Metasploit Framework
Ruby PowerShell JavaScript Assembly HTML Cucumber
Failed to load latest commit information.
.github Fix link Feb 22, 2016
app Move shared example from pro into framework Apr 7, 2016
config Land #6556, include Vagrant development environment provisioner Jun 9, 2016
data Land #7436, Put Rex-exploitation Gem Back Oct 18, 2016
db still trying to fix these migrations May 11, 2016
documentation fix a few typos in KB Oct 14, 2016
external Initial import of .NET compiler and persistence Oct 8, 2016
features Fix missing text in test coverage Sep 22, 2016
lib Land #7436, Put Rex-exploitation Gem Back Oct 18, 2016
modules Fix #6993, tnspoison_checker cleanup Oct 19, 2016
plugins Update nessus.rb - Fix issues reported on #7391 Oct 3, 2016
script rails generate cucumber:install Aug 27, 2014
scripts typo Aug 13, 2016
spec Revert "Revert "use the new rex-exploitation gem"" Oct 11, 2016
test replace old rex::ui::text::table refs Aug 10, 2016
tools remove more refs Sep 20, 2016
.gitignore Merge branch 'master' into vagrant Feb 20, 2016
.gitmodules Add RDI submodule, port Kitrap0d Nov 27, 2013
.mailmap And Thao, too! Jul 1, 2016
.rspec Add modern --require to .rspec Oct 8, 2014
.rubocop.yml Reapply PR #4113 (removed via #4175) Nov 11, 2014
.ruby-gemset Restoring ruby and gemset files May 20, 2014
.ruby-version bump ruby version to 2.3.1 May 3, 2016
.simplecov Remove fastlib Sep 18, 2014
.travis.yml bump ruby version to 2.3.1 May 3, 2016
.yardopts Various merge resolutions from master <- staging Aug 15, 2014 Add individual contacts Jan 13, 2016 Add note about release notes to Aug 22, 2016
COPYING Update COPYING, too. Jan 4, 2016
Gemfile fix deps May 13, 2016
Gemfile.local.example Various merge resolutions from master <- staging Aug 15, 2014
Gemfile.lock Bump rex-exploitation gem version, see #7452. Oct 19, 2016
HACKING Update link for The Metasploit Development Environment Jul 15, 2014
LICENSE Update copyright notice to 2016 [ci skip] Jan 3, 2016 Use SVG badges to please the eyes 👀 Dec 12, 2015
Rakefile Merge branch 'feature/MSP-11130/metasploit-framework-spec-constants' … Nov 5, 2014
Vagrantfile switch to inline provisioning, use official ubuntu vagrant box Jun 9, 2016
metasploit-framework.gemspec Land #7436, Put Rex-exploitation Gem Back Oct 18, 2016
msfconsole @wvu-r7 is a skilled negotiator. s/stdout/stderr/ Oct 17, 2014
msfd Initialize the DisableBanner option Oct 8, 2015
msfrpc Change {} back to do/end Mar 9, 2015
msfrpcd allow overriding the default timeout for a session May 1, 2015
msfupdate File.exists? must die Apr 21, 2016
msfvenom Sort msfvenom --help-platforms Aug 25, 2016

Metasploit Build Status Code Climate

The Metasploit Framework is released under a BSD-style license. See COPYING for more details.

The latest version of this software is available from:

Bug tracking and development information can be found at:

New bugs and feature requests should be directed to:

API documentation for writing modules can be found at:

Questions and suggestions can be sent to:


Generally, you should use the free installer, which contains all of the dependencies and will get you up and running with a few clicks. See the Dev Environment Setup if you'd like to deal with dependencies on your own.

Using Metasploit

Metasploit can do all sorts of things. The first thing you'll want to do is start msfconsole, but after that, you'll probably be best served by reading Metasploit Unleashed, the great community resources, or the wiki.


See the Dev Environment Setup guide on GitHub, which will walk you through the whole process from installing all the dependencies, to cloning the repository, and finally to submitting a pull request. For slightly more information, see Contributing.