deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Multi Gather Ping Sweep
Type: post
Path: modules/post/multi/gather/ping_sweep.rb
Platform: %w[bsd linux osx solaris win

Description:
Performs IPv4 ping sweep using the OS included ping command.
Metasploit Module: Gather GRUB Password
Type: post
Path: modules/post/multi/gather/grub_creds.rb
Platform: linux
References: URL-https://help.ubuntu.com/community/Grub2/Passwords#Password_Encryption

Description:
This module gathers GRUB passwords from GRUB bootloader config files.
Metasploit Module: Multi Gather DNS Service Record Lookup Scan
Type: post
Path: modules/post/multi/gather/dns_srv_lookup.rb
Platform: %w[bsd linux osx solaris win

Description:
Enumerates known SRV Records for a given domain using target host DNS query tool.
Metasploit Module: JBoss Credential Collector
Type: post
Path: modules/post/multi/gather/jboss_gather.rb

Description:
This module can be used to extract the JBoss admin passwords for version 4, 5 and 6.
Metasploit Module: Multi Gather DbVisualizer Connections Settings
Type: post
Path: modules/post/multi/gather/dbvis_enum.rb
Platform: %w[linux win

Description:
DbVisualizer stores the user database configuration in dbvis.xml.
          This module retrieves the connections settings from this file and decrypts the encrypted passwords.
Metasploit Module: Gather Wowza Streaming Engine Credentials
Type: post
Path: modules/post/multi/gather/wowza_streaming_engine_creds.rb
Platform: %w[win linux osx unix
Authors: bcoles
References: URL-https://www.wowza.com/docs/use-http-providers-with-the-wowza-streaming-engine-java-api, URL-https://www.wowza.com/resources/WowzaStreamingEngine_UsersGuide-4.0.5.pdf

Description:
This module collects Wowza Streaming Engine user credentials.
Metasploit Module: Multi Gather Mozilla Thunderbird Signon Credential Collection
Type: post
Path: modules/post/multi/gather/thunderbird_creds.rb
Platform: %w[linux osx win

Description:
This module will collect credentials from Mozilla Thunderbird by downloading
          the necessary files such as 'signons.sqlite', 'key3.db', and 'cert8.db' for
          offline decryption with third party tools.

          If necessary, you may also set the PARSE option to true to parse the sqlite
          file, which contains sensitive information such as the encrypted username/password.
          However, this feature is not enabled by default, because it requires SQLITE3 gem
          to be installed on your machine.
Metasploit Module: Multi Gather Docker Credentials Collection
Type: post
Path: modules/post/multi/gather/docker_creds.rb
Platform: %w[bsd linux osx unix
Authors: Flibustier

Description:
This module will collect the contents of all users' .docker directories on the targeted
          machine. If the user has already push to docker hub, chances are that the password was
          saved in base64 (default behavior).
Metasploit Module: UNIX Gather Remmina Credentials
Type: post
Path: modules/post/multi/gather/remmina_creds.rb
Platform: %w[bsd linux osx unix
Authors: Jon Hart <jon_hart[at]rapid7.com>

Description:
Post module to obtain credentials saved for RDP and VNC from Remmina's configuration files.
          These are encrypted with 3DES using a 256-bit key generated by Remmina which is (by design)
          stored in (relatively) plain text in a file that must be properly protected.
Metasploit Module: Multi Gather OpenSSH PKI Credentials Collection
Type: post
Path: modules/post/multi/gather/ssh_creds.rb
Platform: %w[bsd linux osx unix
Authors: Jim Halfpenny

Description:
This module will collect the contents of all users' .ssh directories on the targeted
          machine. Additionally, known_hosts and authorized_keys and any other files are also
          downloaded. This module is largely based on firefox_creds.rb.
Metasploit Module: Multi Escalate Metasploit pcap_log Local Privilege Escalation
Type: post
Path: modules/post/multi/escalate/metasploit_pcaplog.rb
Platform: %w[bsd linux unix
Disclosure date: 2012-07-16
References: BID-54472, URL-http://0a29.blogspot.com/2012/07/0a29-12-2-metasploit-pcaplog-plugin.html, URL-https://community.rapid7.com/docs/DOC-1946

Description:
Metasploit < 4.4 contains a vulnerable 'pcap_log' plugin which, when used with the default settings,
          creates pcap files in /tmp with predictable file names. This exploits this by hard-linking these
          filenames to /etc/passwd, then sending a packet with a privileged user entry contained within.
          This, and all the other packets, are appended to /etc/passwd.

