deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Windows SecureCRT Session Information Enumeration
Type: post
Path: modules/post/windows/gather/credentials/securecrt.rb
References: URL-https://github.com/HyperSine/how-does-SecureCRT-encrypt-password/blob/master/doc/how-does-SecureCRT-encrypt-password.md

Description:
This module will determine if SecureCRT is installed on the target system and, if it is, it will try to
          dump all saved session information from the target. The passwords for these saved sessions will then be decrypted
          where possible, using the decryption information that HyperSine reverse engineered.

          Note that whilst SecureCRT has installers for Linux, Mac and Windows, this module presently only works on Windows.
Metasploit Module: Windows Gather HeidiSQL Saved Password Extraction
Type: post
Path: modules/post/windows/gather/credentials/heidisql.rb
Authors: h0ng10

Description:
This module extracts saved passwords from the HeidiSQL client. These
          passwords are stored in the registry. They are encrypted with a custom algorithm.
          This module extracts and decrypts these passwords.
Metasploit Module: WhatsUp Gold Credentials Dump
Type: post
Path: modules/post/windows/gather/credentials/whatsupgold_credential_dump.rb
Disclosure date: 2022-11-22
References: CVE-2022-29845, CVE-2022-29846, CVE-2022-29847, CVE-2022-29848, URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29845, URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29846, URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29847, URL-https://nvd.nist.gov/vuln/detail/CVE-2022-29848, URL-https://blog.assetnote.io/2022/06/09/whatsup-gold-exploit/

Description:
This module exports and decrypts credentials from WhatsUp Gold to a CSV file;
          it is intended as a post-exploitation module for Windows hosts with WhatsUp
          Gold installed. The module has been tested on and can successfully decrypt
          credentials from WhatsUp versions 11.0 to the latest (22.x). Extracted
          credentials are automatically added to loot.
Metasploit Module: Aim Credential Gatherer
Type: post
Path: modules/post/windows/gather/credentials/aim.rb
Platform: win

Description:
This module searches for Aim credentials on a Windows host.
Metasploit Module: Windows Gather FTP Explorer (FTPX) Credential Extraction
Type: post
Path: modules/post/windows/gather/credentials/ftpx.rb

Description:
This module finds saved login credentials for the FTP Explorer (FTPx)
          FTP client for Windows.
Metasploit Module: Windows Gather Credential Store Enumeration and Decryption Module
Type: post
Path: modules/post/windows/gather/credentials/enum_cred_store.rb
Platform: win
Authors: Kx499

Description:
This module will enumerate the Microsoft Credential Store and decrypt the
          credentials. This module can only access credentials created by the user the
          process is running as.  It cannot decrypt Domain Network Passwords, but will
          display the username and location.
Metasploit Module: Windows Gather Credentials IMVU Game Client
Type: post
Path: modules/post/windows/gather/credentials/imvu.rb

Description:
This module extracts account username & password from the IMVU game client
          and stores it as loot.
Metasploit Module: Windows Gather DynaZIP Saved Password Extraction
Type: post
Path: modules/post/windows/gather/credentials/dynazip_log.rb
Platform: win
Disclosure date: 2001-03-27
Authors: bcoles
References: CVE-2001-0152, MSB-MS01-019, URL-https://support.microsoft.com/en-us/kb/265131

Description:
This module extracts clear text credentials from dynazip.log.
          The log file contains passwords used to encrypt compressed zip
          files in Microsoft Plus! 98 and Windows Me.
Metasploit Module: Windows Gather Remote Desktop Connection Manager Saved Password Extraction
Type: post
Path: modules/post/windows/gather/credentials/rdc_manager_creds.rb

