deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Koyo DirectLogic PLC Password Brute Force Utility
Type: auxiliary
Path: modules/auxiliary/scanner/scada/koyo_login.rb
Disclosure date: Jan 19 2012
References: URL-http://www.digitalbond.com/tools/basecamp/metasploit-modules/

Description:
This module attempts to authenticate to a locked Koyo DirectLogic PLC.
        The PLC uses a restrictive passcode, which can be A0000000 through A9999999.
        The "A" prefix can also be changed by the administrator to any other character,
        which can be set through the PREFIX option of this module.

        This module is based on the original 'koyobrute.rb' Basecamp module from
        DigitalBond.
Metasploit Module: Modbus Version Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/scada/modbusdetect.rb
Disclosure date: Nov 1 2011
References: URL-https://www.saia-pcd.com/en/products/plc/pcd-overview/Pages/pcd1-m2.aspx, URL-https://en.wikipedia.org/wiki/Modbus:TCP

Description:
This module detects the Modbus service, tested on a SAIA PCD1.M2 system.
        Modbus is a clear text protocol used in common SCADA systems, developed
        originally as a serial-line (RS232) async protocol, and later transformed to IP,
        which is called ModbusTCP.
Metasploit Module: Digi RealPort Serial Server Port Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/scada/digi_realport_serialport_scan.rb
References: URL-https://www.digi.com/resources/library/technical-briefs/fs_realport, URL-https://web.archive.org/web/[PII_REDACTED]4641/http://www.digi.com/support/productdetail?pid=2229&type=drivers

Description:
Identify active ports on RealPort-enabled serial servers.
Metasploit Module: Digi ADDP Information Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/scada/digi_addp_version.rb
Authors: hdm
References: URL-http://qbeukes.blogspot.com/2009/11/advanced-digi-discovery-protocol_21.html, URL-https://www.digi.com/resources/documentation/digidocs/90001537/#References/r_Advanced_Device_Discovery_Prot.htm?Highlight=advanced%20device%20discovery%20protocol

Description:
Discover host information through the Digi International ADDP service
Metasploit Module: BACnet Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/scada/bacnet_l3.rb
Authors: Paz @ SCADAfence

Description:
Discover BACnet devices by broadcasting Who-is message, then poll
        discovered devices for properties including model name,
        software version, firmware revision and description.
Metasploit Module: Digi RealPort Serial Server Version
Type: auxiliary
Path: modules/auxiliary/scanner/scada/digi_realport_version.rb
References: URL-https://www.digi.com/resources/library/technical-briefs/fs_realport, URL-https://web.archive.org/web/[PII_REDACTED]4641/http://www.digi.com/support/productdetail?pid=2229&type=drivers

Description:
Detect serial servers that speak the RealPort protocol.
Metasploit Module: Telephone Line Voice Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/voice/recorder.rb

Description:
This module dials a range of phone numbers and records audio from each answered call
Metasploit Module: DB2 Discovery Service Detection
Type: auxiliary
Path: modules/auxiliary/scanner/db2/discovery.rb

Description:
This module simply queries the DB2 discovery service for information.
Metasploit Module: DB2 Authentication Brute Force Utility
Type: auxiliary
Path: modules/auxiliary/scanner/db2/db2_auth.rb
Authors: todb
References: CVE-1999-0502

Description:
This module attempts to authenticate against a DB2 instance
        using username and password combinations indicated by the
        USER_FILE, PASS_FILE, and USERPASS_FILE options.
Metasploit Module: NeXpose API Interface Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/nexpose/nexpose_api_login.rb

Description:
This module simply attempts to login to a NeXpose API interface using a
        specific user/pass.
Metasploit Module: SIP Username Enumerator (TCP)
Type: auxiliary
Path: modules/auxiliary/scanner/sip/enumerator_tcp.rb
Authors: et

Description:
Scan for numeric username/extensions using OPTIONS/REGISTER requests
Metasploit Module: SIPDroid Extension Grabber
Type: auxiliary
Path: modules/auxiliary/scanner/sip/sipdroid_ext_enum.rb
Authors: Anibal Aguiar <anibal.aguiar[at]gmail.com>
References: BID-47710, URL-https://seclists.org/fulldisclosure/2011/May/83

Description:
This module exploits a leak of extension/SIP Gateway
          on SIPDroid 1.6.1 beta, 2.0.1 beta, 2.2 beta (tested in Android 2.1 and 2.2 - official Motorola release)
          (other versions may be affected).
Metasploit Module: SIP Username Enumerator (UDP)
Type: auxiliary
Path: modules/auxiliary/scanner/sip/enumerator.rb
Authors: et

