This site uses cookies for anonymized analytics. For more information or to change your cookie settings, view our Cookie Policy.

The world’s most used penetration testing framework

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Star

32,801

Get Metasploit

Open Source

Metasploit
Framework

Download

Latest

Commercial Support

Metasploit
Pro

Download

Latest

Get visibility into your network with Rapid7's InsightVM
30-Day Trial

Compare Features
View More Projects

View All Modules

Latest Metasploit Modules

Title	Date	Author
Land #18723, Improve Gitlab fingerprinting A webpage exists that can be reached without authentication that contains a hash that can be used to determine the approximate version of gitlab running on the endpoint. This PR adds enhances our current GitLab fingerprinting capabilities to include the aforementioned technique.	Apr 24, 2024	jheysel-r7
Land #19078, ldap acceptance tests	Apr 24, 2024	adfoster-r7
Land #19122, add EVENT_DEPENDENT to vcenter vmon priv esc	Apr 23, 2024	adfoster-r7
Land #19046, Apache Solr Backup Restore RCE [CVE-2023-50386]	Apr 23, 2024	zgoldman-r7
Land #19079, Fix PASSWORD_SPRAY being ignored for LDAP (and potentially other modules)	Apr 22, 2024	cgranleese-r7
Land #19114, Better enforce types to prevent nil values from causing stack traces Merge branch 'land-19114' into upstream-master	Apr 19, 2024	bwatters-r7

Contribute a Module

View All Pull Requests

Name	Labels	Author
Add missing '-S' to cmd_notes	library , easy , rn-fix	nrathaus
Fixed output of db_import command in spec	rn-no-release-notes	jheysel-r7
add EVENT_DEPENDENT to vcenter vmon priv esc	rn-enhancement	h00die
Better enforce types to prevent nil values from causing stack traces	library , bug , easy , rn-fix	zeroSteiner
Revert "Sql sessions have correct history manager"	rn-fix	adfoster-r7
add arch and platform detection for mssql sessions	enhancement , rn-enhancement	zgoldman-r7

Rancher Modules This week, Metasploit community member h00die added the second of two modules targeting Rancher instances. These modules each leak sensitive information from vulnerable instances of the application which is in...

Mon Apr 22 2024

Take Command Summit: Take Breaches from Inevitable to Preventable on May 21

Registration is now open for Take Command, a day-long virtual summit in partnership with AWS. You’ll get new attack intelligence, insight into AI disruption, transparent MDR partnerships, and more....

Fri Apr 19 2024

Metasploit Weekly Wrap-Up 04/19/24

Welcome Ryan and the new CrushFTP module It's not every week we add an awesome new exploit module to the Framework while adding the original discoverer of the vulnerability to the Rapid7 team as well. We're very excited to we...

View More Metasploit Blog Posts