Skip to content


Subversion checkout URL

You can clone with
Download ZIP
Metasploit Framework
Ruby JavaScript Perl Python C Assembly Other
Branch: master
Failed to load latest commit information.
app turn nil publics and privates into blanks
config Update database.yml.example to ref MSF-DEV
data Land #5880, adds ScriptHost UAC bypass for Win7/2008
db Add polymorphic relationship to Mdm::Vuln
documentation Restore the hallowed developer's guide
external Replace external source
features Capitalized 'Accepted'
lib Land #5840, add LLMNR & mDNS modules
modules Land #5840, add LLMNR & mDNS modules
plugins Check for a nil header value
script rails generate cucumber:install
scripts rickrolling is important
spec Land #5840, add LLMNR & mDNS modules
test Another update
tools Land #5967, add PACKETSTORM reference types.
.gitignore remove android meterpreter bins, update to payloads 1.0.2
.gitmodules Add RDI submodule, port Kitrap0d
.mailmap Sorting and adding a couple more -r7 to mailmap
.rspec Add modern --require to .rspec
.rubocop.yml Reapply PR #4113 (removed via #4175)
.ruby-gemset Restoring ruby and gemset files
.ruby-version Bump Ruby version to 2.1.6
.simplecov Remove fastlib
.travis.yml restrict git diff filter to something travis can expand
.yardopts Various merge resolutions from master <- staging Revert a couple of the suggested edits
COPYING Happy new year!
Gemfile Handle content-type weirdness from Anemone
Gemfile.local.example Various merge resolutions from master <- staging
Gemfile.lock update to metasploit-payloads 1.0.11
HACKING Update link for The Metasploit Development Environment
Rakefile Merge branch 'feature/MSP-11130/metasploit-framework-spec-constants' …
metasploit-framework-db.gemspec locking the r7 managed gems to specific versions
metasploit-framework-full.gemspec Make the version constraint a range
metasploit-framework-pcap.gemspec Depend on metasloit-framework in optional gemspecs
metasploit-framework.gemspec update to metasploit-payloads 1.0.11
msfbinscan Fix typo in msfbinscan
msfconsole @wvu-r7 is a skilled negotiator. s/stdout/stderr/
msfd Remove fastlib
msfelfscan Remove fastlib
msfmachscan Remove fastlib
msfpescan Remove fastlib
msfrop Remove fastlib
msfrpc Change {} back to do/end
msfrpcd allow overriding the default timeout for a session
msfupdate Always use maybe_wait_and_exit in msfupdate
msfvenom Lnad #5660, @wchen-r7's warbird check

Metasploit Build Status Code Climate

The Metasploit Framework is released under a BSD-style license. See COPYING for more details.

The latest version of this software is available from:

Bug tracking and development information can be found at:

New bugs and feature requests should be directed to:

API documentation for writing modules can be found at:

Questions and suggestions can be sent to:


Generally, you should use the free installer, which contains all of the dependencies and will get you up and running with a few clicks. See the Dev Environment Setup if you'd like to deal with dependencies on your own.

Using Metasploit

Metasploit can do all sorts of things. The first thing you'll want to do is start msfconsole, but after that, you'll probably be best served by reading Metasploit Unleashed, the great community resources, or the wiki.


See the Dev Environment Setup guide on GitHub, which will walk you through the whole process from installing all the dependencies, to cloning the repository, and finally to submitting a pull request. For slightly more information, see Contributing.

Something went wrong with that request. Please try again.