Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20709, adds module for Twonky Server Authentication Bypass (CVE-2025-13315,CVE-2025-13316) Auxiliary module for CVE-2025-13315/CVE-2025-13316 - Twonky Server Log Leak Authentication Bypass	Nov 28, 2025	msutovsky-r7
Land #20718, adds module for Monsta FTP RCE (CVE-2025-34299) Add Monsta FTP downloadFile RCE (CVE-2025-34299)	Nov 27, 2025	msutovsky-r7
Land #20482, fixes bug in HTTP-based login scanners Fix HTTP-based login scanners when using SSL with custom port	Nov 25, 2025	msutovsky-r7
Land #20705, adds modules for Flowise RCEs (CVE-2025-59528, CVE-2025-8943) Add Flowise RCE exploits (CVE-2025-59528, CVE-2025-8943)	Nov 21, 2025	msutovsky-r7
Land #20701, adds windows WSL registry persistence module Windows WSL registry persistence	Nov 20, 2025	msutovsky-r7
Land #20707, adds note "CAP_SYS_BOOT privileges are required" to Linux Reboot payloads Add note "CAP_SYS_BOOT privileges are required" to Linux Reboot payloads	Nov 19, 2025	msutovsky-r7

Title

Date

Author

Land #20709, adds module for Twonky Server Authentication Bypass (CVE-2025-13315,CVE-2025-13316) Auxiliary module for CVE-2025-13315/CVE-2025-13316 - Twonky Server Log Leak Authentication Bypass

Nov 28, 2025

msutovsky-r7

Land #20718, adds module for Monsta FTP RCE (CVE-2025-34299) Add Monsta FTP downloadFile RCE (CVE-2025-34299)

Nov 27, 2025

msutovsky-r7

Land #20482, fixes bug in HTTP-based login scanners Fix HTTP-based login scanners when using SSL with custom port

Nov 25, 2025

msutovsky-r7

Land #20705, adds modules for Flowise RCEs (CVE-2025-59528, CVE-2025-8943) Add Flowise RCE exploits (CVE-2025-59528, CVE-2025-8943)

Nov 21, 2025

msutovsky-r7

Land #20701, adds windows WSL registry persistence module Windows WSL registry persistence

Nov 20, 2025

msutovsky-r7

Land #20707, adds note "CAP_SYS_BOOT privileges are required" to Linux Reboot payloads Add note "CAP_SYS_BOOT privileges are required" to Linux Reboot payloads

Nov 19, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Fix broken module metadata	rn-no-release-notes	adfoster-r7
Fix deprecated "run post/" command usage in documentation	needs-unique-branch	Tejaswini-p0905
build test - will delete		cpomfret-r7
Add C program to calculate the sum of two numbers		umasreemandla-design
Fix issue when scanning via Nexpose plugin when Site has Credential	rn-fix	cpomfret-r7
Add Monsta FTP downloadFile RCE (CVE-2025-34299)	module , docs , rn-modules	Chocapikk

Name

Labels

Author

Fix broken module metadata

rn-no-release-notes

adfoster-r7

Fix deprecated "run post/" command usage in documentation

needs-unique-branch

Tejaswini-p0905

build test - will delete

cpomfret-r7

Add C program to calculate the sum of two numbers

umasreemandla-design

Fix issue when scanning via Nexpose plugin when Site has Credential

rn-fix

cpomfret-r7

Add Monsta FTP downloadFile RCE (CVE-2025-34299)

module , docs , rn-modules

Chocapikk

Create a Pull Request

Recent Blog Posts

Fri Nov 28 2025

Metasploit Wrap-Up 11/28/2025

This week, we have added 10 new modules to Metasploit Framework including an SMB to MSSQL relay module, a remote code execution module targeting Fortinet software, additional 32-bit and 64-bit RISC-V payloads, and more.The SM...

Fri Nov 21 2025

Metasploit Wrap-Up 11/21/2025

CVE-2025-64446 - Fortinet’s FortiWeb exploitationA critical vulnerability in Fortinet’s FortiWeb Web Application Firewall, now assigned CVE-2025-64446 (CVSS 9.1), allows unauthenticated attackers to gain full administrator ac...

Fri Nov 14 2025

Metasploit Wrap-Up 11/14/2025

It has “SUS” in the name, what did you expect?This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service (WSUS) vulnerability that allows for SYSTEM level remote code executi...

View More Metasploit Blog Posts