Description:
This module extracts and decrypts saved Microsoft Remote Desktop
          Connection Manager (RDCMan) passwords the .RDG files of users.
          The module will attempt to find the files configured for all users
          on the target system. Passwords for managed hosts are encrypted by
          default.  In order for decryption of these passwords to be successful,
          this module must be executed under the same account as the user which
          originally encrypted the password.  Passwords stored in plain text will
          be captured and documented.
Metasploit Module: Windows Gather MobaXterm Passwords
Type: post
Path: modules/post/windows/gather/credentials/moba_xterm.rb
Authors: Kali-Team <kali-team[at]qq.com>
References: URL-https://blog.kali-team.cn/Metasploit-MobaXterm-0b976b993c87401598be4caab8cbe0cd

Description:
This module will determine if MobaXterm is installed on the target system and, if it is, it will try to
          dump all saved session information from the target. The passwords for these saved sessions will then be decrypted
          where possible, using the decryption information that HyperSine reverse engineered.
Metasploit Module: Thunderbird Credential Gatherer
Type: post
Path: modules/post/windows/gather/credentials/thunderbird.rb
Platform: win

Description:
This module searches for Thunderbird credentials on a Windows host.
Metasploit Module: Windows Gather VNC Password Extraction
Type: post
Path: modules/post/windows/gather/credentials/vnc.rb

Description:
This module extract DES encrypted passwords in known VNC locations
Metasploit Module: Windows Gather Avira Password Extraction
Type: post
Path: modules/post/windows/gather/credentials/avira_password.rb

Description:
This module extracts the weakly hashed password
          which is used to protect a Avira Antivirus (<= 15.0.17.273) installation.
Metasploit Module: Halloy IRC Credential Gatherer
Type: post
Path: modules/post/windows/gather/credentials/halloy_irc.rb
Platform: win

Description:
This module searches for credentials stored on Halloy IRC Client on a Windows host.
Metasploit Module: Windows Gather Meebo Password Extractor
Type: post
Path: modules/post/windows/gather/credentials/meebo.rb

Description:
This module extracts login account password stored by
          Meebo Notifier, a desktop version of Meebo's Online Messenger.
Metasploit Module: Srware Credential Gatherer
Type: post
Path: modules/post/windows/gather/credentials/srware.rb
Platform: win

Description:
This module searches for Srware credentials on a Windows host. SRWare Iron is a Chromium-based web browser developed by the German company SRWare.
Metasploit Module: Windows Escalate Golden Ticket
Type: post
Path: modules/post/windows/escalate/golden_ticket.rb
References: URL-https://github.com/gentilkiwi/mimikatz/wiki/module-~-kerberos

Description:
This module will create a Golden Kerberos Ticket using the Mimikatz Kiwi Extension. If no
          options are applied it will attempt to identify the current domain, the domain administrator
          account, the target domain SID, and retrieve the krbtgt NTLM hash from the database. By default
          the well-known Administrator's groups 512, 513, 518, 519, and 520 will be applied to the ticket.
Metasploit Module: Windows Escalate NtUserLoadKeyboardLayoutEx Privilege Escalation
Type: post
Path: modules/post/windows/escalate/ms10_073_kbdlayout.rb
Disclosure date: 2010-10-12
References: OSVDB-68552, CVE-2010-2743, MSB-MS10-073, URL-https://web.archive.org/web/[PII_REDACTED]0201/http://www.reversemode.com/index.php?option=com_content&task=view&id=71&Itemid=1, EDB-15985

Description:
This module exploits the keyboard layout vulnerability exploited by Stuxnet. When
          processing specially crafted keyboard layout files (DLLs), the Windows kernel fails
          to validate that an array index is within the bounds of the array. By loading
          a specially crafted keyboard layout, an attacker can execute code in Ring 0.
Metasploit Module: Windows Escalate Locked Desktop Unlocker
Type: post
Path: modules/post/windows/escalate/screen_unlock.rb
References: URL-http://www.storm.net.nz/projects/16

Description:
This module unlocks a locked Windows desktop by patching
          the respective code inside the LSASS.exe process. This
          patching process can result in the target system hanging or
          even rebooting, so be careful when using this module on
          production systems.
Metasploit Module: Windows Escalate SMB Icon LNK Dropper
Type: post
Path: modules/post/windows/escalate/droplnk.rb

