Metasploit 4.8.0 Update 2013112001

Document created by Brandon Turner Employee on Nov 18, 2013
Version 1Show Document
  • View in full screen mode

Summary

This update includes 7 new modules, including exploits for Supermicro Onboard IPMI and Windows.  It also includes new modules for Gzip, Typo3, Wordpress and OSX.

In addition, this update fixes 16 reported issue.

 

Exploit modules

 

Auxiliary and post modules

 

Notable Changes and Resolved Issues

  • 4853 - linux meterpreter post modules hang msfconsole
  • 5005 - Add ability to choose java version for browser exploits
  • 5500 - Modules use MSVCR71.dll for ROP gadgets should check if Java is enabed
  • 6363 - [POSIX meterpreter] Unimplemented protocol commands hang the client
  • 6414 - [POSIX Meterpreter] Backgrounding an interactive channel hoses the session
  • 6442 - Meterpreter leaves shell processes around after dying
  • 6455 - WindowsMeterpreter should show IPv6 addresses in ipconfig output
  • 6460 - Meterpreter getsystem crash on Windows 7
  • 7706 - request_webcam_stop may cause Windows meterpreter to crash
  • 8044 - Post modules do not work in linux meterpreter
  • 8463 - Tests for Util::EXE are bad and you should feel bad
  • 8465 - MS08-067, Meterpreter, and WinXP2
  • 8498 - Couple hundred msftidy warnings
  • 8501 - Create Browser AutoPwn Like HttpServer
  • 8524 - Meterpreter builds with VS2013
  • 8668 - rspec failing on OSX

 

How to Upgrade

Metasploit Pro is upgraded using the Administration menu and choosing the option Software Upgrade. To see how to upgrade your Metasploit installation, view this video in the Rapid7 Community.

 

Version Information

PRO 4.8.0 updates to 4.8.0-2013112001

MSF3 4.8.0 updates to 4.8.0-2013112001

Attachments

    Outcomes