Description:
Scan for numeric username/extensions using OPTIONS/REGISTER requests
Metasploit Module: Finger Service User Enumerator
Type: auxiliary
Path: modules/auxiliary/scanner/finger/finger_users.rb
Authors: hdm

Description:
Identify valid users through the finger service using a variety of tricks
Metasploit Module: Redis File Upload
Type: auxiliary
Path: modules/auxiliary/scanner/redis/file_upload.rb
Disclosure date: 2015-11-11
References: URL-http://antirez.com/news/96, URL-http://web.archive.org/web/[PII_REDACTED]0448/https://blog.knownsec.com/2015/11/analysis-of-redis-unauthorized-of-expolit/, URL-https://redis.io/topics/protocol

Description:
This module can be used to leverage functionality exposed by Redis to
          achieve somewhat arbitrary file upload to a file and directory to
          which the user account running the redis instance has access.  It is
          not totally arbitrary because the exact contents of the file cannot
          be completely controlled given the nature of how Redis stores its
          database on disk.

Check method (fingerprinting):
connect
    # they are only vulnerable if we can run the CONFIG command, so try that
    return Exploit::CheckCode::Safe('Redis CONFIG command is not accessible') unless (config_data = redis_command('CONFIG', 'GET', '*')) && config_data =~ /dbfilename/

    if (info_data = redis_command('INFO')) && /redis_version:(?<redis_version>\S+)/ =~ info_data
      report_redis(redis_version)
    end

    Exploit::CheckCode::Vulnerable('Redis CONFIG command is accessible and can be used for file upload')
  ensure
    disconnect
  end
Metasploit Module: Redis Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/redis/redis_login.rb
References: URL-https://redis.io/topics/protocol

Description:
This module attempts to authenticate to an Redis service.
Metasploit Module: Redis Command Execute Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/redis/redis_server.rb

Description:
This module locates Redis endpoints by attempting to run a specified
          Redis command.
Metasploit Module: SMTP Open Relay Detection
Type: auxiliary
Path: modules/auxiliary/scanner/smtp/smtp_relay.rb
References: URL-http://www.ietf.org/rfc/rfc2821.txt, URL-https://svn.nmap.org/nmap/scripts/smtp-open-relay.nse

Description:
This module tests if an SMTP server will accept (via a code 250)
        an e-mail by using a variation of testing methods.
        Some of the extended methods will try to abuse configuration or mailserver flaws.
Metasploit Module: SMTP NTLM Domain Extraction
Type: auxiliary
Path: modules/auxiliary/scanner/smtp/smtp_ntlm_domain.rb
References: URL-https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smtpntlm/a048c79f-7597-401b-bcb4-521d682de765

Description:
Extract the Windows domain name from an SMTP NTLM challenge.
Metasploit Module: SMTP User Enumeration Utility
Type: auxiliary
Path: modules/auxiliary/scanner/smtp/smtp_enum.rb
References: URL-http://www.ietf.org/rfc/rfc2821.txt, OSVDB-12551, CVE-1999-0531

Description:
The SMTP service has two internal commands that allow the enumeration
        of users: VRFY (confirming the names of valid users) and EXPN (which
        reveals the actual address of users aliases and lists of e-mail
        (mailing lists)). Through the implementation of these SMTP commands can
        reveal a list of valid users.
Metasploit Module: NAT-PMP External Port Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/natpmp/natpmp_portscan.rb
Authors: Jon Hart <jhart[at]spoofed.org>

Description:
Scan NAT devices for their external listening ports using NAT-PMP
Metasploit Module: NFS Mount Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/nfs/nfsmount.rb
Authors: <tebo[at]attackresearch.com>
References: CVE-1999-0170, CVE-1999-0554, URL-https://www.ietf.org/rfc/rfc1094.txt

Description:
This module scans NFS mounts and their permissions.
Metasploit Module: Kerberos Authentication Check Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/kerberos/kerberos_login.rb

Description:
This module will test Kerberos logins on a range of machines and
          report successful logins.  If you have loaded a database plugin
          and connected to a database this module will record successful
          logins and hosts so you can track your access.

          Kerberos accounts which do not require pre-authentication will
          have the TGT logged for offline cracking, this technique is known as AS-REP Roasting.

