Metasploit Framework
Featured💥 Exploitation · Ruby
The Metasploit Framework is the world's most widely used penetration testing software. It helps security teams verify vulnerabilities, manage security assessments, and improve security awareness. Metasploit provides a comprehensive environment for writing, testing, and executing exploit code against remote targets. It includes over 2,300 exploits, 1,100 auxiliary modules, 400 post-exploitation modules, and 600 payloads including Meterpreter. The framework supports every phase of a penetration test from reconnaissance to post-exploitation.
Installation
installer (recommended)
$ curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstallapt (Kali)
$ sudo apt install metasploit-frameworkdocker
$ docker pull metasploitframework/metasploit-frameworkUse Cases
- Exploit development and testing
- Penetration testing and security assessments
- Post-exploitation and lateral movement
- Payload generation with msfvenom
- Vulnerability verification and validation
- Red team operations and adversary simulation
Tags
Details
- Category
- 💥 Exploitation
- Language
- Ruby
- Repository
- rapid7/metasploit-framework
- Platforms
- 🐧linux🍎macos🪟windows
Links
Used in 1 Workflow
Community Reviews
Alternatives & Comparisons
Covenant
C#.NET C2 framework. Collaborative, web-based interface for red team operations and implant management.
Compare Metasploit Framework vs CovenantSliver
GoOpen-source C2 framework by BishopFox. mTLS, HTTP(S), DNS, WireGuard implants with multi-operator support.
Compare Metasploit Framework vs SliverEmpire
PythonPost-exploitation agent built on PowerShell and Python. Cryptologically-secure communications and flexible architecture.
Compare Metasploit Framework vs EmpireMythic
GoCollaborative, multi-platform C2 framework. Docker-based with web UI, multiple agent types, and plugin architecture.
Compare Metasploit Framework vs MythicHavoc
C/C++Modern C2 framework. Qt-based GUI, BOF support, custom agents, and a Cobalt Strike-inspired workflow.
Compare Metasploit Framework vs Havocpwncat
PythonPost-exploitation platform and target management. Automatic privesc, persistence, file transfer - the smart reverse shell.
Compare Metasploit Framework vs pwncatMore in Exploitation
BloodHound
GoActive Directory attack path mapping. Visualizes privilege escalation paths using graph theory.
Impacket
PythonCollection of Python classes for working with network protocols. Essential for Windows/AD pentesting.
CrackMapExec
PythonSwiss army knife for pentesting Active Directory. SMB, LDAP, MSSQL, WinRM enumeration and exploitation.
Evil-WinRM
RubyUltimate WinRM shell for pentesting. Upload/download, in-memory PowerShell, DLL injection, pass-the-hash.
Covenant
C#.NET C2 framework. Collaborative, web-based interface for red team operations and implant management.
Sliver
GoOpen-source C2 framework by BishopFox. mTLS, HTTP(S), DNS, WireGuard implants with multi-operator support.