Customer Portal
Connect with Support
Need help? We’ve got you covered. Sign in to the Customer Portal for our top recommended help articles, and to connect with our awesome Support Team.
Create and manage your cases with ease and get routed to the right product specialist.
Having trouble logging in?
- Create your account
- Reset your password via the "Need help signing in" link on the Sign In page.
- Customer Portal FAQs
Customer Support Guidebook
Learn how the Rapid7 Customer Support team can support you and your organization
Help & Docs
Self-Service Help
Training & Certifications
Be awesome at everything you do -- get trained by Rapid7 experts and take your security skills to the next level.
Learn moreConsulting Services
Need a hand with your security program? From planning and strategy to full-service support, our Rapid7 experts have you covered.
- Penetration Testing Services
- Managed Services for Vulnerability Management
- Detection and Response Services
- Advisory Services
- IoT Security Services
Read What’s New on the Rapid7 Blog
Metasploit Weekly Wrap-Up
Zimbra with Postfix LPE (CVE-2022-3569)
This week rbowes [https://github.com/rbowes-r7] added an LPE exploit for Zimbra
with Postfix. The exploit leverages a vulnerability whereby the Zimbra user can
run postfix as root which in turn is capable of executing arbitrary
shellscripts. This can be abused for reliable privilege escalation from the
context of the zimbra service account to root. As of this time, this
vulnerability remains unpatched.
Zimbra RCE (CVE-2022-41352)
rbowes [https://github.co
New Research: We’re Still Terrible at Passwords; Making it Easy for Attackers
We look at two of the most popular protocols used for remote administration, SSH and RDP, to get a sense of how attackers are taking advantage of weaker password management to gain access to systems.
[The Lost Bots] S02E05: The real magic in the Magic Quadrant
In this episode, we discuss the best use of a Gartner Magic Quadrant (MQ): do you just pick a Leader and call it a day?