Metasploit

· 2mo ago

Metasploit 6.5 shipped Malleable C2 support for all current Meterpreter payloads — same profile format you already know, now shaping Meterpreter's HTTP(S) traffic. See it in action: https://youtu.be/cu5UGE-VL2

youtu.be

- YouTube

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

· 2mo ago

We'll be demoing Metasploit 6.5 at Black Hat Arsenal Station 4 tomorrow, August 5th at 4PM. Be sure to stop by if you're attending to see the latest features in action and chat with some of the maintainers.

· 3mo ago

This week's Metasploit Framework update is live, featuring new modules for Audiobookshelf, LiteLLM, Next.js, and Dalfox. We have also added improvements to service and host reporting for brute-force modules. We also have a short survey about evasion modules. You can read the full update details here: https://www.rapid7.com/blog/post/pt-weekly-metasploit-update-modules-for-audiobookshelf-litellm-next-js-dalfox-and-more/

Metasploit is currently seeking user feedback on planned improvements to evasion capabilities via a proposal and feedback form that remains open until July 1, 2026. The latest update includes several new security modules, such as detection scanners for Audiobookshelf, LiteLLM Proxy, and Next.js, along with a new exploit module for Dalfox. Additionally, the release incorporates improvements to authentication brute-force modules and networking sockets, with further details and documentation availa

· 5mo ago

This weeks wrap up is packed with new stuff including an MCP server, and new modules for relaying NTLM from HTTP to LDAP and a Copy Fail exploit with x64 and AARCH64 support https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-05-01-2026/

· 4mo ago

This week's release adds new Kerberos/Certificate tracing options (GSoC project), a community feedback call on evasion module UX, a new ClickFix social-engineering exploit module, 9 enhancements, and more https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-13-06-2026/

Metasploit Framework 6.4.137 adds new Kerberos/Certificate tracing options (GSoC project), a community feedback call on evasion module UX, a new ClickFix social-engineering exploit module, 9 enhancements, and more

· 4mo ago

Checkout the War Room segment on the latest Hacktics and Telemetry episode where Stephen and Johah discuss a Cisco Catalyst SD-WAN 0-day that @rapid7@infosec.exchange discovered and added to Metasploit https://www.youtube.com/watch?v=GWSX1fI1zUM

- YouTube

· 4mo ago

The ultimate persistence mechanism is here: Vim plugin persistence! Seriously, who can close Vim anyway?

Catch up on the latest Metasploit Wrap-up, also featuring Unauthenticated Marvell QConvergeConsole Path Traversal (CVE-2025-6793), Authenticated RCE in GestioIP 3.5.7 (CVE-2024-48760), and a classic PHP filter bypass in Dolibarr ERP/CRM (CVE-2023-30253).

As always, check it out the blog: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-05-15-2026/

The latest security wrap-up introduces a novel Linux persistence mechanism: a Vim plugin exploit module. New Metasploit modules detail critical vulnerabilities, including an unauthenticated path traversal in Marvell QConvergeConsole (CVE-2025-6793). Exploits for GestioIP (CVE-2024-48760) allow for authenticated remote code execution via an unsafe upload handler. Read about the clever case-change bypass for a PHP injection vulnerability in Dolibarr ERP/CRM (CVE-2023-30253) and an OptArray datasto

https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-04-17-2026/

· 5mo ago

Happy Friday, Metasploit users! 🎉 The weekly wrapup is here with a massive update: 7 new modules, including 4 fresh RCE exploits (targeting AVideo, openDCIM, ChurchCRM, & Selenium Grid/Selenoid) and 3 new Windows persistence techniques. Get the details and happy hacking!

The Metasploit Framework received a major update, introducing seven new modules alongside various bug fixes and enhancements. Four new Remote Code Execution (RCE) exploit modules were added this week. These RCE modules target critical vulnerabilities in AVideo (unauthenticated SQLi for credential dumping), openDCIM (chained SQLi to RCE), ChurchCRM (file upload RCE), and a unified module for unauthenticated Selenium Grid/Selenoid instances. For post-exploitation, three new Windows persistence tec

https://www.rapid7.com/blog/post/pt-metasploit-2025-annual-wrap-up/

· 9mo ago

The annual wrap-up for Metasploit Framework is out now, and it includes the entirety of stats for 2025. This wrap-up and its contents would not be possible without the participation and dedication of our contributors and researchers, and all of our thanks goes to them! Metasploit Framework wouldn't be the same without you, thank you.

