Persistent Netcat Backdoor Section
- Updated the Enabling Remote Desktop Section
Module Reference Additions
- http/dir_webdav_unicode_bypass
- http/enum_delicious
- http/enum_wayback
- http/files_dir
- http/open_proxy
- http/options
- http/robots_txt
- http/ssl
- http/http_version
- snmp/snmp_login
- snmp/snmp_enum
- snmp/snmp_enumshares
- snmp/snmp_enumusers
- vnc/vnc_login
- vnc/vnc_none_auth
As always, we ask that if you find this content useful, that you consider making a donation to Hackers for Charity to show your appreciation.
Stay in the know: Become an OffSec Insider
Get the latest updates about resources, events & promotions from OffSec!
Latest from OffSec
Research & Tutorials
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
May 15, 2025
3 min read
Research & Tutorials
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.
May 8, 2025
2 min read
Research & Tutorials
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
May 1, 2025
3 min read