Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #19844, Add Ivanti Connect Secure HTTP Login Module Land #19844, Add Ivanti Connect Secure HTTP Login Module	Feb 03, 2025	dledda-r7
Land #19772, adding module for CraftCMS FTP template exploit	Jan 23, 2025	msutovsky-r7
Land #19805, new module for LibreNMS Authenticated RCE	Jan 20, 2025	msutovsky-r7
Land #19752, Prometheus pprof endpoint check	Jan 16, 2025	msutovsky-r7
Land #19798, fixing link and code cleanup Fix nsfw link in mssql_clr_payload, and rubocop the module	Jan 15, 2025	msutovsky-r7
Land #19738, Pandora FMS auth RCE (CVE-2024-11320) Land #19738, Pandora FMS auth RCE (CVE-2024-11320)	Jan 09, 2025	dledda-r7

Title

Date

Author

Land #19844, Add Ivanti Connect Secure HTTP Login Module Land #19844, Add Ivanti Connect Secure HTTP Login Module

Feb 03, 2025

dledda-r7

Land #19772, adding module for CraftCMS FTP template exploit

Jan 23, 2025

msutovsky-r7

Land #19805, new module for LibreNMS Authenticated RCE

Jan 20, 2025

msutovsky-r7

Land #19752, Prometheus pprof endpoint check

Jan 16, 2025

msutovsky-r7

Land #19798, fixing link and code cleanup Fix nsfw link in mssql_clr_payload, and rubocop the module

Jan 15, 2025

msutovsky-r7

Land #19738, Pandora FMS auth RCE (CVE-2024-11320) Land #19738, Pandora FMS auth RCE (CVE-2024-11320)

Jan 09, 2025

dledda-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Update nokogiri dependency	rn-no-release-notes	adfoster-r7
Revert "Updates `shared_meterpreter_acceptance.yml` pipeline to build the metasploit-payloads gem"		adfoster-r7
Restrict weekly data PR tooling to rapid7 repo	rn-no-release-notes	jmartin-tech
Ivanti HTTP Module fix based on remaining comments	enhancement , rn-no-release-notes	msutovsky-r7
Change behavior of esc8 'AUTO' mode to attempt to get a cert based on DC and Machine types	enhancement , rn-enhancement	bwatters-r7
Resolve host mixin	enhancement , rn-enhancement	cgranleese-r7

Name

Labels

Author

Update nokogiri dependency

rn-no-release-notes

adfoster-r7

Revert "Updates `shared_meterpreter_acceptance.yml` pipeline to build the metasploit-payloads gem"

adfoster-r7

Restrict weekly data PR tooling to rapid7 repo

rn-no-release-notes

jmartin-tech

Ivanti HTTP Module fix based on remaining comments

enhancement , rn-no-release-notes

msutovsky-r7

Change behavior of esc8 'AUTO' mode to attempt to get a cert based on DC and Machine types

enhancement , rn-enhancement

bwatters-r7

Resolve host mixin

enhancement , rn-enhancement

cgranleese-r7

Create a Pull Request

Recent Blog Posts

Fri Feb 07 2025

Metasploit Weekly Wrap-Up 02/07/2025

This week's release includes 2 new auxiliary modules targeting Argus Surveillance DVR and Ivanti Connect Secure. Learn more!...

Fri Jan 31 2025

Metasploit Weekly Wrap-Up 01/31/25

Metasploit's jheysel-r7 updated an existing module to include detecting template objects that can be written to by the authenticated user. Learn more!...

Fri Jan 24 2025

Metasploit Weekly Wrap-Up 01/24/2025

This week the Metasploit Framework was blessed with an authenticated RCE module in LibreNMS, an autodiscovering PHP / MySQL-based network monitoring system....

View More Metasploit Blog Posts