deardaniel/secdata-raw huggingface dataset:
Metasploit Module: MS-NRPC Domain Users Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/dcerpc/nrpc_enumusers.rb
References: URL-https://github.com/klsecservices/Publications/blob/master/A_journey_into_forgotten_Null_Session_and_MS-RPC_interfaces.pdf

Description:
This module will enumerate valid Domain Users via no authentication against MS-NRPC interface.
          It calls DsrGetDcNameEx2 to check if the domain user account exists or not. It has been tested with
          Windows servers 2012, 2016, 2019 and 2022.
Metasploit Module: Microsoft Windows Deployment Services Unattend Retrieval
Type: auxiliary
Path: modules/auxiliary/scanner/dcerpc/windows_deployment_services.rb
References: URL-http://msdn.microsoft.com/en-us/library/dd891255(prot.20).aspx, URL-http://rewtdance.blogspot.com/2012/11/windows-deployment-services-clear-text.html

Description:
This module retrieves the client unattend file from Windows
          Deployment Services RPC service and parses out the stored credentials.
          Tested against Windows 2008 R2 x64 and Windows 2003 x86.
Metasploit Module: PetitPotam
Type: auxiliary
Path: modules/auxiliary/scanner/dcerpc/petitpotam.rb
References: CVE-2021-36942, URL-https://github.com/topotam/PetitPotam, URL-https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-efsr/403c7ae0-1a3a-4e96-8efc-54e79a2cc451

Description:
Coerce an authentication attempt over SMB to other machines via MS-EFSRPC methods.
Metasploit Module: Hidden DCERPC Service Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/dcerpc/hidden.rb
Authors: hdm

Description:
This module will query the endpoint mapper and make a list
      of all ncacn_tcp RPC services. It will then connect to each of
      these services and use the management API to list all other
      RPC services accessible on this port. Any RPC service found attached
      to a TCP port, but not listed in the endpoint mapper, will be displayed
      and analyzed to see whether anonymous access is permitted.
Metasploit Module: DFSCoerce
Type: auxiliary
Path: modules/auxiliary/scanner/dcerpc/dfscoerce.rb
References: URL-https://github.com/Wh04m1001/DFSCoerce

Description:
Coerce an authentication attempt over SMB to other machines via MS-DFSNM methods.
Metasploit Module: VNC Authentication None Detection
Type: auxiliary
Path: modules/auxiliary/scanner/vnc/vnc_none_auth.rb
References: CVE-2006-2369, URL-https://en.wikipedia.org/wiki/RFB, URL-https://en.wikipedia.org/wiki/Vnc

Description:
Detect VNC servers that support the "None" authentication method.
Metasploit Module: Apple Remote Desktop Root Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/vnc/ard_root_pw.rb
Authors: jgor
References: CVE-2017-13872, URL-https://support.apple.com/en-us/HT208315

Description:
Enable and set root account to a chosen password on unpatched macOS High Sierra hosts with either Screen Sharing or Remote Management enabled.
Metasploit Module: VNC Authentication Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/vnc/vnc_login.rb
References: CVE-1999-0506

Description:
This module will test a VNC server on a range of machines and
        report successful logins. Currently it supports RFB protocol
        version 3.3, 3.7, 3.8 and 4.001 using the VNC challenge response
        authentication method.
Metasploit Module: PcAnywhere Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/pcanywhere/pcanywhere_login.rb
Authors: theLightCosine
References: CVE-1999-0502

Description:
This module will test pcAnywhere logins on a range of machines and
        report successful logins.
Metasploit Module: MSSQL Ping Utility
Type: auxiliary
Path: modules/auxiliary/scanner/mssql/mssql_ping.rb
Authors: MC

Description:
This module simply queries the MSSQL Browser service for server information.
Metasploit Module: MSSQL Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/mssql/mssql_login.rb
Authors: MC
References: CVE-1999-0506

Description:
This module simply queries the MSSQL instance for a specific user/pass (default is sa with blank).
Metasploit Module: MSSQL Version Utility
Type: auxiliary
Path: modules/auxiliary/scanner/mssql/mssql_version.rb
Authors: Zach Goldman

Description:
Executes a TDS7 pre-login request against the MSSQL instance to query for version information.
Metasploit Module: Brocade Password Hash Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/brocade_enumhash.rb
Authors: Deral "PercentX" Heiland
References: URL-http://web.archive.org/web/[PII_REDACTED]2410/https://www.rapid7.com/blog/post/2014/05/15/r7-2014-01-r7-2014-02-r7-2014-03-disclosures-exposure-of-critical-information-via-snmp-public-community-string/

