39.2K ·GitHub
What is this?
Metasploit Framework is an open-source penetration testing framework written in Ruby — one of the best-known security toolkits on GitHub, with about 39,000 stars.
Metasploit Framework is an open-source penetration testing framework written in Ruby — one of the best-known security toolkits on GitHub, with about 39,000 stars.Is it a ready-to-run tool, or a framework I'd have to build on?It is a framework, but you don't need to write code to use it: msfconsole is the primary, ready-to-run interface for driving it, and there is an API layer plus docs for writing your own modules.
It is a framework, but you don't need to write code to use it: msfconsole is the primary, ready-to-run interface for driving it, and there is an API layer plus docs for writing your own modules.How do I get it installed?Grab the official installer for Linux or macOS from the Nightly Installers page — Metasploit also comes pre-installed on Kali. For a manual or development setup there is a Dev Environment Setup guide.
Grab the official installer for Linux or macOS from the Nightly Installers page — Metasploit also comes pre-installed on Kali. For a manual or development setup there is a Dev Environment Setup guide.Does it run on Windows too, or is it Linux and macOS only?The README only offers installers for Linux and macOS (plus the pre-installed Kali build); no Windows installer is mentioned, so plan on a Unix-like system.
The README only offers installers for Linux and macOS (plus the pre-installed Kali build); no Windows installer is mentioned, so plan on a Unix-like system.Is the licensing plain and simple?Mostly: the README calls it an open-source BSD-style license, but the exact terms are not spelled out there — you are pointed to the COPYING file, and GitHub lists the license as unclassified.
Mostly: the README calls it an open-source BSD-style license, but the exact terms are not spelled out there — you are pointed to the COPYING file, and GitHub lists the license as unclassified.Can I write my own exploit modules?Yes — module development is a first-class use case: the README points module authors to the API Documentation, and code contributions go through the standard dev-setup, clone and pull-request flow. The framework itself is written in Ruby.
Yes — module development is a first-class use case: the README points module authors to the API Documentation, and code contributions go through the standard dev-setup, clone and pull-request flow. The framework itself is written in Ruby.Is there a Docker option if I'd rather not install it on my system?Yes — the repository ships a Dockerfile and a docker-compose configuration, so you can run Metasploit in containers instead of installing it straight onto the host.
Yes — the repository ships a Dockerfile and a docker-compose configuration, so you can run Metasploit in containers instead of installing it straight onto the host.Is the project still actively maintained?Yes — the repository is not archived, holds about 39,000 stars, and runs multiple CI workflows, including acceptance tests and documentation builds.
Yes — the repository is not archived, holds about 39,000 stars, and runs multiple CI workflows, including acceptance tests and documentation builds.What are similar projects?beef, Decepticon, masscan, redamon, Cybermes, ffuf, nikto, hacker-roadmap
beef, Decepticon, masscan, redamon, Cybermes, ffuf, nikto, hacker-roadmapWhich topics is it in?kali-linux, exploitation, api-documentation, infosec, hacking-tool, offensive-security, ruby, pentesting, penetration-testing, real-time, cybersecurity, security-tools
kali-linux, exploitation, api-documentation, infosec, hacking-tool, offensive-security, ruby, pentesting, penetration-testing, real-time, cybersecurity, security-tools