This site uses cookies for anonymized analytics. For more information or to change your cookie settings, view our Cookie Policy.

The world’s most used penetration testing framework

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Star
35,561

Get Metasploit

Open Source

Metasploit
Framework

Download

Latest

Commercial Support

Metasploit
Pro

Download

Latest

Get visibility into your network with Rapid7's InsightVM
30-Day Trial

Compare Features
View More Projects
View All Modules

Latest Metasploit Modules

Title Date Author
Land #20188, adds module for CVE-2024-7399 Samsung MagicINFO 9 Server Samsung MagicINFO 9 Server RCE (CVE-2024-7399) Module May 19, 2025 msutovsky-r7
Land #20020, adds module for Nextcloud Workflow Remote Code Execution Add exploit module for the nextcloud workflow vulnerability CVE-2023-26482 May 15, 2025 msutovsky-r7
Land #20162, modules/auxiliary/sqli: Resolve RuboCop violations Land #20162, modules/auxiliary/sqli: Resolve RuboCop violations May 15, 2025 dledda-r7
Land #20154, modules/auxiliary/dos: Resolve RuboCop violations Land #20154, modules/auxiliary/dos: Resolve RuboCop violations May 15, 2025 dledda-r7
Land #20123, adds module for path traversal and credential harvester in PowerCom UPSMON Pro POWERCOM UPSMON PRO Path Traversal (CVE-2022-38120) and Credential Harvester (CVE-2022-38121) Module May 15, 2025 msutovsky-r7
Land #20159, adds module for privilege escalation in Wordpress (CVE-2025-2563) Add Unauthenticated privesc for WP User Registration & Membership plugin (CVE-2025-2563) May 14, 2025 msutovsky-r7
Contribute a Module
View All Pull Requests

Latest Pull Requests

Name Labels Author
modules/exploits/linux/pop3: Resolve RuboCop violations rn-no-release-notes , code quality bcoles
modules/exploits/linux/redis: Resolve RuboCop violations rn-no-release-notes , code quality bcoles
modules/exploits/linux/ids: Resolve RuboCop violations rn-no-release-notes , code quality bcoles
modules/exploits/linux/imap: Resolve RuboCop violations rn-no-release-notes , code quality bcoles
modules/exploits/linux/upnp: Resolve RuboCop violations rn-no-release-notes , code quality bcoles
Bump rubocop from 1.67.0 to 1.75.6 rn-no-release-notes , dependencies bcoles
Create a Pull Request

Recent Blog Posts

No recent blog posts.

View More Metasploit Blog Posts

Metasploit in Action

Featured Video


View More Metasploit Videos
View All Contributors

Top Contributors

Last 12 Months

All Time

Contribute to Metasploit
View All

Related Products & Projects

InsightVM

Rapid7’s solution for advanced vulnerability management analytics and reporting.

Free Trial

InsightIDR

Rapid7’s incident detection and response solution unifying SIEM, EDR, and UBA capabilities.

Free Trial

Metasploitable

Virtual machines full of intentional security vulnerabilities. Exploit at will!

Download Now