          Successful exploitation results in the creation of a new superuser account.

          This module requires manual clean-up. Upon success, you should remove /tmp/msf3-session*pcap
          files and truncate /etc/passwd. Note that if this module fails, you can potentially induce
          a permanent DoS on the target by corrupting the /etc/passwd file.
Metasploit Module: Create an AWS IAM User
Type: post
Path: modules/post/multi/escalate/aws_create_iam_user.rb
Platform: %w[unix
References: URL-https://github.com/devsecops/bootcamp/raw/master/Week-6/slides/june-DSO-bootcamp-week-six-lesson-three.pdf

Description:
This module will attempt to create an AWS (Amazon Web Services) IAM
          (Identity and Access Management) user with Admin privileges.
Metasploit Module: CUPS 1.6.1 Root File Read
Type: post
Path: modules/post/multi/escalate/cups_root_file_read.rb
Platform: %w[linux osx
Disclosure date: 2012-11-20
References: CVE-2012-5519, OSVDB-87635, URL-https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692791

Description:
This module exploits a vulnerability in CUPS < 1.6.2, an open source printing system.
          CUPS allows members of the lpadmin group to make changes to the cupsd.conf
          configuration, which can specify an Error Log path. When the user visits the
          Error Log page in the web interface, the cupsd daemon (running with setuid root)
          reads the Error Log path and echoes it as plaintext.

          This module is known to work on Mac OS X < 10.8.4 and Ubuntu Desktop <= 12.0.4
          as long as the session is in the lpadmin group.

          Warning: if the user has set up a custom path to the CUPS error log,
          this module might fail to reset that path correctly. You can specify
          a custom error log path with the ERROR_LOG datastore option.
Metasploit Module: Reverse Lookup IP Addresses
Type: post
Path: modules/post/multi/recon/reverse_lookup.rb
Platform: %w[win unix linux osx solaris bsd

Description:
This module reverse resolves an IP address or IP address range to hostnames.
Metasploit Module: Multi Recon Local Exploit Suggester
Type: post
Path: modules/post/multi/recon/local_exploit_suggester.rb
Platform: all_platforms

Description:
This module suggests local Metasploit exploits that can be used.

          The exploits are suggested based on the architecture and platform
          that the user has a shell opened as well as the available exploits
          in meterpreter.

          It's important to note that not all local exploits will be fired.
          Exploits are chosen based on these conditions: session type,
          platform, architecture, and required default options.
Metasploit Module: Persistence Exploit Suggester
Type: post
Path: modules/post/multi/recon/persistence_suggester.rb
Platform: all_platforms

Description:
This module suggests persistence modules that can be used.
          The modules are suggested based on the architecture and platform
          that the user has a shell opened as well as the available exploits
          in meterpreter.
          It's important to note that not all modules will be checked.
          Exploits are chosen based on these conditions: session type,
          platform, architecture, and required default options.
Metasploit Module: Generate TCP/UDP Outbound Traffic On Multiple Ports
Type: post
Path: modules/post/multi/recon/multiport_egress_traffic.rb
Platform: linux
Authors: Stuart Morgan <stuart.morgan[at]mwrinfosecurity.com>

Description:
This module generates TCP or UDP traffic across a
          sequence of ports, and is useful for finding firewall
          holes and egress filtering. It only generates traffic
          on the port range you specify. It is up to you to
          run a responder or packet capture tool on a remote
          endpoint to determine which ports are open.
Metasploit Module: Sudo Commands
Type: post
Path: modules/post/multi/recon/sudo_commands.rb

Description:
This module examines the sudoers configuration for the session user
          and lists the commands executable via sudo.

          This module also inspects each command and reports potential avenues
          for privileged code execution due to poor file system permissions or
          permitting execution of executables known to be useful for privesc,
          such as utilities designed for file read/write, user modification,
          or execution of arbitrary operating system commands.

