Owner

rapid7

22 indexed repositories · View on GitHub

metasploit-framework
Metasploit Framework

Ruby · 39026 stars
metasploit-payloads
Unified repository for different Metasploit Framework payloads

C · 2060 stars
recog
Pattern recognition for hosts, services, and content

Ruby · 795 stars
mettle
This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.

C · 491 stars
metasploit-omnibus
Packaging metasploit-framework with omnibus

Ruby · 332 stars
dap
Data Analysis Pipeline

Ruby · 164 stars
ruby_smb
A native Ruby implementation of the SMB Protocol Family

Ruby · 86 stars
go-get-proxied
Cross platform retrieval of system proxy configurations

Go · 68 stars
smbj-rpc
Created by Paul Miseiko via the GitHub Connector

Java · 63 stars
metasploit_data_models
MSF database code, gemified

Ruby · 56 stars
rex-powershell
Rex library for dealing with Powershell Scripts

Ruby · 54 stars
metasploit-credential
Code for modeling and managing credentials in Metasploit, implemented as a Rails Engine

Ruby · 30 stars
rapid7-bulk-export-mcp
Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.

Python · 30 stars
resynth
A network packet synthesis language

Rust · 26 stars
metasploit-model
Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_...

Ruby · 15 stars
rex-socket
The Rex Socket Abstraction Library

Ruby · 13 stars
insightappsec-scan-github-actions

JavaScript · 12 stars
recog-ruby
Recog-Ruby: Pattern Recognition using Rapid7 Recog

Ruby · 10 stars
github-status-checker
Status Checker tool for GitHub. Uses https://www.githubstatus.com/api

Python · 7 stars
rex-core
Created by David Maloney via the GitHub Connector

Ruby · 6 stars
2 more repositories live on View on GitHub

Beginner friendly Everything

Open All

NTLM relay: identity strings keep embedded null bytes when the client negotiates UNICODE Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

rapid7/metasploit-framework#21919 · Opened Sep 19, 2026
macOS is transition away from x64_64. Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

rapid7/metasploit-omnibus#251 · Opened Sep 18, 2026
Android stageless sessions die after connect due to unset `stageless_class` Open

Difficulty 3/5 1-2 days Newbie friendliness 70/100

rapid7/metasploit-payloads#815 · 1 comment · Opened Sep 16, 2026
Gitlab Critical Path Traversal CVE-2026-85706 Open

suggestion-module

rapid7/metasploit-framework#21907 · 1 comment · 1 assignee · Opened Sep 15, 2026
Fingerprint#match interpolation takes the wrong branch when an optional capture becomes "" instead of nil Open

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

rapid7/recog-ruby#24 · Opened Sep 11, 2026
Add Windows AARCH64 support to fetch payloads Open

suggestion-feature

rapid7/metasploit-framework#21889 · 1 comment · 1 assignee · Opened Sep 8, 2026
ENH: Exploit module for Langflow authenticated Remote Code Execution vulnerability CVE-2026-7873 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rapid7/metasploit-framework#21876 · Opened Sep 5, 2026
ENH: Exploit module for Langflow Unauthenticated Remote Code Execution vulnerability CVE-2026-10134 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 55/100

rapid7/metasploit-framework#21874 · Opened Sep 4, 2026
Add msftidy_docs to autorun Open

rapid7/metasploit-framework#21872 · 3 comments · 1 assignee · Opened Sep 3, 2026
Add DeFangedMode documentation check Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

rapid7/metasploit-framework#21871 · Opened Sep 3, 2026
ENH: Exploit module for Langflow Unauthenticated Remote Code Execution vulnerability CVE-2026-0769 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 55/100

rapid7/metasploit-framework#21866 · Opened Sep 3, 2026
ENH: Exploit module for Langflow Unauthenticated Remote Code Execution vulnerability CVE-2026-0768 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 45/100

rapid7/metasploit-framework#21863 · Opened Sep 2, 2026
ENH: Exploit module for Langflow Authenticated Remote Code Execution vulnerability CVE-2026-5027 Open

suggestion-feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rapid7/metasploit-framework#21855 · Opened Sep 1, 2026
ENH: Exploit module for Langflow Authenticated Remote Code Execution vulnerability CVE-2026-19286 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 38/100

rapid7/metasploit-framework#21844 · Opened Aug 29, 2026
Use `directory?` not `exists?` when checking if a directory exists Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 74/100

rapid7/metasploit-framework#21833 · 9 comments · 1 reaction · Opened Aug 26, 2026
weblogic_deserialize_marshalledobject.rb Payload Compatibility Error Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

rapid7/metasploit-framework#21821 · Opened Aug 25, 2026
exploit/linux/samba/trans2open raises NoMethodError for report_service Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

rapid7/metasploit-framework#21811 · Opened Aug 23, 2026
TFTP Fetch Fileless issues Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

rapid7/metasploit-framework#21801 · 3 comments · Opened Aug 21, 2026
Socket#sendto removed in newer Ruby — affects dozens of call sites in lib/ and modules/ Open

