Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20660, adds windows task scheduler persistence module Windows task scheduler persistence	Oct 31, 2025	msutovsky-r7
Land #20643, expands diamorphine privilege escalation module to other rootkits Add Rootkit Privilege Escalation Signal Hunter	Oct 31, 2025	msutovsky-r7
Land #20650, adds module for NCR Command Center Agent unauthenticated RCE (CVE-2021-3122) Add NCR Command Center Agent Unauthenticated RCE (CVE-2021-3122)	Oct 30, 2025	msutovsky-r7
Land #20662, adds windows startup folder persistence module windows persistence: startup folder	Oct 29, 2025	msutovsky-r7
Land #20631, moves windows registry module into persistence category update windows registry to persistence mixin	Oct 27, 2025	msutovsky-r7
Land #20564, adds persistence suggester module persistence suggester	Oct 24, 2025	msutovsky-r7

Title

Date

Author

Land #20660, adds windows task scheduler persistence module Windows task scheduler persistence

Oct 31, 2025

msutovsky-r7

Land #20643, expands diamorphine privilege escalation module to other rootkits Add Rootkit Privilege Escalation Signal Hunter

Oct 31, 2025

msutovsky-r7

Land #20650, adds module for NCR Command Center Agent unauthenticated RCE (CVE-2021-3122) Add NCR Command Center Agent Unauthenticated RCE (CVE-2021-3122)

Oct 30, 2025

msutovsky-r7

Land #20662, adds windows startup folder persistence module windows persistence: startup folder

Oct 29, 2025

msutovsky-r7

Land #20631, moves windows registry module into persistence category update windows registry to persistence mixin

Oct 27, 2025

msutovsky-r7

Land #20564, adds persistence suggester module persistence suggester

Oct 24, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Add an aux module for the recent FortiWeb exploit (No CVE assigned yet)		sfewer-r7
Update metasploit-payloads gem to 2.0.237		zeroSteiner
Update named_pipes.txt		dbono-r7
Add error handling for winrm login issues		dwelch-r7
Bump mqtt dependency	rn-no-release-notes	adfoster-r7
Done		umasreemandla-design

Name

Labels

Author

Add an aux module for the recent FortiWeb exploit (No CVE assigned yet)

sfewer-r7

Update metasploit-payloads gem to 2.0.237

zeroSteiner

Update named_pipes.txt

dbono-r7

Add error handling for winrm login issues

rn-no-release-notes

Create a Pull Request

Recent Blog Posts

Fri Nov 14 2025

Metasploit Wrap-Up 11/14/2025

It has “SUS” in the name, what did you expect?This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service (WSUS) vulnerability that allows for SYSTEM level remote code executi...

Fri Nov 07 2025

Metasploit Wrap-Up 11/07/2025

New module content (3)Centreon authenticated command injection leading to RCE via broker engine "reload" parameterAuthor: h00die-gr3y h00die.gr3y@gmail.comType: ExploitPull request: #20672 contributed by h00die-gr3yPath: linu...

Fri Oct 31 2025

Metasploit Wrap-Up 10/31/2025

New module content (3)ReDoc API Docs UI ExposedAuthor: Hamza Sahin Type: AuxiliaryPull request: #20594 contributed by HamzaSahin61Path: scanner/http/redoc_exposedDescription: Adds a module to detect publicly exposed ReDoc API...

View More Metasploit Blog Posts