          It is also able to identify whether user accounts are enabled or
          disabled/locked out.
Metasploit Module: IPv6 Local Neighbor Discovery Using Router Advertisement
Type: auxiliary
Path: modules/auxiliary/scanner/discovery/ipv6_neighbor_router_advertisement.rb
Authors: wuntee
References: URL-http://wuntee.blogspot.com/2010/11/ipv6-link-local-host-discovery-concept.html

Description:
Send a spoofed router advertisement with high priority to force hosts to
        start the IPv6 address auto-config. Monitor for IPv6 host advertisements,
        and try to guess the link-local address by concatenating the prefix, and
        the host portion of the IPv6 address.  Use NDP host solicitation to
        determine if the IP address is valid.
Metasploit Module: ARP Sweep Local Network Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/discovery/arp_sweep.rb
Authors: belch

Description:
Enumerate alive hosts in local network using ARP requests.
Metasploit Module: UDP Service Prober
Type: auxiliary
Path: modules/auxiliary/scanner/discovery/udp_probe.rb
Authors: hdm

Description:
Detect common UDP services using sequential probes.
Metasploit Module: IPv6 Link Local/Node Local Ping Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/discovery/ipv6_multicast_ping.rb
Authors: wuntee
References: URL-http://wuntee.blogspot.com/2010/12/ipv6-ping-host-discovery-metasploit.html

Description:
Send a ICMPv6 ping request to all default multicast addresses, and wait to see who responds.
Metasploit Module: IPv6 Local Neighbor Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/discovery/ipv6_neighbor.rb
Authors: belch

Description:
Enumerate local IPv6 hosts which respond to Neighbor Solicitations with a link-local address.
        Note, that like ARP scanning, this usually cannot be performed beyond the local
        broadcast network.
Metasploit Module: rlogin Authentication Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/rservices/rlogin_login.rb
References: CVE-1999-0651, CVE-1999-0502

Description:
This module will test an rlogin service on a range of machines and
        report successful logins.

        NOTE: This module requires access to bind to privileged ports (below 1024).
Metasploit Module: rsh Authentication Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/rservices/rsh_login.rb
References: CVE-1999-0651, CVE-1999-0502

Description:
This module will test a shell (rsh) service on a range of machines and
        report successful logins.

        NOTE: This module requires access to bind to privileged ports (below 1024).
Metasploit Module: rexec Authentication Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/rservices/rexec_login.rb
References: CVE-1999-0651, CVE-1999-0502

Description:
This module will test an rexec service on a range of machines and
        report successful logins.

        NOTE: This module requires access to bind to privileged ports (below 1024).
Metasploit Module: Apple Filing Protocol Info Enumerator
Type: auxiliary
Path: modules/auxiliary/scanner/afp/afp_server_info.rb
References: URL-https://web.archive.org/web/[PII_REDACTED]1753/https://developer.apple.com/library/mac/#documentation/Networking/Reference/AFP_Reference/Reference/reference.html

Description:
This module fetches AFP server information, including server name,
          network address, supported AFP versions, signature, machine type,
          and server flags.
Metasploit Module: Apple Filing Protocol Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/afp/afp_login.rb
References: URL-https://web.archive.org/web/[PII_REDACTED]1753/https://developer.apple.com/library/mac/#documentation/Networking/Reference/AFP_Reference/Reference/reference.html, URL-https://developer.apple.com/library/mac/documentation/networking/conceptual/afp/AFPSecurity/AFPSecurity.html

Description:
This module attempts to bruteforce authentication credentials for AFP.
Metasploit Module: Varnish Cache CLI File Read
Type: auxiliary
Path: modules/auxiliary/scanner/varnish/varnish_cli_file_read.rb
References: OSVDB-67670, CVE-2009-2936, EDB-35581, URL-https://www.varnish-cache.org/trac/wiki/CLI

Description:
This module attempts to read the first line of a file by abusing the error message when
                           compiling a file with vcl.load.
Metasploit Module: Varnish Cache CLI Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/varnish/varnish_cli_login.rb
References: OSVDB-67670, CVE-2009-2936, EDB-35581, URL-https://www.varnish-cache.org/trac/wiki/CLI

Description:
This module attempts to login to the Varnish Cache (varnishd) CLI instance using a bruteforce
                           list of passwords.
Metasploit Module: Nessus XMLRPC Interface Ping Utility
Type: auxiliary
Path: modules/auxiliary/scanner/nessus/nessus_xmlrpc_ping.rb

Description:
This module simply attempts to find and check
        for Nessus XMLRPC interface.'
Metasploit Module: Nessus RPC Interface Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/nessus/nessus_rest_login.rb

