The world’s most used penetration testing framework

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Star

36,776

Get Metasploit

Open Source

Metasploit
Framework

Download

Latest

Commercial Support

Metasploit
Pro

Download

Latest

Get visibility into your network with Rapid7's InsightVM
30-Day Trial

Compare Features
View More Projects

View All Modules

Latest Metasploit Modules

Title	Date	Author
Land #20630, adds authenticated RCE module for Vvveb CMS (CVE-2025-8518) Add Vvveb CMS Authenticated RCE (CVE-2025-8518)	Oct 22, 2025	msutovsky-r7
Land #20566, adds support to esc_update_ldap module when shadow credentials are not required Update esc_update_ldap module so shadow creds not required	Oct 01, 2025	msutovsky-r7
Land #20518, adds NTLM leak/LNK padding fileformat modules Adds fileformat NTLM leak/LNK padding modules	Sep 29, 2025	msutovsky-r7
Land #20565, moves image exec module to persistence category and mixin Modern persistence image exec	Sep 29, 2025	msutovsky-r7
Land #20538, adds systemd override persistence module persistence: systemd service override	Sep 26, 2025	msutovsky-r7
Land #20412, swaps to psh_exec in powershell/exec_powershell Remove errant write_log call and swap to the all-in-one psh_exec rath...	Sep 25, 2025	msutovsky-r7

Contribute a Module

View All Pull Requests

Name	Labels	Author
Update contact emails in CODE_OF_CONDUCT.md	rn-no-release-notes	smcintyre-r7
Adds safe navigator in ldap_esc_vulnerable_cert_finder	bug	msutovsky-r7
Infinite recursion on error page fix for Anemone	rn-fix	sjanusz-r7
Anemone bump and uri improvements	sjanusz-r7
easy-fix: Fix typo in modules/exploits/unix/http/freepbx_unauth_sqli_to_rce	rn-no-release-notes , hacktoberfest-accepted	Chocapikk
Linqpad cleanup	hacktoberfest-accepted , rn-documentation	h00die

New module content (1)Remote Code Execution Vulnerability in MotionEye Frontend (CVE-2025-60787)Authors: Maksim Rogov and prabhatverma47 Type: Exploit Pull request: #20585 contributed by vognik Path: linux/http/motioneye_auth...

Thu Oct 09 2025

Metasploit Wrap Up 10/09/2025

Meterpreter: Kickstarting Windows ARM64 and Reducing Memory FootprintThis Metasploit-Framework release includes two important milestones for our payloads capability. The first, spearheaded by community contributor Alexander "...

Fri Oct 03 2025

Metasploit Wrap-Up 10/03/2025

Windows LNK and Linux persistenceThis week, happybear-21 introduced four new modules that abuse Windows Shell Link (LNK) to execute various attacks. Three of these modules are designed to trigger authentication attempts to a ...

View More Metasploit Blog Posts