Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20566, adds support to esc_update_ldap module when shadow credentials are not required Update esc_update_ldap module so shadow creds not required	Oct 01, 2025	msutovsky-r7
Land #20518, adds NTLM leak/LNK padding fileformat modules Adds fileformat NTLM leak/LNK padding modules	Sep 29, 2025	msutovsky-r7
Land #20565, moves image exec module to persistence category and mixin Modern persistence image exec	Sep 29, 2025	msutovsky-r7
Land #20538, adds systemd override persistence module persistence: systemd service override	Sep 26, 2025	msutovsky-r7
Land #20412, swaps to psh_exec in powershell/exec_powershell Remove errant write_log call and swap to the all-in-one psh_exec rath…	Sep 25, 2025	msutovsky-r7
Land #20536, adds docker image persistence module docker image persistence module	Sep 17, 2025	msutovsky-r7

Title

Date

Author

Land #20566, adds support to esc_update_ldap module when shadow credentials are not required Update esc_update_ldap module so shadow creds not required

Oct 01, 2025

msutovsky-r7

Land #20518, adds NTLM leak/LNK padding fileformat modules Adds fileformat NTLM leak/LNK padding modules

Sep 29, 2025

msutovsky-r7

Land #20565, moves image exec module to persistence category and mixin Modern persistence image exec

Sep 29, 2025

msutovsky-r7

Land #20538, adds systemd override persistence module persistence: systemd service override

Sep 26, 2025

msutovsky-r7

Land #20412, swaps to psh_exec in powershell/exec_powershell Remove errant write_log call and swap to the all-in-one psh_exec rath…

Sep 25, 2025

msutovsky-r7

Land #20536, adds docker image persistence module docker image persistence module

Sep 17, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Add missing datastore argument in the `valid?` function in pe_inject.rb	rn-fix	molecula2788
Remove a CVE that was mistakenly added	easy , rn-no-release-notes	zeroSteiner
Remove faraday pin	rn-no-release-notes	adfoster-r7
Unpin octokit	rn-no-release-notes	adfoster-r7
Update developer dependencies	rn-no-release-notes	adfoster-r7
Update rails dependencies	rn-no-release-notes	adfoster-r7

Name

Labels

Author

Add missing datastore argument in the `valid?` function in pe_inject.rb

rn-fix

molecula2788

Remove a CVE that was mistakenly added

easy , rn-no-release-notes

rn-no-release-notes

rn-no-release-notes

Update developer dependencies

rn-no-release-notes

adfoster-r7

Update rails dependencies

rn-no-release-notes

adfoster-r7

Create a Pull Request

Recent Blog Posts

Fri Oct 17 2025

Metasploit Wrap-Up 10/17/2025

New module content (1)Remote Code Execution Vulnerability in MotionEye Frontend (CVE-2025-60787)Authors: Maksim Rogov and prabhatverma47 Type: Exploit Pull request: #20585 contributed by vognik Path: linux/http/motioneye_auth...

Thu Oct 09 2025

Metasploit Wrap Up 10/09/2025

Meterpreter: Kickstarting Windows ARM64 and Reducing Memory FootprintThis Metasploit-Framework release includes two important milestones for our payloads capability. The first, spearheaded by community contributor Alexander "...

Fri Oct 03 2025

Metasploit Wrap-Up 10/03/2025

Windows LNK and Linux persistenceThis week, happybear-21 introduced four new modules that abuse Windows Shell Link (LNK) to execute various attacks. Three of these modules are designed to trigger authentication attempts to a ...

View More Metasploit Blog Posts