Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #21449, adds Joplin persistence module Joplin plugin Persistence	Jun 19, 2026	msutovsky-r7
Land #21465, adds VSCode extension persistence module VS Code extension persistence	Jun 11, 2026	msutovsky-r7
Land #21008, adds kernel_rex_version for parsing kernel version to Rex format Add kernel_rex_version for kernel parsing	Jun 11, 2026	msutovsky-r7
Land #21497, adds authenticated arbitrary OS command injection in Activemq jolokia (CVE-2026-34197) Activemq jolokia exploit (CVE-2026-34197)	May 29, 2026	msutovsky-r7
Land #21504, adds CVE numbers to modules add CVEs to modules	May 27, 2026	msutovsky-r7
Land #21506, adds guard for wsl_startup_folder persistence guard wsl startup_folder persistence	May 27, 2026	msutovsky-r7

Title

Date

Author

Land #21449, adds Joplin persistence module Joplin plugin Persistence

Jun 19, 2026

msutovsky-r7

Land #21465, adds VSCode extension persistence module VS Code extension persistence

Jun 11, 2026

msutovsky-r7

Land #21008, adds kernel_rex_version for parsing kernel version to Rex format Add kernel_rex_version for kernel parsing

Jun 11, 2026

msutovsky-r7

Land #21497, adds authenticated arbitrary OS command injection in Activemq jolokia (CVE-2026-34197) Activemq jolokia exploit (CVE-2026-34197)

May 29, 2026

msutovsky-r7

Land #21504, adds CVE numbers to modules add CVEs to modules

May 27, 2026

msutovsky-r7

Land #21506, adds guard for wsl_startup_folder persistence guard wsl startup_folder persistence

May 27, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Fixed issue #21572 - Catch NoDatabaseError on msfconsole exit		arpan-pramanik
Exclude deleted files from modified files list	rn-fix	dwelch-r7
Fix undefined call to ArmBE to_linux_armbe_elf	rn-fix	sjanusz-r7
Fix SMB version crash on smb1	rn-fix	adfoster-r7
enforce authentication in API tests and improve error handling for unauthenticated requests	bug , rn-no-release-notes	dwelch-r7
Fix db_import crash	tests , rn-fix	adfoster-r7

Name

Labels

Author

Fixed issue #21572 - Catch NoDatabaseError on msfconsole exit

arpan-pramanik

Exclude deleted files from modified files list

rn-fix

dwelch-r7

Fix undefined call to ArmBE to_linux_armbe_elf

rn-fix

sjanusz-r7

Fix SMB version crash on smb1

rn-fix

adfoster-r7

enforce authentication in API tests and improve error handling for unauthenticated requests

bug , rn-no-release-notes

dwelch-r7

Fix db_import crash

tests , rn-fix

adfoster-r7

Create a Pull Request

Recent Blog Posts

Fri Jul 03 2026

Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

It's Time to Upgrade Your SMB SessionThis week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to facilitate the upgrade. Users can load the module with use windows/ma...

Fri Jun 26 2026

Weekly Metasploit Update: Modules for Audiobookshelf, LiteLLM, Next.js, Dalfox and more

Help shape the future of Metasploit FrameworkWe are planning future work in relation to the evasion capabilities present in Metasploit Framework, and how they function/are presented to users. We are currently accepting respon...

Fri Jun 19 2026

Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more

This week's release includes five new modules, including a full unauthenticated RCE chain for Paperclip AI and a VS Code extension persistence technique. On the post-exploitation side, the new windows/local/ntlm_relay_2_self ...

View More Metasploit Blog Posts