metasploit-framework
https://github.com/rapid7/metasploit-framework
Ruby
Metasploit Framework
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
42 Subscribers
View all SubscribersAdd a CodeTriage badge to metasploit-framework
Help out
- Issues
- Native Kerberos relay via DNS CNAME abuse (CVE-2026-20929): coercion -> AP-REQ relay -> AD CS (ESC8) certificate
- Add WordPress wp2shell unauthenticated SQL injection module
- Add Concrete CMS unauthenticated file usage disclosure module
- Add Adobe AEM Forms JEE devMode OGNL injection RCE module
- ENH: Add exploit module for unauth RCE impacting Langflow versions < 1.9.0 (CVE-2026-33017)
- ENH: Exploit module for CVE-2026-33017
- TcpServerChannel#accept blocks indefinitely by default, causing hangs on slow sessions
- Add Fetch Multi Endian Check for MIPS
- Async Mode Meterpreter
- Add WordPress WP2Shell unauthenticated RCE module (CVE-2026-63030, CVE-2026-60137)
- Docs