Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Latest Metasploit Modules

Title	Date	Author
Land #19772, adding module for CraftCMS FTP template exploit	Jan 23, 2025	msutovsky-r7
Land #19805, new module for LibreNMS Authenticated RCE	Jan 20, 2025	msutovsky-r7
Land #19752, Prometheus pprof endpoint check	Jan 16, 2025	msutovsky-r7
Land #19798, fixing link and code cleanup Fix nsfw link in mssql_clr_payload, and rubocop the module	Jan 15, 2025	msutovsky-r7
Land #19738, Pandora FMS auth RCE (CVE-2024-11320) Land #19738, Pandora FMS auth RCE (CVE-2024-11320)	Jan 09, 2025	dledda-r7
Land #19781, Add Selenium file read auxiliary module Land #19781, Add Selenium file read auxiliary module	Jan 08, 2025	dledda-r7

Title

Date

Author

Land #19772, adding module for CraftCMS FTP template exploit

Jan 23, 2025

msutovsky-r7

Land #19805, new module for LibreNMS Authenticated RCE

Jan 20, 2025

msutovsky-r7

Land #19752, Prometheus pprof endpoint check

Jan 16, 2025

msutovsky-r7

Land #19798, fixing link and code cleanup Fix nsfw link in mssql_clr_payload, and rubocop the module

Jan 15, 2025

msutovsky-r7

Land #19738, Pandora FMS auth RCE (CVE-2024-11320) Land #19738, Pandora FMS auth RCE (CVE-2024-11320)

Jan 09, 2025

dledda-r7

Land #19781, Add Selenium file read auxiliary module Land #19781, Add Selenium file read auxiliary module

Jan 08, 2025

dledda-r7

Contribute a Module

Latest Pull Requests

Name	Labels	Author
Fix Exploit::Remote::HttpClient#connect_ws to be spec compliant		sfewer-r7
Merge branch 'rapid7:master' into master	needs-unique-branch	Adithya2357
Update ldap_query datastore option usage	rn-fix	zeroSteiner
Add documentation for ldap test system	rn-documentation	adfoster-r7
WIP: Added additional validation for Quick PenTest IP range format check		mwalas-r7
Pin concurrent-ruby version	rn-fix	adfoster-r7

Name

Labels

Author

Fix Exploit::Remote::HttpClient#connect_ws to be spec compliant

sfewer-r7

Merge branch 'rapid7:master' into master

needs-unique-branch

Adithya2357

Update ldap_query datastore option usage

rn-fix

zeroSteiner

Add documentation for ldap test system

rn-documentation

adfoster-r7

WIP: Added additional validation for Quick PenTest IP range format check

mwalas-r7

Pin concurrent-ruby version

rn-fix

adfoster-r7

Create a Pull Request

Recent Blog Posts

Fri Jan 24 2025

Metasploit Weekly Wrap-Up 01/24/2025

This week the Metasploit Framework was blessed with an authenticated RCE module in LibreNMS, an autodiscovering PHP / MySQL-based network monitoring system....

Fri Jan 17 2025