Metasploit Project

Official account of the Metasploit Project, part of the @rapid7 family.
Mastodon: @[email protected]
Slack:

[Metasploit Project @metasploit]

Metasploit 6.5 is out just in time for Hack Summer Camp. This release comes with Malleable C2 support for Meterpreter, more relaying improvements and an integrated MCP server. Check out all the details here: https://t.co/GcjZVboiUT

[Metasploit Project @metasploit]

"Hacktics & Telemetry, E18: Microsoft Edge 0-Click & Kubernetes AI Security (ft. Derrick Sutherland)" is live now!

Get it here: https://t.co/L2zX0PwbHb

[Douglas McKee @fulmetalpackets]

💥 I'm hiring a Staff Security Researcher at Rapid7💥

When a critical vulnerability starts getting exploited in the wild, my team figures out what's really happening and whether defenders should panic or breathe. You'll be doing fast n-day analysis from patch diffs, writing @metasploit modules, and helping shape where the framework goes next. Oh, and some zero-day hunting too.

You should be at home in a debugger and comfortable talking about your research in public. You’d be joining some absolute legends in @stephenfewer , @_CryptoCat , Deral Heiland, Brendon Watters, and Jack Heysel (that's not even the entire list 😜).

Bonus if you've contributed to Metasploit in the past or have been using AI to speed up exploit dev.

Remote, US. Apply below or DM me with questions.

https://t.co/AsMlsqEp7t

[Metasploit Project @metasploit]

Episode 17 of Hacktics & Telemetry is live: Zimbra Zero-Days, AI Torture, and Catching Malmons (ft. @LambdaMamba)! Get it here: https://t.co/JWoqkmphaI

[Metasploit Project @metasploit]

Hacktics and Telemetry, Special Brucon Edition is now live! Check it out! https://t.co/7jFiSwVNAE

[Metasploit Project @metasploit]

Our latest wrap-up is live. Metasploit drops 16 new modules in total, with 10 exploit modules covering Cisco, SonicWall, Jetbrains, PaperCut, Langflow, and more ⤵️ https://t.co/y4bWNDEj77

[Metasploit Project @metasploit]

The newest Hacktics and Telemetry is live: Meccha Chameleon RCE and Browser Hacking (ft. PinkDraconian)! Get it here: https://t.co/sNefrlRRR7

[Metasploit Project @metasploit]

Hacktics & Telemetry, Episode 13 is live!
Courtroom Prompt Injections and WhatsApp's Blind Spots (ft. Max Günther)! Get it here: https://t.co/tkoj8giBJi

[Metasploit Project @metasploit]

Thirteen modules in this week's wrap-up!
Get it here: https://t.co/kiMG37213g

[Metasploit Project @metasploit]

Latest Hacktics and Telemetry is out now!
Hacktics & Telemetry, E12: Pwn2Own, AI in Exploit Chains & Brother Printer Hacks (ft. Stephen Fewer)
Watch here: https://t.co/12L4MU1lxp

[Metasploit Project @metasploit]

We'll be demoing Metasploit 6.5 at Black Hat Arsenal Station 4 tomorrow, August 5th at 4PM. Be sure to stop by if you're attending to see the latest features in action and chat with some of the maintainers.

[Metasploit Project @metasploit]

Metasploit 6.5 shipped Malleable C2 support for all current Meterpreter payloads — same profile format you already know, now shaping Meterpreter's HTTP(S) traffic. See it in action:
https://t.co/Z6fyQjBV3h

[Metasploit Project @metasploit]

Newest Episode of Hackticks and Telemetry is live!
OpenAI's Escape, WP2Shell & DEF CON Lore (ft. Alex "Silk" Chaveriat)
https://t.co/NObVdtnMPN

[Metasploit Project @metasploit]

Our latest Wrap-up is live. This update adds Fetch Multi payloads for automatic architecture identification, expands RISC-V support, and includes a new HTTP to SMB Relay module. Check it out at: https://t.co/gIpuIB80D4

[Metasploit Project @metasploit]

This week's Metasploit update includes new exploits for Flowise CSV Agent, Apache .htaccess persistence, and macOS PackageKit privilege escalation. Check out the full details here: https://t.co/nhdXAKQcly

[Metasploit Project @metasploit]

This week's Metasploit Framework update is live, featuring new modules for Audiobookshelf, LiteLLM, Next.js, and Dalfox. We have also added improvements to service and host reporting for brute-force modules. We also have a short survey about evasion modules. You can read the full update details here: https://t.co/w5Ydx4Cw52

[Metasploit Project @metasploit]

This week's release adds a full unauthenticated RCE chain for Paperclip AI, an NTLM relay-to-self local priv esc module, a VS Code extension persistence technique, MCP server integration for AI-assisted msfconsole operation, and more. https://t.co/gOEMjZLPk9

[Metasploit Project @metasploit]

Listen to Hacktics & Telemetry, E8: How Brutecat Made $500K in Bug Bounties Hacking Google (ft. Arvin Shivram)!
Contents include: what it says on the tin :) https://t.co/kfTrUxRIZB

[Metasploit Project @metasploit]

In the latest Hacktics and Telemetry's Mitigation Minute, @_CryptoCat dives into his recent zero-day Gogs exploit and Metasploit module as he discusses what to do when there is no patch https://t.co/Gi3VKSCqoQ

[Metasploit Project @metasploit]

Checkout the War Room segment on the latest Hacktics and Telemetry episode where @stephenfewer and @_CryptoCat discuss a Cisco Catalyst SD-WAN 0-day that @rapid7 discovered and added to Metasploit https://t.co/3VxmlEsLhU