Description:
This module extracts password hashes from certain Brocade load
        balancer devices.
Metasploit Module: ARRIS / Motorola SBG6580 Cable Modem SNMP Enumeration Module
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/sbg6580_enum.rb
Authors: Matthew Kienow <mkienow[at]inokii.com>
References: URL-https://seclists.org/fulldisclosure/2014/May/79, URL-https://web.archive.org/web/[PII_REDACTED]2553/http://www.arrisi.com/modems/datasheet/SBG6580/SBG6580_UserGuide.pdf, OSVDB-110555

Description:
This module allows SNMP enumeration of the ARRIS / Motorola
          SURFboard SBG6580 Series Wi-Fi Cable Modem Gateway. It supports the username
          and password for the device user interface as well as wireless network keys
          and information.
          The default community used is "public".
Metasploit Module: Netopia 3347 Cable Modem Wifi Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/netopia_enum.rb
Authors: Deral "PercentX" Heiland
References: URL-http://web.archive.org/web/[PII_REDACTED]2410/https://www.rapid7.com/blog/post/2014/05/15/r7-2014-01-r7-2014-02-r7-2014-03-disclosures-exposure-of-critical-information-via-snmp-public-community-string/

Description:
This module extracts WEP keys and WPA preshared keys from
        certain Netopia cable modems.
Metasploit Module: Xerox WorkCentre User Enumeration (SNMP)
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/xerox_workcentre_enumusers.rb

Description:
This module will do user enumeration based on the Xerox WorkCentre present on the network.
          SNMP is used to extract the usernames.
Metasploit Module: Arris DG950A Cable Modem Wifi Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/arris_dg950.rb
Authors: Deral "Percent_X" Heiland
References: CVE-2014-4863, URL-https://www.rapid7.com/blog/post/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863/

Description:
This module will extract WEP keys and WPA preshared keys from
        Arris DG950A cable modems.
Metasploit Module: Cisco IOS SNMP Configuration Grabber (TFTP)
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/cisco_config_tftp.rb

Description:
This module will download the startup or running configuration
        from a Cisco IOS device using SNMP and TFTP. A read-write SNMP
        community is required. The SNMP community scanner module can
        assist in identifying a read-write community. The target must
        be able to connect back to the Metasploit system and the use of
        NAT will cause the TFTP transfer to fail.
Metasploit Module: SNMP Enumeration Module
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/snmp_enum.rb
Authors: Matteo Cantoni <goony[at]nothink.org>
References: URL-https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol, URL-https://net-snmp.sourceforge.io/docs/man/snmpwalk.html, URL-http://www.nothink.org/codes/snmpcheck/index.php, CVE-1999-0508, CVE-1999-0517, CVE-1999-0516

Description:
This module allows enumeration of any devices with SNMP
          protocol support. It supports hardware, software, and network information.
          The default community used is "public".
Metasploit Module: SNMP Windows Username Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/snmp_enumusers.rb
Authors: tebo[at]attackresearch.com

Description:
This module will use LanManager/psProcessUsername OID values to
        enumerate local user accounts on a Windows/Solaris system via SNMP
Metasploit Module: Ubee DDW3611b Cable Modem WiFi Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/ubee_ddw3611.rb
Authors: Deral "PercentX" Heiland
References: URL-http://web.archive.org/web/[PII_REDACTED]2410/https://www.rapid7.com/blog/post/2014/05/15/r7-2014-01-r7-2014-02-r7-2014-03-disclosures-exposure-of-critical-information-via-snmp-public-community-string/

Description:
This module will extract WEP keys and WPA preshared keys from
        certain Ubee cable modems.
Metasploit Module: SNMP Set Module
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/snmp_set.rb
Authors: Matteo Cantoni <goony[at]nothink.org>
References: URL-https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol, URL-http://www.net-snmp.org/docs/man/snmpset.html, URL-http://www.oid-info.com/

Description:
This module, similar to snmpset tool, uses the SNMP SET request
          to set information on a network entity. A OID (numeric notation)
          and a value are required. Target device must permit write access.
Metasploit Module: SNMP Community Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/snmp_login.rb
Authors: hdm
References: CVE-1999-0508, CVE-1999-0517, CVE-1999-0516

Description:
This module logs in to SNMP devices using common community names.
Metasploit Module: SNMP Windows SMB Share Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/snmp_enumshares.rb
Authors: tebo[at]attackresearch.com