Description:
This module drops a shortcut (LNK file) that has a ICON reference
          existing on the specified remote host, causing SMB and WebDAV
          connections to be initiated from any user that views the shortcut.
Metasploit Module: Windows unmarshal post exploitation
Type: post
Path: modules/post/windows/escalate/unmarshal_cmd_exec.rb
Platform: win
Disclosure date: 2018-08-05
References: CVE-2018-0824, URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824, URL-https://github.com/x73x61x6ex6ax61x79/UnmarshalPwn, EDB-44906

Description:
This module exploits a local privilege escalation bug which exists
          in Microsoft COM for Windows when it fails to properly handle serialized objects.
Metasploit Module: Windows Escalation
Type: post
Path: modules/post/windows/escalate/getsystem.rb
Authors: hdm

Description:
This module uses the `getsystem` command to escalate the current session to the SYSTEM account using various
          techniques.
Metasploit Module: Windows Recon Computer Browser Discovery
Type: post
Path: modules/post/windows/recon/computer_browser_discovery.rb

Description:
This module uses railgun to discover hostnames and IPs on the network.
          LTYPE should be set to one of the following values: WK (all workstations), SVR (all servers),
          SQL (all SQL servers), DC (all Domain Controllers), DCBKUP (all Domain Backup Servers),
          NOVELL (all Novell servers), PRINTSVR (all Print Que servers), MASTERBROWSER (all Master Browsers),
          WINDOWS (all Windows hosts), or UNIX (all Unix hosts).
Metasploit Module: Windows Outbound-Filtering Rules
Type: post
Path: modules/post/windows/recon/outbound_ports.rb
Platform: win
Authors: Borja Merino <bmerinofe[at]gmail.com>
References: URL-http://www.shelliscoming.com/2014/11/getting-outbound-filtering-rules-by.html

Description:
This module makes some kind of TCP traceroute to get outbound-filtering rules.
          It will try to make a TCP connection to a certain public IP address (this IP
          does not need to be under your control) using different TTL incremental values.
          This way if you get an answer (ICMP TTL time exceeded packet) from a public IP
          device you can infer that the destination port is allowed. Setting STOP to
          true the module will stop as soon as you reach a public IP (this will generate
          less noise in the network).
Metasploit Module: Windows Disconnect Wireless Connection
Type: post
Path: modules/post/windows/wlan/wlan_disconnect.rb
Authors: theLightCosine

Description:
This module disconnects the current wireless network connection
          on the specified interface.
Metasploit Module: Windows Gather Wireless Profile
Type: post
Path: modules/post/windows/wlan/wlan_profile.rb
Authors: theLightCosine

Description:
This module extracts saved Wireless LAN profiles. It will also try to decrypt
          the network key material. Behavior is slightly different between OS versions
          when it comes to WPA. In Windows Vista/7 we will get the passphrase. In
          Windows XP we will get the PBKDF2 derived key.
Metasploit Module: Windows Send Probe Request Packets
Type: post
Path: modules/post/windows/wlan/wlan_probe_request.rb

Description:
This module send probe requests through the wlan interface.
          The ESSID field will be use to set a custom message.
Metasploit Module: Windows Gather Wireless BSS Info
Type: post
Path: modules/post/windows/wlan/wlan_bss_list.rb
Authors: theLightCosine

Description:
This module gathers information about the wireless Basic Service Sets
          available to the victim machine.
Metasploit Module: Windows Gather Wireless Current Connection Info
Type: post
Path: modules/post/windows/wlan/wlan_current_connection.rb
Authors: theLightCosine

Description:
This module gathers information about the current connection on each
          wireless lan interface on the target machine.
Metasploit Module: Windows Capture Winlogon Lockout Credential Keylogger
Type: post
Path: modules/post/windows/capture/lockout_keylogger.rb
Platform: win
References: URL-http://blog.metasploit.com/2010/12/capturing-windows-logons-with.html

