Metasploit Framework
Ruby JavaScript PowerShell Assembly HTML Cucumber
Latest commit de94348 Sep 29, 2016 @todb-r7 todb-r7 Land #7375, mock some rex tests for DNS lookups
Fixes #6467, as far as @lsato-r7 and I can tell.
Failed to load latest commit information.
.github Fix link Feb 22, 2016
app Move shared example from pro into framework Apr 7, 2016
config Land #6556, include Vagrant development environment provisioner Jun 9, 2016
data Add LPE exploit module for the capcom driver flaw Sep 27, 2016
db still trying to fix these migrations May 11, 2016
documentation Land #7340, auxiliary/server/socks4a docs Sep 26, 2016
external Add LPE exploit module for the capcom driver flaw Sep 27, 2016
features Apparently the tests expected the typo in DATABASE. Jul 28, 2016
lib Land #7292, add android stageless meterpreter_reverse_tcp Sep 28, 2016
modules Remove some anti-patterns, in the same spirit than #7372 Sep 28, 2016
plugins Fix #7267, Fix Wrong IDs on openvas plugin Sep 10, 2016
script rails generate cucumber:install Aug 27, 2014
scripts typo Aug 13, 2016
spec Land #7375, mock some rex tests for DNS lookups Sep 29, 2016
test replace old rex::ui::text::table refs Aug 10, 2016
tools remove more refs Sep 20, 2016
.gitignore Merge branch 'master' into vagrant Feb 20, 2016
.gitmodules Add RDI submodule, port Kitrap0d Nov 27, 2013
.mailmap And Thao, too! Jul 1, 2016
.rspec Add modern --require to .rspec Oct 8, 2014
.rubocop.yml Reapply PR #4113 (removed via #4175) Nov 11, 2014
.ruby-gemset Restoring ruby and gemset files May 20, 2014
.ruby-version bump ruby version to 2.3.1 May 3, 2016
.simplecov Remove fastlib Sep 18, 2014
.travis.yml bump ruby version to 2.3.1 May 3, 2016
.yardopts Various merge resolutions from master <- staging Aug 15, 2014 Add individual contacts Jan 13, 2016 Add note about release notes to Aug 22, 2016
COPYING Update COPYING, too. Jan 4, 2016
Gemfile fix deps May 13, 2016
Gemfile.local.example Various merge resolutions from master <- staging Aug 15, 2014
Gemfile.lock Bump MDM ver to get pro and msf back in sync. Sep 29, 2016
HACKING Update link for The Metasploit Development Environment Jul 15, 2014
LICENSE Update copyright notice to 2016 [ci skip] Jan 3, 2016 Use SVG badges to please the eyes 👀 Dec 12, 2015
Rakefile Merge branch 'feature/MSP-11130/metasploit-framework-spec-constants' … Nov 5, 2014
Vagrantfile switch to inline provisioning, use official ubuntu vagrant box Jun 9, 2016
metasploit-framework.gemspec update to latest release payload gem Sep 28, 2016
msfconsole @wvu-r7 is a skilled negotiator. s/stdout/stderr/ Oct 17, 2014
msfd Initialize the DisableBanner option Oct 8, 2015
msfrpc Change {} back to do/end Mar 9, 2015
msfrpcd allow overriding the default timeout for a session May 1, 2015
msfupdate File.exists? must die Apr 21, 2016
msfvenom Sort msfvenom --help-platforms Aug 25, 2016

Metasploit Build Status Code Climate

The Metasploit Framework is released under a BSD-style license. See COPYING for more details.

The latest version of this software is available from:

Bug tracking and development information can be found at:

New bugs and feature requests should be directed to:

API documentation for writing modules can be found at:

Questions and suggestions can be sent to:


Generally, you should use the free installer, which contains all of the dependencies and will get you up and running with a few clicks. See the Dev Environment Setup if you'd like to deal with dependencies on your own.

Using Metasploit

Metasploit can do all sorts of things. The first thing you'll want to do is start msfconsole, but after that, you'll probably be best served by reading Metasploit Unleashed, the great community resources, or the wiki.


See the Dev Environment Setup guide on GitHub, which will walk you through the whole process from installing all the dependencies, to cloning the repository, and finally to submitting a pull request. For slightly more information, see Contributing.