This site uses cookies for anonymized analytics. For more information or to change your cookie settings, view our Cookie Policy.

The world’s most used penetration testing framework

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Star
37,432

Get Metasploit

Open Source

Metasploit
Framework

Download

Latest

Commercial Support

Metasploit
Pro

Download

Latest

Get visibility into your network with Rapid7's InsightVM
30-Day Trial

Compare Features
View More Projects
View All Modules

Latest Metasploit Modules

Title Date Author
Land #20834, fixes NoMethodError in teamviewer_password post module Fix teamviewer_password module NoMethodError Feb 04, 2026 msutovsky-r7
Land #19821, adds Burpsuite persistence module Burp extension persistence Jan 22, 2026 msutovsky-r7
Land #20806, adds module for unauthenticated command injection in Control Web Panel API (CVE-2025-67888) Adds module for Control Web Panel API Command Injection (CVE-2025-67888) Jan 14, 2026 msutovsky-r7
Land #20810, adds module for authenticated RCE in n8n (CVE-2025-68613) Adds module for n8n workflow expression RCE (CVE-2025-68613) Jan 13, 2026 msutovsky-r7
Land #20796, moves udev module into persistence category update udev to persistence mixin Jan 09, 2026 msutovsky-r7
Land #20811, adds module for Prison Management System 1.0 RCE (CVE-2024-48594) Add Prison Management System 1.0 auth RCE (CVE-2024-48594) Jan 08, 2026 msutovsky-r7
Contribute a Module
View All Pull Requests

Latest Pull Requests

Name Labels Author
Fix spacing in GSoC 2026 ideas page docs , easy , rn-no-release-notes jheysel-r7
Fix label check bug rn-no-release-notes adfoster-r7
Add notice about extended test suite rn-no-release-notes adfoster-r7
Renames Windows File System namespaces rn-no-release-notes cgranleese-r7
[Do-not-review] Test automated ldap tests blocked , additional-testing-required adfoster-r7
Handle ACTION=auto with CRACKER_PATH in password crackers library , bug , rn-fix rudraditya21
Create a Pull Request

Recent Blog Posts

Fri Feb 06 2026

Metasploit Wrap-Up 02/06/2026

Google Summer of Code 2026Our very own Jack Heysel has added some documentation which outlines the Metasploit Framework project ideas for GSoC 2026. For anyone interested in applying please see GSoC-How-To-Apply documentation...

Fri Jan 30 2026

Metasploit Wrap-Up 01/30/2026

FreeBPX Content GaloreThis week brings 3 new pieces of module content for targeting FreePBX. All three chain multiple vulnerabilities together, starting with CVE-2025-66039. This initial vulnerability allows unauthenticated u...

Fri Jan 23 2026

Metasploit Wrap-Up 01/23/2026

Oracle E-Business Suite Unauth RCEThis week, we are pleased to announce the addition of a module that exploits CVE-2025-61882, a pre-authentication remote code execution vulnerability in Oracle E-Business Suite versions 12.2....

View More Metasploit Blog Posts

Metasploit in Action

Featured Video


View More Metasploit Videos
View All Contributors

Top Contributors

Last 12 Months

All Time

Contribute to Metasploit
View All

Related Products & Projects

InsightVM

Rapid7’s solution for advanced vulnerability management analytics and reporting.

Free Trial

InsightIDR

Rapid7’s incident detection and response solution unifying SIEM, EDR, and UBA capabilities.

Free Trial

Metasploitable

Virtual machines full of intentional security vulnerabilities. Exploit at will!

Download Now