Description:
This module migrates and logs Microsoft Windows user's passwords via
          Winlogon.exe using idle time and natural system changes to give a
          false sense of security to the user.
Metasploit Module: Windows Capture Keystroke Recorder
Type: post
Path: modules/post/windows/capture/keylog_recorder.rb

Description:
This module can be used to capture keystrokes. To capture keystrokes when the session is running
          as SYSTEM, the MIGRATE option must be enabled and the CAPTURE_TYPE option should be set to one of
          Explorer, Winlogon, or a specific PID. To capture the keystrokes of the interactive user, the
          Explorer option should be used with MIGRATE enabled. Keep in mind that this will demote this session
          to the user's privileges, so it makes sense to create a separate session for this task. The Winlogon
          option will capture the username and password entered into the logon and unlock dialog. The LOCKSCREEN
          option can be combined with the Winlogon CAPTURE_TYPE to for the user to enter their clear-text
          password. It is recommended to run this module as a job, otherwise it will tie up your framework user interface.
Metasploit Module: Mikrotik Gather Device General Information
Type: post
Path: modules/post/networking/gather/enum_mikrotik.rb
Platform: mikrotik
Authors: h00die

Description:
This module collects Mikrotik device information and configuration.
          This module has been tested against RouterOS 6.45.9.
Metasploit Module: Brocade Gather Device General Information
Type: post
Path: modules/post/networking/gather/enum_brocade.rb

Description:
This module collects Brocade device information and configuration.
          This module has been tested against an icx6430 running 08.0.20T311.
Metasploit Module: Juniper Gather Device General Information
Type: post
Path: modules/post/networking/gather/enum_juniper.rb

Description:
This module collects a Juniper ScreenOS and JunOS device information and configuration.
Metasploit Module: F5 Gather Device General Information
Type: post
Path: modules/post/networking/gather/enum_f5.rb

Description:
This module collects a F5's device information and configuration.
Metasploit Module: Cisco Gather Device General Information
Type: post
Path: modules/post/networking/gather/enum_cisco.rb

Description:
This module collects a Cisco IOS or NXOS device information and configuration.
Metasploit Module: VyOS Gather Device General Information
Type: post
Path: modules/post/networking/gather/enum_vyos.rb
Authors: h00die

Description:
This module collects VyOS device information and configuration.
Metasploit Module: PHP Reverse TCP Stager
Type: payload
Path: modules/payloads/stagers/php/reverse_tcp.rb
Platform: php
Authors: egypt

Description:
Reverse PHP connect back stager with checks for disabled functions
Metasploit Module: Bind TCP Stager IPv6 with UUID Support
Type: payload
Path: modules/payloads/stagers/php/bind_tcp_ipv6_uuid.rb
Platform: php

Description:
Listen for a connection over IPv6 with UUID Support
Metasploit Module: PHP Reverse TCP Stager
Type: payload
Path: modules/payloads/stagers/php/reverse_tcp_uuid.rb
Platform: php

Description:
Reverse PHP connect back stager with checks for disabled functions
Metasploit Module: Bind TCP Stager with UUID Support (Linux x86)
Type: payload
Path: modules/payloads/stagers/linux/x86/bind_tcp_uuid.rb
Platform: linux

Description:
Listen for a connection with UUID Support (Linux x86)
Metasploit Module: Bind IPv6 TCP Stager with UUID Support (Linux x86)
Type: payload
Path: modules/payloads/stagers/linux/x86/bind_ipv6_tcp_uuid.rb
Platform: linux

Description:
Listen for an IPv6 connection with UUID Support (Linux x86)
Metasploit Module: Reverse TCP Stager with UUID Support (OSX x64)
Type: payload
Path: modules/payloads/stagers/osx/x64/reverse_tcp_uuid.rb
Platform: osx
Authors: timwr

Description:
Connect back to the attacker with UUID Support (OSX x64)
Metasploit Module: Hidden Bind TCP Stager
Type: payload
Path: modules/payloads/stagers/windows/bind_hidden_tcp.rb
Platform: win
References: URL-http://www.shelliscoming.com/2014/03/hidden-bind-shell-keep-your-shellcode.html

