#Metasploit

Tip: Stop setting RHOSTS for each of your modules and instead set it globally with 'setg RHOSTS x.x.x.x'. Use the 'tips' command in #Metasploit for more suggestions.

🚩 Attackers Use AI Pentesting Frameworks to Automate Cyberattacks Attackers are using AI pentesting frameworks like ARTEX, PentAGI, and CAIRN to automate real-world intrusions. ARTEX abused Weaver OA APIs and MySQL logging features to deploy JSP webshells, repeatedly adjusting its approach after failed attempts. Other activity included harvesting domain credentials, enumerating 110,000+ Active Directory objects, creating admin accounts, and exfiltrating command output through rotating webhook[.]site endpoints. PentAGI uses specialized agents with Nmap, Metasploit, and SQLmap to automate reconnaissance and exploitation. #ThreatIntel #ThreatHunting #AISecurity #CyberSecurity

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow #NetHunter

Pentest-Cheat-Sheets A collection of snippets of codes and commands to help our lives! The main purpose is not be a crutch, this is a way to do not waste our precious time! This repo also helps who trying to get OSCP. You'll find many ways to do something without #Metasploit Framework. #infosec #pentesting #redteam

PhoneSploit Pro can autopwn Android using #Metasploit via ADB via @Azeem_5202

We're happy to announce another #Metasploit community CTF coming your way December 4! We developed this year's game to be accessible to beginners who want to connect with the community. Teams of all sizes are encouraged—registration opens 11/30.

#Metasploit is working with Empire now, get ready for a new wave of plugins!

Wohooo! Kali Linux 2019.1 Released — Latest Version of Operating System for Hackers and #Cybersecurity Professionals. The First 2019 version of Kali includes kernel up to version 4.19.13, various patches, and software updates like #Metasploit 5.0.

AutoSploit: Automated Mass Exploiter via @Real__Vector It gathers targets via Shodan and automatically invokes selected #Metasploit modules to facilitate RCE attacks.

🔍 TCP Port Scanning with Metasploit A quick look at how Metasploit helps researchers identify open TCP ports in an authorized lab environment. 🖥️🔐 🛡️ Authorized testing only. #CyberSecurity #Metasploit #PortScanning #NetworkSecurity

📢 FireEye Releases "Commando VM" It's a new #Windows-based virtual distribution for hackers and penetration testers that contains more than 400 pre-installed tools for testing and red teaming. by @unix_root 🐱 💻

#CommandoVM is equipped with popular #hacking tools like Nmap, Wireshark, Remote Server Administration Tools, Mimikatz, Burp-Suite, x64db, #Metasploit, PowerSploit, Hashcat, and Owasp ZAP, pre-configured for a smooth working environment.

Parrot Security 4.10 released!🦜 Check out the newest features: ✅ #Linux 5.7 ✅ #Anonsurf 3.0 ✅ #Metasploit 6.0 Read more about it ➡️ #ParrotSec #CyberSecurity #CybersecurityNews #Hacking #Pentest #Pentesting

Commands in multiple sessions feature in #metasploit is handy on a #pentest.

Our #Metasploit weekly wrap-up is posted, courtesy of @hairy_mongrel this week. 👏 Six new modules, plenty of enhancements and fixers, and words like "F5", "Hyper-V", "Exchange", and "Zerologon" popping up. Ease into your weekend with this read!

New #metasploit screenshare feature to spy on your target’s screen is niiice and very reactive ! Thx @timwr

Did you know that #Metasploit and #Meterpreter have Domain Fronting support? No? Most people don't. In an effort to remedy this, we've whipped up a post to help you get started. Check it out here Feedback and comments are welcome. Thanks for reading!

However legacy #metasploit framework 2.8-dev runs on the NetBSD 3.0 hpcsh Jornada 690 (32 MB RAM) - so after finishing a recent OpenSSL build I will try and compile a recent Nmap (I have nmap v 3.55) to produce a hacking device like the Colonial Marines used in Aliens :)

#KaliLinux & #Metasploit Tip: You can now use "pattern_create.rb" & "pattern_offset.rb" without changing directories by doing "msf-pattern_create" / "msf-pattern_offset! BONUS: "msf-<tab><tab>" for even more useful msf tools ;)

BASH BUNNY Firmware v1.6 is now in public beta, and with it comes a host of improvements and extensions - most notably native support for the #Metasploit Framework! Find the download and provide feedback on the @Hak5 forums & discord from

Find flags, win stuff. #Metasploit #CTF for Metasploitable.