Description:
This module will use LanManager OID values to enumerate SMB shares on a Windows system via SNMP
Metasploit Module: HP LaserJet Printer SNMP Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/snmp_enum_hp_laserjet.rb
Authors: Matteo Cantoni <goony[at]nothink.org>
References: URL-https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol, URL-https://net-snmp.sourceforge.io/docs/man/snmpwalk.html, URL-http://www.nothink.org/codes/snmpcheck/index.php, URL-http://www.securiteam.com/securitynews/5AP0S2KGVS.html, URL-http://stuff.mit.edu/afs/athena/dept/cron/tools/share/mibs/290923.mib

Description:
This module allows enumeration of files previously printed.
          It provides details as filename, client, timestamp and username information.
          The default community used is "public".
Metasploit Module: Cisco IOS SNMP File Upload (TFTP)
Type: auxiliary
Path: modules/auxiliary/scanner/snmp/cisco_upload_file.rb

Description:
This module will copy file to a Cisco IOS device using SNMP and TFTP.
        The action Override_Config will override the running config of the Cisco device.
        A read-write SNMP community is required. The SNMP community scanner module can
        assist in identifying a read-write community. The target must
        be able to connect back to the Metasploit system and the use of
        NAT will cause the TFTP transfer to fail.
Metasploit Module: Lotus Domino Version
Type: auxiliary
Path: modules/auxiliary/scanner/lotus/lotus_domino_version.rb
Authors: CG

Description:
Several checks to determine Lotus Domino Server Version.
Metasploit Module: VMware Authentication Daemon Version Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/vmware/vmauthd_version.rb
Authors: theLightCosine

Description:
This module will identify information about a host through the
        vmauthd service.
Metasploit Module: VMware Server Directory Traversal Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/vmware/vmware_server_dir_trav.rb
Authors: CG
References: URL-https://www.vmware.com/security/advisories/VMSA-2009-0015.html, OSVDB-59440, BID-36842, CVE-2009-3733, URL-http://fyrmassociates.com/tools/gueststealer-v1.1.pl

Description:
This modules exploits the VMware Server Directory Traversal
        vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before
        2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5
        allows remote attackers to read arbitrary files. Common VMware server ports
        80/8222 and 443/8333 SSL.  If you want to download the entire VM, check out
        the gueststealer tool.
Metasploit Module: VMware Update Manager 4 Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/vmware/vmware_update_manager_traversal.rb
Disclosure date: 2011-11-21
References: CVE-2011-4404, EDB-18138, URL-https://www.vmware.com/security/advisories/VMSA-2011-0014.html, URL-http://dsecrg.com/pages/vul/show.php?id=342

Description:
This modules exploits a directory traversal vulnerability in VMware Update Manager
          on port 9084.  Versions affected by this vulnerability: vCenter Update Manager
          4.1 prior to Update 2, vCenter Update Manager 4 Update 4.
Metasploit Module: VMware Authentication Daemon Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/vmware/vmauthd_login.rb
Authors: theLightCosine
References: CVE-1999-0502

Description:
This module will test vmauthd logins on a range of machines and
        report successful logins.
Metasploit Module: Cisco IKE Information Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/ike/cisco_ike_benigncertain.rb
Disclosure date: 2016-09-29
References: CVE-2016-6415, URL-https://github.com/adamcaudill/EquationGroupLeak/tree/master/Firewall/TOOLS/BenignCertain/benigncertain-v1110, URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1, URL-https://nvd.nist.gov/vuln/detail/CVE-2016-6415, URL-https://musalbas.com/2016/08/18/equation-group-benigncertain.html

Description:
A vulnerability in Internet Key Exchange version 1 (IKEv1) packet
          processing code in Cisco IOS, Cisco IOS XE, and Cisco IOS XR Software
          could allow an unauthenticated, remote attacker to retrieve memory
          contents, which could lead to the disclosure of confidential information.

