Metasploit Pro

No entries match these filters. Clear filters

1. October 19, 2026: 5.1.0-2026101901 Oct 19, 2026 · issue 115

   Metasploit Pro 5.1.0-2026101901 adds 20 new modules targeting AI/LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. platforms, snap-confine, MongoDB, and Windows AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. fetch adapters.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Check a compromised Linux host for active AV/EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. products after gaining a session.
   copy

   $ use post/linux/gather/enum_protections
   set SESSION 1
   run

   • Adds mongodb_version, mongodb_login, mongodb_schemadump, and mongodb_hashdump auxiliary modules for MongoDB enumeration and credential harvesting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Windows AArch64 fetch adapters, extending payload delivery to ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. Windows targets.
   • Updates post/linux/gather/enum_protections to detect AV/EDR software present on the target system.
   • Adds a Windows persistence module that leverages the Ollama auto-update mechanism.
   • Adds a post module that uploads a PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. shared object file into the Linux authentication chain, compiling it on-target when the system is not x64.

   +5 more show less

   • Adds an exploit module for CVE-2026-42271, a command execution flaw in BerriAI LiteLLM proxy MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. test REST endpoints.
   • Adds exploit modules for OpenCTI: one chaining CVE-2026-27960 and CVE-2026-39980 for unauthenticated remote command execution, and a SafeJS sandbox escape achieving RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. as root inside the API container (versions 6.8.16 and above).
   • Adds an exploit module for CVE-2026-53959, a broken access control flaw in 4gaBoards versions 3.3.8 and below exposing the /api/users REST endpoint and fields including ssoGoogleEmail and ssoGithubEmail.
   • Adds an exploit module for EDB-52079, an unauthenticated RCE in dizqueTV (Node.js IPTV server).
   • Adds an authenticated exploit module for CVE-2024-9264, a DuckDB command injectioncommand injectionAn attack that makes an application execute operating-system commands supplied through untrusted input. It often happens when input is passed unsafely to a shell. in Grafana SQL Expressions.
   • Adds mongodb_version, mongodb_login, mongodb_schemadump, and mongodb_hashdump auxiliary modules for MongoDB enumeration and credential harvesting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Windows AArch64 fetch adapters, extending payload delivery to ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead. Windows targets.
   • Adds a Windows persistence module that leverages the Ollama auto-update mechanism.
   • Adds a post module that uploads a PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. shared object file into the Linux authentication chain, compiling it on-target when the system is not x64.
   • Adds an exploit module for CVE-2026-42271, a command execution flaw in BerriAI LiteLLM proxy MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. test REST endpoints.

   +4 more show less

   • Adds exploit modules for OpenCTI: one chaining CVE-2026-27960 and CVE-2026-39980 for unauthenticated remote command execution, and a SafeJS sandbox escape achieving RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. as root inside the API container (versions 6.8.16 and above).
   • Adds an exploit module for CVE-2026-53959, a broken access control flaw in 4gaBoards versions 3.3.8 and below exposing the /api/users REST endpoint and fields including ssoGoogleEmail and ssoGithubEmail.
   • Adds an exploit module for EDB-52079, an unauthenticated RCE in dizqueTV (Node.js IPTV server).
   • Adds an authenticated exploit module for CVE-2024-9264, a DuckDB command injectioncommand injectionAn attack that makes an application execute operating-system commands supplied through untrusted input. It often happens when input is passed unsafely to a shell. in Grafana SQL Expressions.

   1 more in Everything

2. October 1, 2026: 5.1.0-2026093001 Oct 1, 2026 · issue 092

   Metasploit Pro 5.1.0-2026093001 adds 41 new modules including OPC-UAOPC-UAAn open, platform-neutral communication protocol for industrial automation systems, maintained by the OPC Foundation, giving cyber tools a standardized way to read and monitor data from PLCs, sensors, and SCADA equipment., KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. relay, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. DNS-takeover, and Windows AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. payloads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Scan an ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments. network segment for OPC-UA servers exposing the binary TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. transport to enumerate exposed industrial control endpoints.
   copy

   $ use auxiliary/scanner/scada/opcua_enum
   set RHOSTS 10.10.20.0/24
   run

   On a WinRMWinRMA Windows-native remote management protocol from Microsoft, implementing the WS-Management standard, that lets tools execute commands and access data on remote Windows hosts over HTTP or HTTPS. login attempt, automatically fall back to a PowerShell session when cmd shell creation is denied — useful against hardened Windows targets.
   copy