Stale

Difficulty 4/5 3-5 days Newbie friendliness 64/100

rapid7/metasploit-framework#21777 · 2 comments · Opened Aug 12, 2026
Should we support `socketx0` convention for AARCH Windows/osx/Linux stagers? Open

suggestion-feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rapid7/metasploit-framework#21774 · 4 comments · Opened Aug 11, 2026
Update VisualStudio SDK for Meterpreter and Extensions Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rapid7/metasploit-payloads#811 · Opened Aug 11, 2026
Error: No such file or directory @ rb_sysopen - /tmp/d20260809-114545-33t3v9/original/AndroidManifest.xml Open

question Stale

Difficulty 4/5 3-5 days Newbie friendliness 25/100

rapid7/metasploit-framework#21764 · 1 comment · Opened Aug 9, 2026
Error: No such file or directory @ rb_sysopen - /tmp/d20260809-114545-33t3v9/original/AndroidManifest.xml Open

bug Stale

Difficulty 4/5 3-5 days Newbie friendliness 22/100

rapid7/metasploit-framework#21763 · 1 comment · Opened Aug 9, 2026
Stageless PHP Meterpreter breaks without setting the `stdapi` extension explicitly Open

bug not-stale

rapid7/metasploit-framework#21758 · 5 comments · 1 assignee · Opened Aug 7, 2026
ENH: Auxiliary module for Flowise Authentication Bypass CVE-2025-58434 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 38/100

rapid7/metasploit-framework#21756 · Opened Aug 6, 2026
Metasploit Kerberoast Module - Database Error on String Size - New Issue because Old AutoClosed Open

bug Stale

Difficulty 4/5 3-5 days Newbie friendliness 25/100

rapid7/metasploit-framework#21751 · 1 comment · Opened Aug 4, 2026
MSSQL modules cause large CLOSE_WAIT socket accumulation and file descriptor leak Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

rapid7/metasploit-framework#21749 · 3 comments · Opened Aug 4, 2026
Investigate analyze_db issue deeper Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

rapid7/metasploit-framework#21741 · 2 comments · Opened Jul 31, 2026
CVE-2026-54121 - Certighost Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rapid7/metasploit-framework#21737 · Opened Jul 31, 2026
Module idea: CVE-2026-63720 — datamodel-code-generator code injection via customBasePath Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rapid7/metasploit-framework#21736 · Opened Jul 31, 2026
Add min and max to OptInt option Open

suggestion-feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rapid7/metasploit-framework#21732 · Opened Jul 30, 2026
feat: upgrade to FastMCP v4 + MCP 2026-07-28 RC for stateless session protocol Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

rapid7/rapid7-bulk-export-mcp#34 · Opened Jul 29, 2026
"NoMethodError undefined method '[]' for nil" when using scanner/discovery/arp_sweep Open

bug Stale

Difficulty 3/5 1-2 days Newbie friendliness 65/100

rapid7/metasploit-framework#21721 · 2 comments · Opened Jul 28, 2026
ENH: Add exploit module for unauth RCE impacting Langflow versions (CVE-2026-0770) Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 42/100

rapid7/metasploit-framework#21712 · 2 comments · Opened Jul 24, 2026
unbale to geneerate the payload Open

question Stale

Difficulty 4/5 3-5 days Newbie friendliness 18/100

rapid7/metasploit-framework#21708 · 2 comments · Opened Jul 24, 2026
Native Kerberos relay via DNS CNAME abuse (CVE-2026-20929): coercion -> AP-REQ relay -> AD CS (ESC8) certificate Open

Stale

Difficulty 5/5 Over a week Newbie friendliness 20/100

rapid7/metasploit-framework#21693 · 1 comment · 1 reaction · Opened Jul 21, 2026
وبوبوثزث Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

rapid7/metasploit-omnibus#250 · Opened Jul 20, 2026
DNS feature weirdness Open

bug confirmed

rapid7/metasploit-framework#21684 · 3 comments · 1 assignee · Opened Jul 20, 2026
Installation Instructions Slightly Outdated - Suggested Improvements Included Open

suggestion-docs

Difficulty 1/5 Under an hour Newbie friendliness 88/100

rapid7/metasploit-framework#21669 · 2 comments · 1 reaction · Opened Jul 10, 2026
Automatic LPORT selection Open

suggestion-feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

rapid7/metasploit-framework#21604 · 2 comments · 1 reaction · Opened Jun 25, 2026
Consolidate bind_address/bind_Addresses for reverse handlers Open

suggestion-feature

rapid7/metasploit-framework#21601 · 4 comments · 1 assignee · Opened Jun 24, 2026
Add stdin support for modules Open

suggestion-feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

rapid7/metasploit-framework#21591 · 3 comments · Opened Jun 21, 2026
Investigate adding vulnerable software versions to module metadata Open

suggestion-feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

rapid7/metasploit-framework#21583 · 3 comments · Opened Jun 18, 2026
Clean Out the Attic Open

suggestion-module

Difficulty 5/5 Over a week Newbie friendliness 30/100

rapid7/metasploit-framework#21560 · 1 comment · Opened Jun 10, 2026
Universal LPE on Ubuntu 18.04 to 26.04 Open

suggestion-module

Difficulty 4/5 3-5 days Newbie friendliness 42/100

rapid7/metasploit-framework#21556 · 3 comments · Opened Jun 10, 2026
FreeBSD LPE Open

suggestion-module

rapid7/metasploit-framework#21533 · 1 assignee · Opened Jun 3, 2026
Write specs for missing RPC endpoints Open

suggestion-feature

Difficulty 4/5 3-5 days Newbie friendliness 52/100

rapid7/metasploit-framework#21518 · Opened May 28, 2026
Docs: Fix outdated flags in How-to-use-msfvenom.md Open

suggestion-docs

Difficulty 1/5 Under an hour Newbie friendliness 76/100

rapid7/metasploit-framework#21503 · 2 comments · Opened May 26, 2026
Value Error Conversion Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

rapid7/terraform-provider-rapid7#6 · Opened May 19, 2026
Update the R7 metasm fork to pull in the commits from the origin repo Open

dependencies library

Difficulty 5/5 Over a week Newbie friendliness 35/100

rapid7/metasploit-framework#21464 · Opened May 15, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

rapid7

Showing the newest 100

Get new issues in your inbox