Blog
Nov 15, 2010
MSFU Updates – November 2010
This past month has been busy yet we have been steadily updating the free Metasploit Unleashed Training course with the largest growing area being the Module Reference section. This month has also seen updates to the Fast-Track and Social-Engineer Toolkit sections of the wiki.
OffSec Team
1 min read
This past month has been busy yet we have been steadily updating the free Metasploit Unleashed Training course with the largest growing area being the Module Reference section. This month has also seen updates to the Fast-Track and Social-Engineer Toolkit sections of the wiki.
General Additions and Updates:
- Added Basic Breadcrumb Navigation
- Added Nessus Bridge Coverage
- Added Fast-Track Autopwn Automation Coverage
- Added Fast-Track Nmap Scripting Engine Coverage
- Updated Fast-Track Sections with Updated Menus
- Updated SET Section to Include Changes in Version 1.0
Additions to the Module Reference Section:
- dcerpc/endpoint_mapper
- dcerpc/hidden
- dcerpc/management
- dcerpc/tcp_dcerpc_auditor
- discovery/arp_sweep
- discovery/ipv6_neighbor
- discovery/udp_probe
- discovery/udp_sweep
- smtp/smtp_enum
- smtp/smtp_version
- telnet/telnet_login
- telnet/telnet_version
- tftp/tftpbrute
As always, we ask that if you find this content useful, please consider making a donation to Hackers for Charity to show your appreciation.
Stay in the know: Become an OffSec Insider
Get the latest updates about resources, events & promotions from OffSec!
Latest from OffSec
Research & Tutorials
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
May 15, 2025
3 min read
Research & Tutorials
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.
May 8, 2025
2 min read
Research & Tutorials
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
May 1, 2025
3 min read