Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, an...

This video demonstrates the use of Meterpreter's Malleable C2 capabilities that were introduced in Metasploit Framework 6.5.

Metasploit Framework 6.5 launches with Malleable C2 profile support, new MCP server integration support for AI-tooling, NTLM relaying upgrades, and MITRE ATT&CK tagging to streamline threat emulation

The Metasploit Weekly Wrap-up is transitioning to a bi-weekly publishing schedule to allow time for recording project demos. This update introduces the new Linux Fetch Multi payload family, which auto...

Stay up to date with the latest Metasploit Framework releases. This week's update introduces new exploit modules for the Flowise CSV Agent, Apache .htaccess persistence, and a macOS PackageKit privile...

Metasploit is currently seeking user feedback on planned improvements to evasion capabilities via a proposal and feedback form that remains open until July 1, 2026. The latest update includes several ...

On July 9, 2024, Citrix disclosed CVE-2024-6235, a sensitive information disclosure vulnerability affecting NetScaler Console. While “information disclosure” s…

On April 3, 2025, Ivanti published an advisory for CVE-2025-22457, an unauthenticated remote code execution vulnerability due to a stack based buffer overflow.…

This week's Metasploit Wrap Up saw 3 new modules. Learn more about the enhancements, features, and bugs fixed.

On January 6, 2025, Sitecore published a security bulletin, SC2024-002-624693 , for a critical unauthenticated remote code execution (RCE) vulnerability affect…

Overview This pull request adds an unauthenticated RCE exploit module targeting BeyondTrust Privileged Remote Access & Remote Support, leveraging CVE-2024-12356 + CVE-2025-1094. CVE-2024-12356 ...

This PR creates a new persistence mechanism via Burp extension. Install the extension in burp and it gives you back a shell every burp start. Tested against windows and linux targets. You can eithe...

This week the Metasploit Framework was blessed with an authenticated RCE module in LibreNMS, an autodiscovering PHP / MySQL-based network monitoring system.

This Metasploit Weekly saw 4 new module contents. Adds a module for CVE-2023-2640 & CVE-2023-32629, among others. Learn more!

CVE-2024-53677 is a flawed upload logic vulnerability in Apache Struts 2. The vulnerability permits an attacker to override internal file upload variables in a…

This weekly release includes RCEs for Moodle e-Learning platform, Primefaces, WordPress Really Simple SSL & CyberPanel along with two other modules.

The Lorex 2K Indoor Wi-Fi Security Camera is a cloud-based video camera for consumers. This device was a target at the 2024 Pwn2Own IoT competition.

Rapid7's vulnerability and exploit research team does industry-leading attack research that prioritizes and uncovers risk for organizations worldwide. We’re looking for an experienced vulnerability re...