Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20660, adds windows task scheduler persistence module Windows task scheduler persistence	Oct 31, 2025	msutovsky-r7
Land #20643, expands diamorphine privilege escalation module to other rootkits Add Rootkit Privilege Escalation Signal Hunter	Oct 31, 2025	msutovsky-r7
Land #20650, adds module for NCR Command Center Agent unauthenticated RCE (CVE-2021-3122) Add NCR Command Center Agent Unauthenticated RCE (CVE-2021-3122)	Oct 30, 2025	msutovsky-r7
Land #20662, adds windows startup folder persistence module windows persistence: startup folder	Oct 29, 2025	msutovsky-r7
Land #20631, moves windows registry module into persistence category update windows registry to persistence mixin	Oct 27, 2025	msutovsky-r7
Land #20564, adds persistence suggester module persistence suggester	Oct 24, 2025	msutovsky-r7

Title

Date

Author

Land #20660, adds windows task scheduler persistence module Windows task scheduler persistence

Oct 31, 2025

msutovsky-r7

Land #20643, expands diamorphine privilege escalation module to other rootkits Add Rootkit Privilege Escalation Signal Hunter

Oct 31, 2025

msutovsky-r7

Land #20650, adds module for NCR Command Center Agent unauthenticated RCE (CVE-2021-3122) Add NCR Command Center Agent Unauthenticated RCE (CVE-2021-3122)

Oct 30, 2025

msutovsky-r7

Land #20662, adds windows startup folder persistence module windows persistence: startup folder

Oct 29, 2025

msutovsky-r7

Land #20631, moves windows registry module into persistence category update windows registry to persistence mixin

Oct 27, 2025

msutovsky-r7

Land #20564, adds persistence suggester module persistence suggester

Oct 24, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Pin date dependency	rn-fix	adfoster-r7
Centreon authenticated command injection leading to RCE via broker engine "reload" parameter [CVE-2025-5946]	module , docs	h00die-gr3y
Rggh		Wname2-code
Android Deep Link QR Generator		ctkqiang
Android Deep Link QR Generator	needs-unique-branch	ctkqiang
windows persistence: startup folder	module , docs , rn-modules	h00die

Name

Labels

Author

Pin date dependency

rn-fix

adfoster-r7

Centreon authenticated command injection leading to RCE via broker engine "reload" parameter [CVE-2025-5946]

module , docs

h00die-gr3y

Rggh

Wname2-code

Android Deep Link QR Generator

ctkqiang

Android Deep Link QR Generator

needs-unique-branch

ctkqiang

windows persistence: startup folder

module , docs , rn-modules

h00die

Create a Pull Request

Recent Blog Posts

Fri Oct 31 2025

Metasploit Wrap-Up 10/31/2025

New module content (3)ReDoc API Docs UI ExposedAuthor: Hamza Sahin Type: AuxiliaryPull request: #20594 contributed by HamzaSahin61Path: scanner/http/redoc_exposedDescription: Adds a module to detect publicly exposed ReDoc API...

Fri Oct 24 2025

Metasploit Wrap-Up 10/24/2025

Let us suggest persistence…This week's edition brings the new persistence suggester from h00die. Similar to the exploit variant, this module will list the available persistence mechanisms for your selected target. The module ...

Fri Oct 17 2025

Metasploit Wrap-Up 10/17/2025

New module content (1)Remote Code Execution Vulnerability in MotionEye Frontend (CVE-2025-60787)Authors: Maksim Rogov and prabhatverma47 Type: Exploit Pull request: #20585 contributed by vognik Path: linux/http/motioneye_auth...

View More Metasploit Blog Posts