Jacquie Harris – Noise https://noise.getoto.net The collective thoughts of the interwebz Fri, 27 Feb 2026 20:25:50 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Metasploit Wrap-Up 02/27/2026 https://noise.getoto.net/2026/02/27/metasploit-wrap-up-02-27-2026/ Fri, 27 Feb 2026 20:25:50 +0000 http://noise.getoto.net/?guid=0fe30232d319aac13e93db1993679f7a Metasploit Weekly Wrap-Up 03/14/25 https://noise.getoto.net/2025/03/14/metasploit-weekly-wrap-up-03-14-25/ Fri, 14 Mar 2025 19:09:05 +0000 http://noise.getoto.net/?guid=faf86bb92e4230557f9479f6982e4ecc Metasploit Weekly Wrap-Up: 02/28/2025 https://noise.getoto.net/2025/02/28/metasploit-weekly-wrap-up-02-28-2025/ Fri, 28 Feb 2025 14:54:24 +0000 http://noise.getoto.net/?guid=ff125214744d4705f0ba2129f3181926

New module content (5)

mySCADA myPRO Manager Credential Harvester (CVE-2025-24865 and CVE-2025-22896)

Author: Michael Heinzl
Type: Auxiliary
Pull request: #19878 contributed by h4x-x0r
Path: admin/scada/mypro_mgr_creds
AttackerKB reference: CVE-2025-22896

Description: This module adds credential harvesting for MySCADA MyPro Manager using CVE-2025-24865 and CVE-2025-22896.

NetAlertX File Read Vulnerability

]]> Metasploit Wrap-Up 01/10/2025 https://noise.getoto.net/2025/01/10/metasploit-wrap-up-01-10-2025/ Fri, 10 Jan 2025 19:46:10 +0000 http://noise.getoto.net/?guid=a3b69a7e9a9bb647c04c046b7bec11f2

New module content (4)

GameOver(lay) Privilege Escalation and Container Escape

Authors: bwatters-r7, g1vi, gardnerapp, and h00die
Type: Exploit
Pull request: #19460 contributed by gardnerapp
Path: linux/local/gameoverlay_privesc
AttackerKB reference: CVE-2023-2640

Description: Adds a module for CVE-2023-2640 and CVE-2023-32629, a local privilege escalation in some Ubuntu kernel versions

]]> Metasploit Weekly Wrap-Up 10/04/2024 https://noise.getoto.net/2024/10/04/metasploit-weekly-wrap-up-10-04-2024/ Fri, 04 Oct 2024 19:53:33 +0000 http://noise.getoto.net/?guid=c4a73055116de9d887aa370b03b265ed

New module content (3)

cups-browsed Information Disclosure

Authors: bcoles and evilsocket
Type: Auxiliary
Pull request: #19510 contributed by bcoles
Path: scanner/misc/cups_browsed_info_disclosure

Description: Adds scanner module to retrieve CUPS version and kernel version information from cups-browsed services.

Acronis Cyber Infrastructure default password remote code execution

Authors:

]]> Metasploit Weekly Wrap-Up 07/26/2024 https://noise.getoto.net/2024/07/26/metasploit-weekly-wrap-up-07-26-2024/ Fri, 26 Jul 2024 18:07:13 +0000 http://noise.getoto.net/?guid=023dba8385f69edf1967fa0a934a37b2

New module content (3)

Magento XXE Unserialize Arbitrary File Read

Authors: Heyder and Sergey Temnikov
Type: Auxiliary
Pull request: #19304 contributed by heyder
Path: gather/magento_xxe_cve_2024_34102
AttackerKB reference: CVE-2024-34102

Description: This adds an auxiliary module for an XXE which results in an arbitrary file in Magento

]]> Metasploit Wrap-Up 03/08/2024 https://noise.getoto.net/2024/03/08/metasploit-wrap-up-03-08-2024/ Fri, 08 Mar 2024 17:00:00 +0000 http://noise.getoto.net/?guid=157eed707181f170e59a3395740b7a51

New module content (2)

GitLab Tags RSS feed email disclosure

Authors: erruquill and n00bhaxor
Type: Auxiliary
Pull request: #18821 contributed by n00bhaxor
Path: gather/gitlab_tags_rss_feed_email_disclosure
AttackerKB reference: CVE-2023-5612

Description: This adds an auxiliary module that leverages an information disclosure vulnerability (CVE-2023-5612) in Gitlab versions before

]]> Metasploit Weekly Wrap-Up 1/05/2024 https://noise.getoto.net/2024/01/05/metasploit-weekly-wrap-up-1-05-2024/ Fri, 05 Jan 2024 18:48:09 +0000 http://noise.getoto.net/?guid=1f733e0b7634cb55a96fa67de2eb2d76

New module content (2)

Splunk __raw Server Info Disclosure

Authors: KOF2002, h00die, and n00bhaxor
Type: Auxiliary
Pull request: #18635 contributed by n00bhaxor
Path: gather/splunk_raw_server_info

Description: This PR adds a module for an authenticated Splunk information disclosure vulnerability. This module gathers information about the host machine and

]]> Metasploit Weekly Wrap Up https://noise.getoto.net/2023/10/06/metasploit-weekly-wrap-up-77/ Fri, 06 Oct 2023 18:10:13 +0000 http://noise.getoto.net/?guid=a7415ec36e152bb0f6532d0f8d5fc7bd

New module content (3)

LDAP Login Scanner

Author: Dean Welch
Type: Auxiliary
Pull request: #18197 contributed by dwelch-r7
Path: scanner/ldap/ldap_login

Description: This PR adds a new login scanner module for LDAP. Login scanners are the classes that provide functionality for testing authentication against various different protocols and

]]> Metasploit Wrap-Up https://noise.getoto.net/2023/02/17/metasploit-wrap-up-48/ Fri, 17 Feb 2023 21:17:16 +0000 http://noise.getoto.net/?guid=fc0842751dc2caa6996587d3942b431e

Cisco RV Series Auth Bypass and Command Injection

Thanks to community contributor neterum, Metasploit framework just gained an awesome new module which targets Cisco Small Business RV Series Routers. The module actually exploits two vulnerabilities, an authentication bypass CVE-2022-20705 and a command injection vulnerability CVE-2022-20707 in order to achieve code

]]>