Metasploit

The world's most used penetration testing framework — know your weaknesses before attackers do.

Metasploit is the world's leading open-source penetration testing framework, providing security professionals with a comprehensive platform for developing, testing, and executing exploit code against remote targets. Maintained by Rapid7, it includes over 2,000 exploit modules, auxiliary scanners, payload generators, and post-exploitation tools. Its modular architecture allows testers to combine exploits and payloads to suit the target environment, while Meterpreter, an advanced payload, provides in-memory command execution and extensibility for post-exploitation activities. The msfconsole provides a unified command-line interface, with a database backend for organizing host data, services, and discovered vulnerabilities. Used by penetration testers, security researchers, and red teams, Metasploit helps organizations identify and validate their security weaknesses before malicious actors can exploit them.