   $ use auxiliary/scanner/winrm/winrm_login
   set RHOSTS 192.168.1.50
   set USERNAME administrator
   set PASSWORD P@ssw0rd
   set SessionType powershell
   run

   • Adds auxiliary/scanner/scada/opcua_enum, a scanner module that detects OPC-UA servers speaking the OPC-UA TCP binary transport (opc.tcp://).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds SessionType option to auxiliary/scanner/winrm/winrm_login to create a cmd-backed shell, a PSRP-backed PowerShell session, or automatically fall back to PowerShell when cmd shell creation is denied.
   • Adds MSFLOGO=nyan-cat.txt environment variable support to msfconsole for selecting the nyan cat banner.
   • Adds a new command-line flag to msfconsole to print the count of modules.
   • Updates JSON RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. support to now require authentication by default, either via the database with user credentials or an auth token.

   +16 more show less

   • Introduces native Kerberos authentication relay capabilities to the framework's relay stack, including the new esc8_kerberos auxiliary module for exploiting AD CS Web Enrollment (ESC8ESC8An Active Directory privilege escalation path where an attacker abuses the Web Enrollment interface of a Microsoft Certificate Authority to coerce NTLM authentication and relay it to obtain a certificate for a privileged account.).
   • Adds auxiliary/spoof/ipv6/ipv6_ra_dns_takeover and auxiliary/spoof/dhcp/dhcpv6_dns_takeover modules to enable native IPv6 DNS-takeover coercion as part of a Kerberos authentication relay attack chain.
   • Adds KerberosTicketTrace support to the auxiliary/admin/kerberos/forge_ticket module.
   • Introduces Rex::Proto::Gss::KerberosToken as a shared low-level implementation for handling Kerberos tokens carried by GSS-API and SPNEGO.
   • Adds Windows AArch64 staged shell payloads.
   • Extends windows/smb/psexec to work with AArch64 targets.
   • Adds a MIPS64 exec payload, updates the MIPSEL and MIPSBE exec payloads, and adds prepends for all three.
   • Adds a multi-platform persistence module for Kate.
   • Adds a scanner module that enumerates ports on a host to determine whether each is a Metasploit reverse handler and what kind of shell it expects.
   • Adds an auxiliary scanner module that fingerprints Inductive Automation Ignition gateways across all major version families by probing unauthenticated info endpoints.
   • Adds a Linux x64 sandbox-evasion module that performs runtime environment checks and aborts execution when a likely sandbox or VM is detected.
   • Adds auxiliary/scanner/http/spip_annee_sqli, which exploits a blind SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. in SPIP's date column escaping logic.
   • Updates the ZoomEye search module to support the ZoomEye v2 API, adds a three-attempt retry limit, and caps results per page at 10.
   • Adds support to the post mixin for Windows sessions to run the .writable? method.
   • Updates persistence modules to use create_process instead of cmd_exec.
   • Improves start-up performance of msfconsole.
   • Adds auxiliary/scanner/scada/opcua_enum, a scanner module that detects OPC-UA servers speaking the OPC-UA TCP binary transport (opc.tcp://).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Introduces native Kerberos authentication relay capabilities to the framework's relay stack, including the new esc8_kerberos auxiliary module for exploiting AD CS Web Enrollment (ESC8ESC8An Active Directory privilege escalation path where an attacker abuses the Web Enrollment interface of a Microsoft Certificate Authority to coerce NTLM authentication and relay it to obtain a certificate for a privileged account.).
   • Adds auxiliary/spoof/ipv6/ipv6_ra_dns_takeover and auxiliary/spoof/dhcp/dhcpv6_dns_takeover modules to enable native IPv6 DNS-takeover coercion as part of a Kerberos authentication relay attack chain.
   • Introduces Rex::Proto::Gss::KerberosToken as a shared low-level implementation for handling Kerberos tokens carried by GSS-API and SPNEGO.
   • Adds Windows AArch64 staged shell payloads.

   +5 more show less

   • Adds a multi-platform persistence module for Kate.
   • Adds a scanner module that enumerates ports on a host to determine whether each is a Metasploit reverse handler and what kind of shell it expects.
   • Adds an auxiliary scanner module that fingerprints Inductive Automation Ignition gateways across all major version families by probing unauthenticated info endpoints.
   • Adds a Linux x64 sandbox-evasion module that performs runtime environment checks and aborts execution when a likely sandbox or VM is detected.
   • Adds auxiliary/scanner/http/spip_annee_sqli, which exploits a blind SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. in SPIP's date column escaping logic.