Description:
This module will attempt to authenticate to a Nessus server RPC interface.
Metasploit Module: Nessus XMLRPC Interface Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/nessus/nessus_xmlrpc_login.rb

Description:
This module simply attempts to login to a Nessus XMLRPC interface using a
        specific user/pass.
Metasploit Module: Nessus NTP Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/nessus/nessus_ntp_login.rb

Description:
This module attempts to authenticate to a Nessus NTP service.
Metasploit Module: Canon IR-Adv Password Extractor
Type: auxiliary
Path: modules/auxiliary/scanner/printer/canon_iradv_pwd_extract.rb

Description:
This module will extract the passwords from address books on various Canon IR-Adv mfp devices.
          Tested models:
          iR-ADV C2030,
          iR-ADV 4045,
          iR-ADV C5030,
          iR-ADV C5235,
          iR-ADV C5240,
          iR-ADV 6055,
          iR-ADV C7065
Metasploit Module: X11 No-Auth Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/x11/open_x11.rb
References: OSVDB-309, CVE-1999-0526

Description:
This module scans for X11 servers that allow anyone
        to connect without authentication.
Metasploit Module: Sage X3 AdxAdmin Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/sage/x3_adxsrv_login.rb
Authors: Jonathan Peterson <deadjakk[at]shell.rip>
References: URL-https://www.rapid7.com/blog/post/2021/07/07/cve-2020-7387-7390-multiple-sage-x3-vulnerabilities/

Description:
This module allows an attacker to perform a password guessing attack against
        the Sage X3 AdxAdmin service, which in turn can be used to authenticate to
        a local Windows account.

        This module implements the X3Crypt function to 'encrypt' any passwords to
        be used during the authentication process, given a plaintext password.
Metasploit Module: AMQP 0-9-1 Login Check Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/amqp/amqp_login.rb
References: URL-https://www.rabbitmq.com/amqp-0-9-1-reference.html

Description:
This module will test AMQP logins on a range of machines and
          report successful logins.  If you have loaded a database plugin
          and connected to a database this module will record successful
          logins and hosts so you can track your access.
Metasploit Module: Oracle TNS Listener SID Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/sid_enum.rb
Disclosure date: 2009-01-07

Description:
This module simply queries the TNS listener for the Oracle SID.
          With Oracle 9.2.0.8 and above the listener will be protected and
          the SID will have to be bruteforced or guessed.
Metasploit Module: Oracle TNS Listener Checker
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/tnspoison_checker.rb
Disclosure date: 2012-04-18
Authors: ir0njaw (Nikita Kelesis) <nikita.elkey[at]gmail.com>
References: CVE-2012-1675, URL-https://seclists.org/fulldisclosure/2012/Apr/204

Description:
This module checks the server for vulnerabilities like TNS Poison.
          Module sends a server a packet with command to register new TNS Listener and checks
          for a response indicating an error. If the registration is errored, the target is not
          vulnerable. Otherwise, the target is vulnerable to malicious registrations.
Metasploit Module: Oracle iSQLPlus SID Check
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/isqlplus_sidbrute.rb
References: URL-https://blog.carnal0wnage.com/

Description:
This module attempts to bruteforce the SID on the Oracle application server iSQL*Plus
        login pages.  It does this by testing Oracle error responses returned in the HTTP response.
        Incorrect username/pass with a correct SID will produce an Oracle ORA-01017 error.
        Works against Oracle 9.2, 10.1 & 10.2 iSQL*Plus.  This module will attempt to
        fingerprint the version and automatically select the correct POST request.
Metasploit Module: Oracle XML DB SID Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/xdb_sid.rb
References: URL-http://dsecrg.com/files/pub/pdf/Different_ways_to_guess_Oracle_database_SID_(eng).pdf

Description:
This module simply makes an authenticated request to retrieve
          the sid from the Oracle XML DB httpd server.
Metasploit Module: Oracle TNS Listener Service Version Query
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/tnslsnr_version.rb
Disclosure date: 2009-01-07
Authors: CG

Description:
This module simply queries the tnslsnr service for the Oracle build.
Metasploit Module: Oracle Enterprise Manager Control SID Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/emc_sid.rb
References: URL-http://dsecrg.com/files/pub/pdf/Different_ways_to_guess_Oracle_database_SID_(eng).pdf

Description:
This module makes a request to the Oracle Enterprise Manager Control Console
        in an attempt to discover the SID.
Metasploit Module: Oracle Application Server Spy Servlet SID Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/spy_sid.rb
References: URL-http://dsecrg.com/files/pub/pdf/Different_ways_to_guess_Oracle_database_SID_(eng).pdf

Description:
This module makes a request to the Oracle Application Server
        in an attempt to discover the SID.
Metasploit Module: Oracle iSQL*Plus Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/isqlplus_login.rb
References: URL-https://blog.carnal0wnage.com/

Description:
This module attempts to authenticate against an Oracle ISQL*Plus
        administration web site using username and password combinations indicated
        by the USER_FILE, PASS_FILE, and USERPASS_FILE.