          Note, you may need to provide the password for the session user.
Metasploit Module: Diagnostics Agent in Solution Manager, stores unencrypted credentials for Solution Manager server
Type: post
Path: modules/post/multi/sap/smdagent_get_properties.rb
Platform: %w[bsd linux osx unix win
References: CVE-2019-0307, URL-https://conference.hitb.org/hitblockdown002/materials/D2T1%20-%20SAP%20RCE%20-%20The%20Agent%20Who%20Spoke%20Too%20Much%20-%20Yvan%20Genuer.pdf

Description:
This module retrieves the `secstore.properties` file on a SMDAgent. This file contains the credentials
          used by the SMDAgent to connect to the SAP Solution Manager server.
Metasploit Module: Multi Generic Operating System Session Close
Type: post
Path: modules/post/multi/general/close.rb
Platform: %w[linux osx unix win

Description:
This module closes the specified session. This can be useful as a finisher for automation tasks.
Metasploit Module: Write Messages to Users
Type: post
Path: modules/post/multi/general/wall.rb
Platform: %w[linux osx unix

Description:
This module utilizes the wall(1) or write(1) utilities, as appropriate,
          to send messages to users on the target system.
Metasploit Module: Firefox Webcam Chat on Privileged JavaScript Shell
Type: post
Path: modules/post/firefox/manage/webcam_chat.rb
Disclosure date: 2014-05-13
References: URL-http://www.rapid7.com/db/modules/exploit/firefox/local/exec_shellcode

Description:
This module allows streaming a webcam from a privileged Firefox JavaScript shell.
Metasploit Module: Firefox Gather Cookies from Privileged JavaScript Shell
Type: post
Path: modules/post/firefox/gather/cookies.rb
Disclosure date: 2014-03-26

Description:
This module allows collection of cookies from a Firefox Privileged JavaScript Shell.
Metasploit Module: Firefox XSS
Type: post
Path: modules/post/firefox/gather/xss.rb

Description:
This module runs the provided SCRIPT as javascript in the
          origin of the provided URL. It works by navigating to a hidden
          ChromeWindow to the URL, then injecting the SCRIPT with Function().
          The callback "send(result)" is used to send data back to the listener.
Metasploit Module: Firefox Gather Passwords from Privileged JavaScript Shell
Type: post
Path: modules/post/firefox/gather/passwords.rb
Disclosure date: 2014-04-11

Description:
This module allows collection of passwords from a Firefox Privileged JavaScript Shell.
Metasploit Module: Firefox Gather History from Privileged JavaScript Shell
Type: post
Path: modules/post/firefox/gather/history.rb
Disclosure date: 2014-04-11

Description:
This module allows collection of the entire browser history from a Firefox
          Privileged JavaScript Shell.
Metasploit Module: AIX Gather Dump Password Hashes
Type: post
Path: modules/post/aix/hashdump.rb
Authors: theLightCosine

Description:
Post module to dump the password hashes for all users on an AIX system.
Metasploit Module: KOFFEE - Kia OFFensivE Exploit
Type: post
Path: modules/post/android/local/koffee.rb
Platform: Android
Disclosure date: 2020-12-02
References: CVE-2020-8539, URL-https://sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf

Description:
This module exploits CVE-2020-8539, which is an arbitrary code execution vulnerability that allows an to
          attacker execute the micomd binary file on the head unit of Kia Motors. This module has been tested on
          SOP.003.30.18.0703, SOP.005.7.181019 and SOP.007.1.191209 head unit software versions. This module, run on an
          active session, allows an attacker to send crafted micomd commands that allow the attacker to control the head
          unit and send CAN bus frames into the Multimedia CAN (M-Can) of the vehicle.
Metasploit Module: Android Root Remove Device Locks (root)
Type: post
Path: modules/post/android/manage/remove_lock_root.rb
Platform: android

Description:
This module uses root privileges to remove the device lock.
          In some cases the original lock method will still be present but any key/gesture will
          unlock the device.
Metasploit Module: Android Settings Remove Device Locks (4.0-4.3)
Type: post
Path: modules/post/android/manage/remove_lock.rb
Platform: android
Disclosure date: 2013-10-11
References: CVE-2013-6271, URL-http://blog.curesec.com/article/blog/26.html, URL-http://www.curesec.com/data/advisories/Curesec-2013-1011.pdf

Description:
This module exploits a bug in the Android 4.0 to 4.3 com.android.settings.ChooseLockGeneric class.
          Any unprivileged app can exploit this vulnerability to remove the lockscreen.
          A logic flaw / design error exists in the settings application that allows an Intent from any
          application to clear the screen lock. The user may see that the Settings application has crashed,
          and the phone can then be unlocked by a swipe.
          This vulnerability was patched in Android 4.4.
Metasploit Module: Android Gather Dump Password Hashes for Android Systems
Type: post
Path: modules/post/android/gather/hashdump.rb
Platform: android
Authors: h00die
References: URL-https://www.pentestpartners.com/security-blog/cracking-android-passwords-a-how-to/, URL-https://hashcat.net/forum/thread-2202.html

