A basic penetration testing guide on attacking PostgreSQL databases through network reconnaissance, brute-force credential attacks using Metasploit, and extracting password hashes from the pg_shadow table via psql client.
A writeup demonstrating how to escalate a banner grabbing reconnaissance finding into critical vulnerabilities (DoS and memory corruption) on IIS servers using MS15-034 (CVE-2015-1635), exploitable via HTTP Range headers and Metasploit modules.
CVE-2017-5244 is a CSRF vulnerability in Metasploit commercial editions (Express, Community, Pro <4.14.0) where GET requests to stop/stop_all task routes were not properly validated, allowing attackers to kill all running Metasploit tasks via malicious JavaScript injection. The vulnerability exploited missing CSRF token validation and improper HTTP method enforcement.