Home page logo
/

Metasploit

Metasploit took the security world by storm when it was released in 2004. It is an advanced open-source platform for developing, testing, and using exploit code. The extensible model through which payloads, encoders, no-op generators, and exploits can be integrated has made it possible to use the Metasploit Framework as an outlet for cutting-edge exploitation research. It ships with hundreds of exploits, as you can see in their list of modules. This makes writing your own exploits easier, and it certainly beats scouring the darkest corners of the Internet for illicit shellcode of dubious quality. One free extra is Metasploitable, an intentionally insecure Linux virtual machine you can use for testing Metasploit and other exploitation tools without hitting live servers.

Metasploit was completely free, but the project was acquired by Rapid7 in 2009 and it soon sprouted commercial variants. The Framework itself is still free and open source, but they now also offer a free-but-limited Community edition, a more advanced Express edition ($3,000 per year per user), and a full-featured Pro edition ($15,000 per user per year). Other paid exploitation tools to consider are Core Impact (more expensive) and Canvas (less).

The Metasploit Framework now includes an official Java-based GUI and also Raphael Mudge's excellent Armitage. The Community, Express, and Pro editions have web-based GUIs. For downloads and more information, visit the Metasploit homepage.

Popularity #2, 3
Rating ★★★★½ (12)
Latest release 4.9
March 26, 2014
(1 year, 5 months ago)
Homepage/Download
Wikipedia
Outdated/incomplete?
★★★★★ 
 83%
★★★★ 
 0%
★★★ 
 8%
★★ 
 0%
★ 
 8%
Screenshots

Comments

★★★★★ Zpn

I've been using MSF for years with the free VPNs. Metasploit has one of the best interactive community!

★★★ Krystle Devoto

Many people don't realize the workload required to pull off a successful phishing campaign. Dave Kennedy and crew have done most of the work for you

★★★★★ Abeon

The "official Java-based GUI" link to security week is now 404. New URL is securityweek dot com /2010/07/14/metasploit-new-gui/

no rating Mr Metasploit

This is undoubtedly one of the most powerful and useful tools to get to grips with. This tool can really advanced your skill level and knowledge in many security fields.

★★★★★ mohamed zain elbashee

Is by far Metasploit is the most powerful! out there . I am hooping for more integration to the framework from the other third party open source tools.

But by far I love it

no rating VPN reviews

I'm new to pentesting and metasploit. Can anyone suggest and new guides or books to help?

no rating JustAsking

Is the Pro edition still at $15,000? I was talking to someone who said the price is variable. Can anyone confirm what they paid?

★★★★★ Chris

Love this tool kit.. best ever toolkit to find.. just enjoy

★★★★★ vpn service

one the best tool i use it all the time works Great with VPN providers no issue.

★★★★★ Andrea Bodei

Metasploit is amazing, it is a good idea to develop private exploit and integrate it in this framework. In the future its features would probably be more user friendly than the expensive core impact

no rating eternalnewbie

Macuser you can use whith Kali linux, install in your Mac or use Virualbox.

no rating a000

How could it be sold for money yet still depend on free community contribution?

Couldn't figure out.

Ray Dios Haque

This was once a thin and useful product. It has been become a bloated, commercialized, and over-priced pile of cow dung. Thank you @stake for ruining *yet another* formerly useful product!

no rating MacUser

There is no longer a download for MAC? Did they stop supporting it or is it just hidden?

no rating Joomla Blog

I've heard a lot about Metasploit but didn't use. It sounds interesting and will want to use it.

★★★★★ brk

the most powerful! hope to develop more free module ! more free module!

★★★★★ ritesh singh

Metasploit Change the way of exploiting.i want to say something about metasploit "Metasploit Team Work So Hard for Upgrading this to make it More Effective and useful ."

★★★★★ Jason Hellenthal

Certainly a Top 5 Component.

★★★★★ Palgye9

This is it, the one tools that I place more faith in than some of the commercial products out there.

Your comment

Along with your rating, you can use the comment form to post a review, tutorial, tips and tricks, or anything else others will find useful. If you develop this software (or work for the company), please don't rate it. You may leave a clarifying comment as long as you state your affiliation and don't specify a star rating (just leave it as “No rating”).

 
 
  (will not be shown, will not be spammed)
  (web site, Twitter, Facebook, etc.)
(At least 50 characters. No markup is allowed. URLs will be made into links.)
 What is the standard TCP port number for the SSH service? (antispam)

Feed for updates.

Home

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]