Description:
Post Module to dump the password hashes for Android System. Root is required.
          To perform this operation, two things are needed.  First, a password.key file
          is required as this contains the hash but no salt.  Next, a sqlite3 database
          is needed (with supporting files) to pull the salt from.  Combined, this
          creates the hash we need.  Samsung based devices change the hash slightly.
Metasploit Module: Extract Subscriber Info
Type: post
Path: modules/post/android/gather/sub_info.rb
Platform: android
Authors: Auxilus

Description:
This module displays the subscriber info stored on the target phone.
          It uses call service to get values of each transaction code like IMEI, etc.
Metasploit Module: Gather Wireless SSIDs and PSKs
Type: post
Path: modules/post/android/gather/wireless_ap.rb
Platform: android
Authors: Auxilus

Description:
This module displays all wireless AP creds saved on the target device.
Metasploit Module: Android Screen Capture
Type: post
Path: modules/post/android/capture/screen.rb

Description:
This module takes a screenshot of the target phone.
Metasploit Module: Mazda 2 Instrument Cluster Accelorometer Mover
Type: post
Path: modules/post/hardware/automotive/mazda_ic_mover.rb
Platform: hardware
Authors: Jay Turla

Description:
This module moves the needle of the accelorometer and speedometer of the Mazda 2 instrument cluster.
Metasploit Module: Diagnostic State
Type: post
Path: modules/post/hardware/automotive/diagnostic_state.rb
Platform: hardware
Authors: Jay Turla

Description:
This module will keep the vehicle in a diagnostic state on rounds by sending tester present packet.
Metasploit Module: Get the Vehicle Information Such as the VIN from the Target Module
Type: post
Path: modules/post/hardware/automotive/getvinfo.rb
Platform: hardware
Authors: Craig Smith

Description:
This module queries DTCs, some common engine info, and vehicle information.

          It returns such things as engine speed, coolant temp, Diagnostic Trouble
          Codes, as well as all info stored by Mode $09 Vehicle Info, VIN, etc.
Metasploit Module: Module to Probe Different Data Points in a CAN Packet
Type: post
Path: modules/post/hardware/automotive/canprobe.rb
Platform: hardware
Authors: Craig Smith

Description:
Scans between two CAN IDs and writes data at each byte position. It will
          either write a set byte value (Default 0xFF) or iterate through all possible values
          of that byte position (takes much longer). Does not check for responses and is
          basically a simple blind fuzzer.
Metasploit Module: Check For and Prep the Pyrotechnic Devices (Airbags, Battery Clamps, etc.)
Type: post
Path: modules/post/hardware/automotive/pdt.rb
Platform: hardware
References: CVE-2017-14937, URL-https://www.researchgate.net/publication/321183727_Security_Evaluation_of_an_Airbag-ECU_by_Reusing_Threat_Modeling_Artefacts

Description:
Acting in the role of a Pyrotechnical Device Deployment Tool (PDT), this module
          will first query all Pyrotechnic Control Units (PCUs) in the target vehicle
          to discover how many pyrotechnic devices are present, then attempt to validate
          the security access token using the default simplified algorithm.  On success,
          the vehicle will be in a state that is prepped to deploy its pyrotechnic devices
          (e.g. airbags, battery clamps, etc.) via the service routine. (ISO 26021)
Metasploit Module: CAN Flood
Type: post
Path: modules/post/hardware/automotive/can_flood.rb
Platform: hardware
Authors: Pietro Biondi

Description:
This module floods a CAN interface with supplied frames.
Metasploit Module: ECU Hard Reset
Type: post
Path: modules/post/hardware/automotive/ecu_hard_reset.rb
Platform: hardware
Authors: Jay Turla

Description:
This module performs hard reset in the ECU Reset Service Identifier (0x11).
Metasploit Module: Scan CAN Bus for Diagnostic Modules
Type: post
Path: modules/post/hardware/automotive/identifymodules.rb
Platform: hardware
Authors: Craig Smith

Description:
Scan the CAN bus for any modules that can respond to UDS DSC queries.
Metasploit Module: RF Transceiver Transmitter
Type: post
Path: modules/post/hardware/rftransceiver/transmitter.rb
Platform: hardware
Authors: Craig Smith
References: URL-https://github.com/AndrewMohawk/RfCatHelpers

Description:
This module powers an HWBridge-connected radio transceiver,
          effectively transmitting on the frequency set by the FREQ option.

