Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #21362, adds module for Dolibarr ERP/CRM authenticated RCE (CVE-2023-30253) Add Dolibarr ERP/CRM authenticated RCE module (CVE-2023-30253)	May 14, 2026	msutovsky-r7
Land #21041, adds module for Gestioip RCE (CVE 2024-48760) Add exploit module for Gestioip3.5.7 RCE (CVE 2024-48760)	May 14, 2026	msutovsky-r7

Title

Date

Author

Land #21362, adds module for Dolibarr ERP/CRM authenticated RCE (CVE-2023-30253) Add Dolibarr ERP/CRM authenticated RCE module (CVE-2023-30253)

May 14, 2026

msutovsky-r7

Land #21041, adds module for Gestioip RCE (CVE 2024-48760) Add exploit module for Gestioip3.5.7 RCE (CVE 2024-48760)

May 14, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Fix frozen string crash	easy , rn-no-release-notes	adfoster-r7
Krb5tgs rc4	additional-testing-required	h00die
add DefangedMode option to QConvergeConsole module	rn-no-release-notes	dledda-r7
Fix VIM Persistence plugin error	easy , rn-no-release-notes	dledda-r7
Copy Fail Linux Local Privilege Escalation Exploit (CVE-2026-31431)		offsecguy
Copy Fail Linux Local Privilege Escalation Exploit (CVE-2026-31431)		offsecguy

Name

Labels

Author

Fix frozen string crash

easy , rn-no-release-notes

adfoster-r7

Krb5tgs rc4

additional-testing-required

h00die

add DefangedMode option to QConvergeConsole module

rn-no-release-notes

dledda-r7

Fix VIM Persistence plugin error

easy , rn-no-release-notes

dledda-r7

Copy Fail Linux Local Privilege Escalation Exploit (CVE-2026-31431)

offsecguy

Copy Fail Linux Local Privilege Escalation Exploit (CVE-2026-31431)

offsecguy

Create a Pull Request

Recent Blog Posts

Fri May 15 2026

Metasploit Wrap-Up 05/15/2026

Weaponizing a text editor for fun and profitGather round, dear readers, because today, we (by we, we mean @h00die) dropped the ultimate persistence mechanism: Vim plugin persistence. And honestly, calling it "persistence" fee...

Fri May 08 2026

Metasploit Wrap-Up 05/08/2026

Spring cleanupThis week’s Metasploit updates focused on foundational improvements and expanded target reach. Key enhancements were made to the recently released Copy Fail exploit module, which now benefits from payload fixes ...

Fri May 01 2026

Metasploit Wrap-Up 05/01/2026

MCP serverThis release our very own cdelafuente-r7 finished implementing the Metasploit MCP Server (msfmcpd), bringing Model Context Protocol support to Metasploit Framework. MCP lets AI applications like Claude, Cursor, or y...

View More Metasploit Blog Posts