· 3mo ago

This week's Metasploit update includes new exploits for Flowise CSV Agent, Apache .htaccess persistence, and macOS PackageKit privilege escalation. Check out the full details here: https://www.rapid7.com/blog/post/pt-weekly-metasploit-update-exploits-for-flowiseai-csv-agent-and-macos-package-kit/

Stay up to date with the latest Metasploit Framework releases. This week's update introduces new exploit modules for the Flowise CSV Agent, Apache .htaccess persistence, and a macOS PackageKit privilege escalation, alongside several improvements to FTP target fingerprinting, AD CS certificate tracing, and critical bug fixes.

· 2mo ago

Our latest Wrap-up is live. This update adds Fetch Multi payloads for automatic architecture identification, expands RISC-V support, and includes a new HTTP to SMB Relay module. Check it out at: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-an-http-to-smb-relay-plus-payload-improvements/

The Metasploit Weekly Wrap-up is transitioning to a bi-weekly publishing schedule to allow time for recording project demos. This update introduces the new Linux Fetch Multi payload family, which automatically detects target architecture to simplify payload selection. Additionally, the release includes new modules like the Microsoft Windows HTTP to SMB Relay and expanded support for RiscV architectures.

· 2mo ago

Metasploit 6.5 is out just in time for Hack Summer Camp. This release comes with Malleable C2 support for Meterpreter, more relaying improvements and an integrated MCP server. Check out all the details here: https://www.rapid7.com/blog/post/pt-metasploit-framework-6-5-released/

Metasploit Framework 6.5 launches with Malleable C2 profile support, new MCP server integration support for AI-tooling, NTLM relaying upgrades, and MITRE ATT&CK tagging to streamline threat emulation

· 3mo ago

This week's release adds a full unauthenticated RCE chain for Paperclip AI, an NTLM relay-to-self local priv esc module, a VS Code extension persistence technique, MCP server integration for AI-assisted msfconsole operation, and more. https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-19-06-2026/

· 4mo ago

In the latest Hacktics and Telemetry's Mitigation Minute, @_CryptoCat dives into his recent zero-day Gogs exploit and Metasploit module as he discusses what to do when there is no patch https://www.youtube.com/watch?v=EPioibHRKPY&t=4136s

Hacktics and Telemetry, E7: AI Governance Gaps, $500M Fines, and Zero-Day Exploits (ft. Olivia Rose)

· 4mo ago

This week's release has a whooping 5 new modules including LPE 'sploits for dirty frag and a info leak scanner for Citrix NetScaler. Check it out at https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-05-29-2026/

This week's Metasploit release focuses heavily on Linux Local Privilege Escalation (LPE) with new modules for the "Dirty Frag" vulnerabilities, identified as CVE-2026-43284 and CVE-2026-43500. The update adds five new modules in total, including scanners for Citrix ADC (NetScaler) info leaks and Ollama LLM installations, alongside remote code execution exploits for Dompdf and the Supsystic Contact Form Wordpress plugin. Four bugs were also fixed, addressing issues such as refining smb_to_ldap re

· 4mo ago

Episode 6 of Hacktics and Telemetry is Live!

Cisco SD-WAN Zero-Days, Mythos AI Evaluations, and Pwn2Own Drama
Get it here: https://www.youtube.com/watch?v=tg4TkzDIrKw

Hacktics and Telemetry, E6: Cisco SD-WAN Zero-Days, Mythos AI, and Pwn2Own Drama (ft. Stephen Fewer)

· 5mo ago

This weeks' release is themed "Spring Cleanup" and brings some improvements to Metasploit! Key updates include payload fixes for Copy Fail on x64 and new support for ARMLE Linux, enhancements to the shiro_rememberme_v124_deserialize module for broader targeting, and general fixes for FTP utility modules. Checkout the details at https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-05-08-2026/

· 5mo ago

The latest Metasploit Weekly Wrapup is here! Highlights include a new RCE exploit for Langflow (CVE-2026-27966), improved check method visibility with detailed reasoning, and updates for legacy SMB targets. Plus 3 other new modules!

· 5mo ago

Episode 4 of Hacktics and Telemetry is Live!
Bug Bounties, AI Superpowers, and Breach Impersonations
https://youtube.com/watch?v=-xv0w61K5L0
The goodness contains:
02:13 - The Situation Room: Vercel breach, Shiny Hunter impersonators, and Anthropic’s Opus 4.7.
16:00 - The War Room: Bug bounty strategies and the Arson Framework with Harrison Richardson.
43:07 - The Mitigation Minute: Defending against supply chain attacks and identity compromise.

· 6mo ago

This week's release features a 2x faster msfvenom bootup time and new modules, including exploits for the Cisco Catalyst SD-WAN Controller Authentication Bypass (CVE-2026-20127) and osTicket Arbitrary File Read (CVE-2026-22200). https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-04-10-2026/