        This module does not require a valid SID, but if one is defined, it will be used.
        Works against Oracle 9.2, 10.1 & 10.2 iSQL*Plus.  This module will attempt to
        fingerprint the version and automatically select the correct POST request.
Metasploit Module: Oracle XML DB SID Discovery via Brute Force
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/xdb_sid_brute.rb
References: URL-http://dsecrg.com/files/pub/pdf/Different_ways_to_guess_Oracle_database_SID_(eng).pdf, URL-http://www.petefinnigan.com/default/oracle_default_passwords.csv

Description:
This module attempts to retrieve the sid from the Oracle XML DB httpd server,
          utilizing Pete Finnigan's default oracle password list.
Metasploit Module: Oracle TNS Listener SID Bruteforce
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/sid_brute.rb

Description:
This module queries the TNS listener for a valid Oracle database
          instance name (also known as a SID).
          Any response other than a "reject" will be considered a success.
          If a specific SID is provided, that SID will be attempted. Otherwise,
          SIDs read from the named file will be attempted in sequence instead.
Metasploit Module: Oracle RDBMS Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/oracle/oracle_login.rb
References: URL-https://www.oracle.com/database/, CVE-1999-0502, URL-https://nmap.org/nsedoc/scripts/oracle-brute.html

Description:
This module attempts to authenticate against an Oracle RDBMS
          instance using username and password combinations indicated
          by the USER_FILE, PASS_FILE, and USERPASS_FILE options.

          Due to a bug in nmap versions 6.50-7.80 may not work.
Metasploit Module: NetDecision 4.2 TFTP Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/tftp/netdecision_tftp.rb
Disclosure date: 2009-05-16
References: CVE-2009-1730, OSVDB-54607, BID-35002

Description:
This modules exploits a directory traversal vulnerability in NetDecision 4.2
          TFTP service.
Metasploit Module: IpSwitch WhatsUp Gold TFTP Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/tftp/ipswitch_whatsupgold_tftp.rb
Disclosure date: 2011-12-12
References: OSVDB-77455, BID-50890, EDB-18189, URL-http://secpod.org/advisories/SecPod_Ipswitch_TFTP_Server_Dir_Trav.txt, CVE-2011-4722

Description:
This modules exploits a directory traversal vulnerability in IpSwitch WhatsUp
          Gold's TFTP service.
Metasploit Module: TFTP Brute Forcer
Type: auxiliary
Path: modules/auxiliary/scanner/tftp/tftpbrute.rb
Authors: antoine

Description:
This module uses a dictionary to brute force valid TFTP image names from a TFTP server.
Metasploit Module: Gather Quake Server Information
Type: auxiliary
Path: modules/auxiliary/scanner/quake/server_info.rb
Authors: Jon Hart <jon_hart[at]rapid7.com>
References: URL-https://ftp.gwdg.de/pub/misc/ftp.idsoftware.com/idstuff/quake3/docs/server.txt

Description:
This module uses the getstatus or getinfo request to obtain
          information from a Quakeserver.
Metasploit Module: PostgreSQL Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/postgres/postgres_login.rb
References: URL-https://www.postgresql.org/, CVE-1999-0502, URL-https://hashcat.net/forum/archive/index.php?thread-4148.html

Description:
This module attempts to authenticate against a PostgreSQL
          instance using username and password combinations indicated
          by the USER_FILE, PASS_FILE, and USERPASS_FILE options. Note that
          passwords may be either plaintext or MD5 formatted hashes.
Metasploit Module: PostgreSQL Database Name Command Line Flag Injection
Type: auxiliary
Path: modules/auxiliary/scanner/postgres/postgres_dbname_flag_injection.rb
References: CVE-2013-1899, URL-https://www.postgresql.org/support/security/faq/2013-04-04/

Description:
This module can identify PostgreSQL 9.0, 9.1, and 9.2 servers that are
          vulnerable to command-line flag injection through CVE-2013-1899. This
          can lead to denial of service, privilege escalation, or even arbitrary
          code execution.