          The vulnerability is due to insufficient condition checks in the part
          of the code that handles IKEv1 security negotiation requests.
          An attacker could exploit this vulnerability by sending a crafted IKEv1
          packet to an affected device configured to accept IKEv1 security
          negotiation requests. A successful exploit could allow the attacker
          to retrieve memory contents, which could lead to the disclosure of
          confidential information.
Metasploit Module: CVE-2023-21554 - QueueJumper - MSMQ RCE Check
Type: auxiliary
Path: modules/auxiliary/scanner/msmq/cve_2023_21554_queuejumper.rb
Disclosure date: 2023-04-11
References: CVE-2023-21554, URL-https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554, URL-https://securityintelligence.com/posts/msmq-queuejumper-rce-vulnerability-technical-analysis/

Description:
This module checks the provided hosts for the CVE-2023-21554 vulnerability by sending
          a MSMQ message with an altered DataLength field within the SRMPEnvelopeHeader that
          overflows the given buffer. On patched systems, the error is caught and no response
          is sent back. On vulnerable systems, the integer wraps around and depending on the length
          could cause an out-of-bounds write. In the context of this module a response is sent back,
          which indicates that the system is vulnerable.
Metasploit Module: UDP Scanner Example
Type: auxiliary
Path: modules/auxiliary/scanner/udp/example.rb
Disclosure date: 2014-03-15
Authors: Joe Contributor <joe_contributor[at]example.com>
References: CVE-0000-0000, URL-https://SomeURLinCyberspace.local

Description:
This module is an example of how to send probes to UDP services
          en-masse, analyze any responses, and then report on any discovered
          hosts, services, vulnerabilities or otherwise noteworthy things.
          Simply address any of the TODOs.
Metasploit Module: UDP Amplification Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/udp/udp_amplification.rb
Authors: Jon Hart <jon_hart[at]rapid7.com>
References: CVE-2013-5211, URL-https://www.cisa.gov/uscert/ncas/alerts/TA14-017A

Description:
Detect UDP endpoints with UDP amplification vulnerabilities
Metasploit Module: MySQL Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/mysql/mysql_login.rb
References: CVE-1999-0502

Description:
This module simply queries the MySQL instance for a specific user/pass (default is root with blank).
Metasploit Module: JetBrains TeamCity Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/teamcity/teamcity_login.rb

Description:
This module performs login attempts against a JetBrains TeamCity webpage to bruteforce possible credentials.
Metasploit Module: TCP ACK Firewall Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/portscan/ack.rb
Authors: kris katterjohn

Description:
Map out firewall rulesets with a raw ACK scan.  Any
        unfiltered ports found means a stateful firewall is
        not in place for them.
Metasploit Module: TCP "XMas" Port Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/portscan/xmas.rb
Authors: kris katterjohn

Description:
Enumerate open|filtered TCP services using a raw
        "XMas" scan; this sends probes containing the FIN,
        PSH and URG flags.
Metasploit Module: TCP Port Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/portscan/tcp.rb

Description:
Enumerate open TCP services by performing a full TCP connect on each port.
        This does not need administrative privileges on the source machine, which
        may be useful if pivoting.
Metasploit Module: FTP Bounce Port Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/portscan/ftpbounce.rb
Authors: kris katterjohn

Description:
Enumerate TCP services via the FTP bounce PORT/LIST
        method.
Metasploit Module: Siemens Profinet Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/scada/profinet_siemens.rb
Authors: Tijl Deneut <tijl.deneut[at]howest.be>
References: URL-https://wiki.wireshark.org/PROFINET/DCP, URL-https://github.com/tijldeneut/ICSSecurityScripts

Description:
This module will use Layer2 packets, known as Profinet Discovery packets,
        to detect all Siemens (and sometimes other) devices on a network.
        It is perfectly SCADA-safe, as there will only be ONE single packet sent out.
        Devices will respond with their IP configuration and hostnames.
        Created by XiaK Industrial Security Research Center (www[dot]xiak[dot]be))
Metasploit Module: Indusoft WebStudio NTWebServer Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/scada/indusoft_ntwebserver_fileaccess.rb
References: CVE-2011-1900, OSVDB-73413, BID-47842, URL-http://www.indusoft.com/hotfixes/hotfixes.php

Description:
This module exploits a directory traversal vulnerability in Indusoft WebStudio.
        The vulnerability exists in the NTWebServer component and allows to read arbitrary
        remote files with the privileges of the NTWebServer process. The module has been
        tested successfully on Indusoft WebStudio 6.1 SP6.
Metasploit Module: Modbus Unit ID and Station ID Enumerator
Type: auxiliary
Path: modules/auxiliary/scanner/scada/modbus_findunitid.rb
Disclosure date: 2012-10-28
References: URL-https://www.saia-pcd.com/en/products/plc/pcd-overview/Pages/pcd1-m2.aspx, URL-https://en.wikipedia.org/wiki/Modbus:TCP

Description:
Modbus is a cleartext protocol used in common SCADA systems, developed
          originally as a serial-line (RS232) async protocol, and later transformed
          to IP, which is called ModbusTCP. default tcp port is 502.

