Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20354, adds module for ISPConfig code injection (CVE-2023-46818) Add module for ISPConfig Code Injection (CVE-2023-46818)	Jul 09, 2025	msutovsky-r7
Land #20364, adds WingFTP unauthenticated RCE module Add WingFTP unauthenticated RCE (CVE-2025-47812)	Jul 07, 2025	msutovsky-r7
Land #20334, adds payload linux/x64/set_hostname Add payload/linux/x64/set_hostname module.	Jul 06, 2025	msutovsky-r7
Land #20365, fixes/refactors the Maltrail RCE module Fix `exploit/unix/http/maltrail_rce.rb`	Jul 03, 2025	msutovsky-r7
Land #20346, fixes payload encoding and substitutes for smaller base64 encoder Use the smaller base64 encoder	Jun 27, 2025	msutovsky-r7
Land #20324, adds exploit for UNC path in .url files (CVE-2025-33053) Adds exploit module for Internet Shortcut UNC path vulnerability (CVE-2025-33053)	Jun 25, 2025	msutovsky-r7

Title

Date

Author

Land #20354, adds module for ISPConfig code injection (CVE-2023-46818) Add module for ISPConfig Code Injection (CVE-2023-46818)

Jul 09, 2025

msutovsky-r7

Land #20364, adds WingFTP unauthenticated RCE module Add WingFTP unauthenticated RCE (CVE-2025-47812)

Jul 07, 2025

msutovsky-r7

Land #20334, adds payload linux/x64/set_hostname Add payload/linux/x64/set_hostname module.

Jul 06, 2025

msutovsky-r7

Land #20365, fixes/refactors the Maltrail RCE module Fix `exploit/unix/http/maltrail_rce.rb`

Jul 03, 2025

msutovsky-r7

Land #20346, fixes payload encoding and substitutes for smaller base64 encoder Use the smaller base64 encoder

Jun 27, 2025

msutovsky-r7

Land #20324, adds exploit for UNC path in .url files (CVE-2025-33053) Adds exploit module for Internet Shortcut UNC path vulnerability (CVE-2025-33053)

Jun 25, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Bump rex-socket to 0.1.63	rn-no-release-notes	sjanusz-r7
Updates docs to reflect new default prompt	rn-no-release-notes	cgranleese-r7
Remove the version from the default prompt	easy , rn-no-release-notes , usability	zeroSteiner
Add a missing keyword for option validation	library , bug , easy , rn-fix	zeroSteiner
Pin StringIO version	rn-no-release-notes	adfoster-r7
Bump data_models gem to 6.0.10 and model gem to 5.0.4	rn-no-release-notes	cdelafuente-r7

Name

Labels

Author

Bump rex-socket to 0.1.63

rn-no-release-notes

sjanusz-r7

Updates docs to reflect new default prompt

rn-no-release-notes

cgranleese-r7

Remove the version from the default prompt

easy , rn-no-release-notes , usability

zeroSteiner

Add a missing keyword for option validation

library , bug , easy , rn-fix

zeroSteiner

Pin StringIO version

rn-no-release-notes

adfoster-r7

Bump data_models gem to 6.0.10 and model gem to 5.0.4

rn-no-release-notes

cdelafuente-r7

Create a Pull Request

Recent Blog Posts

Fri Jun 06 2025

Metasploit Wrap-up 06/06/25

This release adds new modules targeting ThinManager vulnerabilities (CVE-2023-27855, CVE-2023-2917, CVE-2023-27856), a udev persistence module for Linux, an Ivanti EPMM authentication bypass and remote code execution module (...

Fri May 30 2025

Metasploit Wrap-Up 05/30/2025

Metasploit has supported SOCKS proxies for years now, being able to both act as both a client and a server. Learn more on how DNS requests are made by Metasploit....

Thu May 22 2025