Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #21234, adds GhostCMS authenticated RCE module (CVE-2026-29053) Add Ghost CMS Authenticated RCE Exploit (CVE-2026-29053)	Aug 07, 2026	msutovsky-r7
Land #21615, adds module for Joomla Content Editor extension ( CVE-2026-48907) Add JCE profiles.import unauthenticated RCE module	Jul 29, 2026	msutovsky-r7

Title

Date

Author

Land #21234, adds GhostCMS authenticated RCE module (CVE-2026-29053) Add Ghost CMS Authenticated RCE Exploit (CVE-2026-29053)

Aug 07, 2026

msutovsky-r7

Land #21615, adds module for Joomla Content Editor extension ( CVE-2026-48907) Add JCE profiles.import unauthenticated RCE module

Jul 29, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Update contributing documentation for agents	rn-no-release-notes	dwelch-r7
Update json rpc auth logic	rn-enhancement	adfoster-r7
Fix smb report service crash	rn-fix	adfoster-r7
Enhance contributing documentation with module structure templates and guidelines	rn-no-release-notes	dwelch-r7
Literally unplayable	rn-no-release-notes	EverLand1
YOU HAVE DONE THE NYAN FOR 31337 SECONDS!	easy , rn-enhancement	zeroSteiner

Name

Labels

Author

Update contributing documentation for agents

rn-no-release-notes

dwelch-r7

Update json rpc auth logic

rn-enhancement

adfoster-r7

Fix smb report service crash

rn-fix

adfoster-r7

Enhance contributing documentation with module structure templates and guidelines

rn-no-release-notes

dwelch-r7

Literally unplayable

rn-no-release-notes

EverLand1

YOU HAVE DONE THE NYAN FOR 31337 SECONDS!

easy , rn-enhancement

zeroSteiner

Create a Pull Request

Recent Blog Posts

Fri Aug 14 2026

Metasploit Wrap Up: Lot of summer shells and fit http profiles

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard...

Mon Aug 03 2026

Metasploit Pro 5.1 Released

Today marks the release of Metasploit Pro 5.1 - building upon the foundation laid in 5.0, adding new evasion primitives for HTTP Meterpreter payloads, support for tracking service hierarchies, a deeper and more interactive Ne...

Thu Jul 30 2026

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features.Mall...

View More Metasploit Blog Posts