          This module sends a command (0x04, read input register) to the modbus endpoint.
          If this command is sent to the correct unit-id, it returns with the same function-id.
          if not, it should be added 0x80, so that it sys 0x84, and an exception-code follows
          which do not interest us. This does not always happen, but at least the first 4
          bytes in the return-packet should be exact the same as what was sent.

          You can change port, ip and the scan-range for unit-id. There is also added a
          value - BENICE - to make the scanner sleep a second or more between probes. We
          have seen installations where scanning too many too fast works like a DoS.
Metasploit Module: Modbus Client Utility
Type: auxiliary
Path: modules/auxiliary/scanner/scada/modbusclient.rb

Description:
This module allows reading and writing data to a PLC using the Modbus protocol.
          This module is based on the 'modiconstop.rb' Basecamp module from DigitalBond,
          as well as the mbtget perl script.
Metasploit Module: Modbus Banner Grabbing
Type: auxiliary
Path: modules/auxiliary/scanner/scada/modbus_banner_grabbing.rb
References: URL-https://modbus.org/docs/Modbus_Messaging_Implementation_Guide_V1_0b.pdf, URL-https://en.wikipedia.org/wiki/Modbus#Modbus_TCP_frame_format_(primarily_used_on_Ethernet_networks), URL-https://github.com/industrialarmy/Hello_Proto

Description:
This module grabs the banner of any device running the Modbus protocol
          by sending a request with Modbus Function Code 43 (Read Device
          Identification). Modbus is a data communications protocol originally
          published by Modicon (now Schneider Electric) in 1979 for use with its
          programmable logic controllers (PLCs).
Metasploit Module: Moxa UDP Device Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/scada/moxa_discover.rb
Authors: Patrick DeSantis <p[at]t-r10t.com>
References: CVE-2016-9361, URL-https://www.digitalbond.com/blog/2016/10/25/serial-killers/, URL-http://www.moxa.com/support/faq/faq_detail.aspx?id=646

Description:
The Moxa protocol listens on 4800/UDP and will respond to broadcast
          or direct traffic.  The service is known to be used on Moxa devices
          in the NPort, OnCell, and MGate product lines.

          A discovery packet compels a Moxa device to respond to the sender
          with some basic device information that is needed for more advanced
          functions.  The discovery data is 8 bytes in length and is the most
          basic example of the Moxa protocol.  It may be sent out as a
          broadcast (destination 255.255.255.255) or to an individual device.

          Devices that respond to this query may be vulnerable to serious
          information disclosure vulnerabilities, such as CVE-2016-9361.

          The module is the work of Patrick DeSantis of Cisco Talos and is
          derived from original work by K. Reid Wightman. Tested and validated
          on a Moxa NPort 6250 with firmware versions 1.13 and 1.15.
Metasploit Module: Digi ADDP Remote Reboot Initiator
Type: auxiliary
Path: modules/auxiliary/scanner/scada/digi_addp_reboot.rb
Authors: hdm
References: URL-http://qbeukes.blogspot.com/2009/11/advanced-digi-discovery-protocol_21.html, URL-https://www.digi.com/resources/documentation/digidocs/90001537/#References/r_Advanced_Device_Discovery_Prot.htm?Highlight=advanced%20device%20discovery%20protocol

Description:
Reboot Digi International based equipment through the ADDP service
Metasploit Module: Sielco Sistemi Winlog Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/scada/sielco_winlog_fileaccess.rb
References: CVE-2012-4356, OSVDB-83275, BID-54212, EDB-19409, URL-http://aluigi.altervista.org/adv/winlog_2-adv.txt

Description:
This module exploits a directory traversal in Sielco Sistemi Winlog. The vulnerability
          exists in the Runtime.exe service and can be triggered by sending a specially crafted packet
          to the 46824/TCP port. This module has been successfully tested on Sielco Sistemi Winlog Lite
          2.07.14.
Metasploit Module: Unitronics PCOM Client
Type: auxiliary
Path: modules/auxiliary/scanner/scada/pcomclient.rb
References: URL-https://unitronicsplc.com/Download/SoftwareUtilities/Unitronics%20PCOM%20Protocol.pdf

Description:
Unitronics Vision PLCs allow unauthenticated PCOM commands
          to query PLC registers.