Description:
Listen for a connection from a hidden port and spawn a command shell to the allowed host.
Metasploit Module: Hidden Bind Ipknock TCP Stager
Type: payload
Path: modules/payloads/stagers/windows/bind_hidden_ipknock_tcp.rb
Platform: win
References: URL-http://www.shelliscoming.com/2014/07/ip-knock-shellcode-spoofed-ip-as.html

Description:
Listen for a connection. First, the port will need to be knocked from
          the IP defined in KHOST. This IP will work as an authentication method
          (you can spoof it with tools like hping). After that you could get your
          shellcode from any IP. The socket will appear as "closed," thus helping to
          hide the shellcode
Metasploit Module: Windows x86 Reverse Named Pipe (SMB) Stager
Type: payload
Path: modules/payloads/stagers/windows/reverse_named_pipe.rb
Platform: win
Authors: OJ Reeves

Description:
Connect back to the attacker via a named pipe pivot
Metasploit Module: Bind TCP Stager with UUID Support (Windows x86)
Type: payload
Path: modules/payloads/stagers/windows/bind_tcp_uuid.rb
Platform: win

Description:
Listen for a connection with UUID Support (Windows x86)
Metasploit Module: Reverse All-Port TCP Stager
Type: payload
Path: modules/payloads/stagers/windows/reverse_tcp_allports.rb
Platform: win
Authors: hdm

Description:
Try to connect back to the attacker, on all possible ports (1-65535, slowly)
Metasploit Module: Bind IPv6 TCP Stager with UUID Support (Windows x86)
Type: payload
Path: modules/payloads/stagers/windows/bind_ipv6_tcp_uuid.rb
Platform: win

Description:
Listen for an IPv6 connection with UUID Support (Windows x86)
Metasploit Module: Windows x64 Reverse Named Pipe (SMB) Stager
Type: payload
Path: modules/payloads/stagers/windows/x64/reverse_named_pipe.rb
Platform: win
Authors: OJ Reeves

Description:
Connect back to the attacker via a named pipe pivot
Metasploit Module: Windows x64 Reverse HTTP Stager (wininet)
Type: payload
Path: modules/payloads/stagers/windows/x64/reverse_https.rb
Platform: win

Description:
Tunnel communication over HTTP (Windows x64 wininet)
Metasploit Module: Windows x64 Reverse HTTP Stager (wininet)
Type: payload
Path: modules/payloads/stagers/windows/x64/reverse_http.rb
Platform: win
Authors: OJ Reeves

Description:
Tunnel communication over HTTP (Windows x64 wininet)
Metasploit Module: Windows x64 Reverse HTTP Stager (winhttp)
Type: payload
Path: modules/payloads/stagers/windows/x64/reverse_winhttp.rb
Platform: win

Description:
Tunnel communication over HTTP (Windows x64 winhttp)
Metasploit Module: Bind TCP Stager with UUID Support (Windows x64)
Type: payload
Path: modules/payloads/stagers/windows/x64/bind_tcp_uuid.rb
Platform: win

Description:
Listen for a connection with UUID Support (Windows x64)
Metasploit Module: Reverse TCP Stager with UUID Support (Windows x64)
Type: payload
Path: modules/payloads/stagers/windows/x64/reverse_tcp_uuid.rb
Platform: win

Description:
Connect back to the attacker with UUID Support (Windows x64)
Metasploit Module: Windows x64 IPv6 Bind TCP Stager with UUID Support
Type: payload
Path: modules/payloads/stagers/windows/x64/bind_ipv6_tcp_uuid.rb
Platform: win

Description:
Listen for an IPv6 connection with UUID Support (Windows x64)
Metasploit Module: Windows x64 Reverse HTTPS Stager (winhttp)
Type: payload
Path: modules/payloads/stagers/windows/x64/reverse_winhttps.rb
Platform: win

