The Metasploit Project

Metasploit provides useful information to people who perform penetration testing, IDS signature development, and exploit research. This project was created to provide information on exploit techniques and to create a useful resource for exploit developers and security professionals. The tools and information on this site are provided for legal security research and testing purposes only. Metasploit is a community project managed by Rapid7 LLC.


Jan-01-2009: Happy New Year!

   The Metasploit Project is celebrating the new year with a series of updates to the metasploit.com web site and services. Stay tuned as updates are rolled out.

Oct-10-2008: Metasploit 3.2 Released

   The Metasploit development team is happy to announce the immediate availability of version 3.2 of the Metasploit Framework. This release is the first version of Metasploit to be provided under a true open source license (BSD) and represents over ten months of work by the development team. Metasploit 3.2 can be obtained from the Downloads page.

The Metasploit Blog

Jul-28-2010 - W3AF: An Open Source Success Story (hdm)
Jul-12-2010 - Metasploit Framework 3.4.1 Released! (egypt)
Jun-14-2010 - Meterpreter for Pwned Home Pages (egypt)
May-27-2010 - It's Ruby all the way down! (jcran)
May-19-2010 - Introducing Metasploitable (jcran)
May-18-2010 - Metasploit Framework 3.4.0 Released! (egypt)
Apr-22-2010 - Approaching Metasploit 3.4.0 and Metasploit Express (hdm)
Apr-15-2010 - The Java Web Start Argument Injection Vulnerability (jduck)

Metasploit Framework Development

Jul-30-2010 - Bug #2312 (New): jboss_maindeployer - undefined method `peerho...
Jul-29-2010 - Bug #2310: ms08_067_netapi and some others exploit does nor wo...
Jul-29-2010 - Bug #2311 (New): ibm_tsm_cad_ping currently classified as wind...
Jul-29-2010 - Bug #2310 (New): ms08_067_netapi and some others exploit does ...
Jul-29-2010 - Revision 9942: initial lab plugin commit
Jul-29-2010 - Revision 9941: updated lab controller
Jul-29-2010 - Bug #2309 (New): -cl vs -c in multiscript.rb
Jul-27-2010 - Revision 9940: Changing logic for the VRFY test.
Jul-27-2010 - Revision 9939: move the stdapi constants into the stdapi exten...
Jul-27-2010 - Revision 9938: remove debug prints
Copyright © 2003-2010 Rapid7 LLC
Rapid7 Privacy Statement