Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20564, adds persistence suggester module persistence suggester	Oct 24, 2025	msutovsky-r7
Land #20630, adds authenticated RCE module for Vvveb CMS (CVE-2025-8518) Add Vvveb CMS Authenticated RCE (CVE-2025-8518)	Oct 22, 2025	msutovsky-r7
Land #20566, adds support to esc_update_ldap module when shadow credentials are not required Update esc_update_ldap module so shadow creds not required	Oct 01, 2025	msutovsky-r7
Land #20518, adds NTLM leak/LNK padding fileformat modules Adds fileformat NTLM leak/LNK padding modules	Sep 29, 2025	msutovsky-r7
Land #20565, moves image exec module to persistence category and mixin Modern persistence image exec	Sep 29, 2025	msutovsky-r7
Land #20538, adds systemd override persistence module persistence: systemd service override	Sep 26, 2025	msutovsky-r7

Title

Date

Author

Land #20564, adds persistence suggester module persistence suggester

Oct 24, 2025

msutovsky-r7

Land #20630, adds authenticated RCE module for Vvveb CMS (CVE-2025-8518) Add Vvveb CMS Authenticated RCE (CVE-2025-8518)

Oct 22, 2025

msutovsky-r7

Land #20566, adds support to esc_update_ldap module when shadow credentials are not required Update esc_update_ldap module so shadow creds not required

Oct 01, 2025

msutovsky-r7

Land #20518, adds NTLM leak/LNK padding fileformat modules Adds fileformat NTLM leak/LNK padding modules

Sep 29, 2025

msutovsky-r7

Land #20565, moves image exec module to persistence category and mixin Modern persistence image exec

Sep 29, 2025

msutovsky-r7

Land #20538, adds systemd override persistence module persistence: systemd service override

Sep 26, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Fix Meterpreter migration crash	rn-fix	adfoster-r7
lib/msf/base/sessions/meterpreter.rb: Use &. across the entire chain when handling datastore['AutoLoadExtensions']	rn-fix	molecula2788
Fix ssh login crash for pro	rn-no-release-notes	adfoster-r7
Pin rexml to avoid winrm warnings	rn-no-release-notes	adfoster-r7
Update contact emails in CODE_OF_CONDUCT.md	rn-no-release-notes	smcintyre-r7
Adds safe navigator in ldap_esc_vulnerable_cert_finder	bug , rn-fix	msutovsky-r7

Name

Labels

Author

Fix Meterpreter migration crash

rn-fix

adfoster-r7

lib/msf/base/sessions/meterpreter.rb: Use &. across the entire chain when handling datastore['AutoLoadExtensions']

rn-fix

molecula2788

Fix ssh login crash for pro

rn-no-release-notes

adfoster-r7

Pin rexml to avoid winrm warnings

rn-no-release-notes

adfoster-r7

Update contact emails in CODE_OF_CONDUCT.md

rn-no-release-notes

smcintyre-r7

Adds safe navigator in ldap_esc_vulnerable_cert_finder

bug , rn-fix

msutovsky-r7

Create a Pull Request

Recent Blog Posts

Fri Oct 24 2025

Metasploit Wrap-Up 10/24/2025

Let us suggest persistence…This week's edition brings the new persistence suggester from h00die. Similar to the exploit variant, this module will list the available persistence mechanisms for your selected target. The module ...

Fri Oct 17 2025

Metasploit Wrap-Up 10/17/2025

New module content (1)Remote Code Execution Vulnerability in MotionEye Frontend (CVE-2025-60787)Authors: Maksim Rogov and prabhatverma47 Type: Exploit Pull request: #20585 contributed by vognik Path: linux/http/motioneye_auth...

Thu Oct 09 2025

Metasploit Wrap Up 10/09/2025

Meterpreter: Kickstarting Windows ARM64 and Reducing Memory FootprintThis Metasploit-Framework release includes two important milestones for our payloads capability. The first, spearheaded by community contributor Alexander "...

View More Metasploit Blog Posts