          NOTE: Users of this module should be aware of their local laws,
          regulations, and licensing requirements for transmitting on any
          given radio frequency.
Metasploit Module: Brute Force AM/OOK (ie: Garage Doors)
Type: post
Path: modules/post/hardware/rftransceiver/rfpwnon.rb
Platform: hardware
References: URL-https://github.com/exploitagency/github-rfpwnon/blob/master/rfpwnon.py

Description:
Post Module for HWBridge RFTranscievers.  Brute forces AM OOK or raw
          binary signals.  This is a port of the rfpwnon tool by Corey Harding.
Metasploit Module: Sends Beacons to Scan for Active ZigBee Networks
Type: post
Path: modules/post/hardware/zigbee/zstumbler.rb
Platform: hardware
Authors: Craig Smith

Description:
Send beacon signals to the broadcast address while channel hopping.
Metasploit Module: BusyBox SMB Sharing
Type: post
Path: modules/post/linux/busybox/smb_share_root.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It will modify
        the SMB configuration of the device executing BusyBox to share the root directory of
        the device.
Metasploit Module: BusyBox Download and Execute
Type: post
Path: modules/post/linux/busybox/wget_exec.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It will use wget to
        download and execute a file from the device running BusyBox.
Metasploit Module: BusyBox Ping Network Enumeration
Type: post
Path: modules/post/linux/busybox/ping_net.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It will ping a range
        of IP addresses from the router or device executing BusyBox.
Metasploit Module: BusyBox Enumerate Host Names
Type: post
Path: modules/post/linux/busybox/enum_hosts.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It will enumerate
        host names related to the device executing BusyBox.
Metasploit Module: BusyBox Enumerate Connections
Type: post
Path: modules/post/linux/busybox/enum_connections.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It will
        enumerate the connections established with the router or device executing BusyBox.
Metasploit Module: BusyBox Jailbreak
Type: post
Path: modules/post/linux/busybox/jailbreak.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will send a set of commands to an open session that is connected to a
        BusyBox limited shell (i.e. a router limited shell). It will try different known
        tricks to jailbreak the limited shell and get a full BusyBox shell.
Metasploit Module: BusyBox DMZ Configuration
Type: post
Path: modules/post/linux/busybox/set_dmz.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It allows to manage
        traffic forwarding to a target host through the BusyBox device.
Metasploit Module: BusyBox DNS Configuration
Type: post
Path: modules/post/linux/busybox/set_dns.rb
Platform: linux
Authors: Javier Vicente Vallejo

Description:
This module will be applied on a session connected to a BusyBox shell. It allows
        to set the DNS server on the device executing BusyBox so it will be sent by the
        DHCP server to network hosts.
Metasploit Module: Disable ClamAV
Type: post
Path: modules/post/linux/manage/disable_clamav.rb

Description:
This module will write to the ClamAV Unix socket to shutoff ClamAV.
Metasploit Module: IPTABLES rules removal
Type: post
Path: modules/post/linux/manage/iptables_removal.rb
Platform: linux
Authors: Alberto Rafael Rodriguez Iglesias <albertocysec[at]gmail.com>

Description:
This module will be applied on a session connected to a shell. It will remove all IPTABLES rules.
Metasploit Module: Geutebruck Camera Deface
Type: post
Path: modules/post/linux/manage/geutebruck_post_exp.rb
Platform: linux

Description:
This module will take an existing session on a vulnerable Geutebruck Camera
        and will allow the user to either freeze the camera and display the last
        image from the video stream, display an image on the camera, or restore
        the camera back to displaying the current feed/stream.
Metasploit Module: Native DNS Spoofing module
Type: post
Path: modules/post/linux/manage/dns_spoofing.rb
Platform: linux
Authors: Alberto Rafael Rodriguez Iglesias <albertocysec[at]gmail.com>

Description:
This module will be applied on a session connected to a shell. It will redirect DNS Request to remote DNS server.
Metasploit Module: Linux Manage Download and Execute
Type: post
Path: modules/post/linux/manage/download_exec.rb
Platform: linux

Description:
This module downloads and runs a file with bash. It first tries to use curl as
          its HTTP client and then wget if it's not found. Bash found in the PATH is used
          to execute the file.
Metasploit Module: Phpmyadmin credentials stealer
Type: post
Path: modules/post/linux/gather/phpmyadmin_credsteal.rb
Platform: linux

Description:
This module gathers Phpmyadmin creds from target linux machine.