Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #21615, adds module for Joomla Content Editor extension ( CVE-2026-48907) Add JCE profiles.import unauthenticated RCE module	Jul 29, 2026	msutovsky-r7
Land #21499, adds osx privilege escalation module (CVE-2024-27822) osx priv-esc cve-2024-27822	Jul 06, 2026	msutovsky-r7
Land #21473, adds .htaccess persistence module Add Apache .htaccess Persistence Module	Jul 03, 2026	msutovsky-r7

Title

Date

Author

Land #21615, adds module for Joomla Content Editor extension ( CVE-2026-48907) Add JCE profiles.import unauthenticated RCE module

Jul 29, 2026

msutovsky-r7

Land #21499, adds osx privilege escalation module (CVE-2024-27822) osx priv-esc cve-2024-27822

Jul 06, 2026

msutovsky-r7

Land #21473, adds .htaccess persistence module Add Apache .htaccess Persistence Module

Jul 03, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Update JSON RPC test to use Linux payload for meterpreter reverse HTTP	rn-no-release-notes	dwelch-r7
Release Metasploit 6.5	rn-enhancement	zeroSteiner
Update the metasploit-payloads and metasploit-payloads_mettle gems for 6.5	rn-no-release-notes	zeroSteiner
Updates doc to allign with new payload support	rn-no-release-notes	cgranleese-r7
Allow wildcard bind addresses for handlers that bind to all interfaces	rn-fix	dwelch-r7
Fix vncinject missing session & arch to fix VNC script	rn-fix	sjanusz-r7

Name

Labels

Author

Update JSON RPC test to use Linux payload for meterpreter reverse HTTP

rn-no-release-notes

dwelch-r7

Release Metasploit 6.5

rn-enhancement

zeroSteiner

Update the metasploit-payloads and metasploit-payloads_mettle gems for 6.5

rn-no-release-notes

zeroSteiner

Updates doc to allign with new payload support

rn-no-release-notes

cgranleese-r7

Allow wildcard bind addresses for handlers that bind to all interfaces

rn-fix

dwelch-r7

Fix vncinject missing session & arch to fix VNC script

rn-fix

sjanusz-r7

Create a Pull Request

Recent Blog Posts

Mon Aug 03 2026

Metasploit Pro 5.1 Released

Today marks the release of Metasploit Pro 5.1 - building upon the foundation laid in 5.0, adding new evasion primitives for HTTP Meterpreter payloads, support for tracking service hierarchies, a deeper and more interactive Ne...

Thu Jul 30 2026

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features.Mall...

Fri Jul 17 2026

Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements

Metasploit Wrap Up HousekeepingWhile the Metasploit Framework will be continuing its weekly release cadence, bringing you dear reader our latest content, the Weekly Wrap Up is being shifted to a bi-weekly cadence. The team is...

View More Metasploit Blog Posts