Description:
Tunnel communication over HTTPS (Windows x64 winhttp)
Metasploit Module: Python Meterpreter
Type: payload
Path: modules/payloads/stages/python/meterpreter.rb
Platform: python
Authors: Spencer McIntyre

Description:
Run a meterpreter server in Python (compatible with 2.5-2.7 & 3.1+)
Metasploit Module: Architecture-Independent Meterpreter Stage
Type: payload
Path: modules/payloads/stages/multi/meterpreter.rb
Platform: multi
Authors: OJ Reeves

Description:
Handle Meterpreter sessions regardless of the target arch/platform
Metasploit Module: Command Shell
Type: payload
Path: modules/payloads/stages/java/shell.rb
Platform: java
Authors: mihi

Description:
Spawn a piped command shell (cmd.exe on Windows, /bin/sh everywhere else)
Metasploit Module: Mac OS X x86 iSight Photo Capture
Type: payload
Path: modules/payloads/stages/osx/x86/isight.rb
Authors: ddz

Description:
Inject a Mach-O bundle to capture a photo from the iSight (staged)
Metasploit Module: OS X (vfork) Command Shell
Type: payload
Path: modules/payloads/stages/osx/x86/vforkshell.rb
Platform: osx
Authors: ddz

Description:
Call vfork() if necessary and spawn a command shell (staged)
Metasploit Module: Windows Meterpreter (Reflective Injection)
Type: payload
Path: modules/payloads/stages/windows/meterpreter.rb
Authors: skape

Description:
Inject the Meterpreter server DLL via the Reflective Dll Injection payload (staged). Requires Windows XP SP2 or newer
Metasploit Module: Windows Inject PE Files
Type: payload
Path: modules/payloads/stages/windows/peinject.rb
Platform: win
References: URL-https://github.com/EgeBalci/Amber

Description:
Inject a custom native PE file into the exploited process using a reflective PE loader. The reflective PE
          loader will execute the pre-mapped PE image starting from the address of entry after performing image base
          relocation and API address resolution. This module requires a PE file that contains relocation data and a
          valid (uncorrupted) import table. PE files with CLR(C#/.NET executables), bounded imports, and TLS callbacks
          are not currently supported. Also PE files which use resource loading might crash.
Metasploit Module: Windows x64 VNC Server (Reflective Injection)
Type: payload
Path: modules/payloads/stages/windows/x64/vncinject.rb

Description:
Inject a VNC Dll via a reflective loader (Windows x64) (staged)
Metasploit Module: Windows Meterpreter (Reflective Injection x64)
Type: payload
Path: modules/payloads/stages/windows/x64/meterpreter.rb
Authors: skape

Description:
Inject the meterpreter server DLL via the Reflective Dll Injection payload (staged). Requires Windows XP SP2 or newer
Metasploit Module: Windows x64 Command Shell
Type: payload
Path: modules/payloads/stages/windows/x64/shell.rb
Platform: win

Description:
Spawn a piped command shell (Windows x64) (staged)
Metasploit Module: Windows Inject Reflective PE Files
Type: payload
Path: modules/payloads/stages/windows/x64/peinject.rb
Platform: win
References: URL-https://github.com/EgeBalci/Amber

Description:
Inject a custom native PE file into the exploited process using a reflective PE loader. The reflective PE
          loader will execute the pre-mapped PE image starting from the address of entry after performing image base
          relocation and API address resolution. This module requires a PE file that contains relocation data and a
          valid (uncorrupted) import table. PE files with CLR(C#/.NET executables), bounded imports, and TLS callbacks
          are not currently supported. Also PE files which use resource loading might crash.
Metasploit Module: Command Shell, Bind TCP (via python)
Type: payload
Path: modules/payloads/singles/python/shell_bind_tcp.rb
Platform: python
Authors: mumbai

Description:
Creates an interactive shell via Python, encodes with base64 by design. Compatible with Python 2.4-2.7 and 3.4+.