   11 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !JSON RPC now requires authentication by default (via database credentials or auth token); existing unauthenticated JSON RPC clients will be rejected on upgrade.
3. October 1, 2026: 5.1.0-2026093001 Oct 1, 2026 · issue 014

   Metasploit Pro 5.1.0-2026093001 adds 41 new modules including OPC-UAOPC-UAAn open, platform-neutral communication protocol for industrial automation systems, maintained by the OPC Foundation, giving cyber tools a standardized way to read and monitor data from PLCs, sensors, and SCADA equipment., KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. relay, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. DNS-takeover, and Windows AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices. payloads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Scan an ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments. network segment for OPC-UA servers exposing the binary TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. transport to enumerate exposed industrial control endpoints.
   copy

   $ use auxiliary/scanner/scada/opcua_enum
   set RHOSTS 10.10.20.0/24
   run

   On a WinRMWinRMA Windows-native remote management protocol from Microsoft, implementing the WS-Management standard, that lets tools execute commands and access data on remote Windows hosts over HTTP or HTTPS. login attempt, automatically fall back to a PowerShell session when cmd shell creation is denied — useful against hardened Windows targets.
   copy

   $ use auxiliary/scanner/winrm/winrm_login
   set RHOSTS 192.168.1.50
   set USERNAME administrator
   set PASSWORD P@ssw0rd
   set SessionType powershell
   run

   • Adds auxiliary/scanner/scada/opcua_enum, a scanner module that detects OPC-UA servers speaking the OPC-UA TCP binary transport (opc.tcp://).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds SessionType option to auxiliary/scanner/winrm/winrm_login to create a cmd-backed shell, a PSRP-backed PowerShell session, or automatically fall back to PowerShell when cmd shell creation is denied.
   • Adds MSFLOGO=nyan-cat.txt environment variable support to msfconsole for selecting the nyan cat banner.
   • Adds a new command-line flag to msfconsole to print the count of modules.
   • Updates JSON RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. support to now require authentication by default, either via the database with user credentials or an auth token.

   +16 more show less

   • Introduces native Kerberos authentication relay capabilities to the framework's relay stack, including the new esc8_kerberos auxiliary module for exploiting AD CS Web Enrollment (ESC8ESC8An Active Directory privilege escalation path where an attacker abuses the Web Enrollment interface of a Microsoft Certificate Authority to coerce NTLM authentication and relay it to obtain a certificate for a privileged account.).
   • Adds auxiliary/spoof/ipv6/ipv6_ra_dns_takeover and auxiliary/spoof/dhcp/dhcpv6_dns_takeover modules to enable native IPv6 DNS-takeover coercion as part of a Kerberos authentication relay attack chain.
   • Adds KerberosTicketTrace support to the auxiliary/admin/kerberos/forge_ticket module.
   • Introduces Rex::Proto::Gss::KerberosToken as a shared low-level implementation for handling Kerberos tokens carried by GSS-API and SPNEGO.
   • Adds Windows AArch64 staged shell payloads.
   • Extends windows/smb/psexec to work with AArch64 targets.
   • Adds a MIPS64 exec payload, updates the MIPSEL and MIPSBE exec payloads, and adds prepends for all three.
   • Adds a multi-platform persistence module for Kate.
   • Adds a scanner module that enumerates ports on a host to determine whether each is a Metasploit reverse handler and what kind of shell it expects.
   • Adds an auxiliary scanner module that fingerprints Inductive Automation Ignition gateways across all major version families by probing unauthenticated info endpoints.
   • Adds a Linux x64 sandbox-evasion module that performs runtime environment checks and aborts execution when a likely sandbox or VM is detected.
   • Adds auxiliary/scanner/http/spip_annee_sqli, which exploits a blind SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. in SPIP's date column escaping logic.
   • Updates the ZoomEye search module to support the ZoomEye v2 API, adds a three-attempt retry limit, and caps results per page at 10.
   • Adds support to the post mixin for Windows sessions to run the .writable? method.
   • Updates persistence modules to use create_process instead of cmd_exec.
   • Improves start-up performance of msfconsole.
   • Adds auxiliary/scanner/scada/opcua_enum, a scanner module that detects OPC-UA servers speaking the OPC-UA TCP binary transport (opc.tcp://).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Introduces native Kerberos authentication relay capabilities to the framework's relay stack, including the new esc8_kerberos auxiliary module for exploiting AD CS Web Enrollment (ESC8ESC8An Active Directory privilege escalation path where an attacker abuses the Web Enrollment interface of a Microsoft Certificate Authority to coerce NTLM authentication and relay it to obtain a certificate for a privileged account.).
   • Adds auxiliary/spoof/ipv6/ipv6_ra_dns_takeover and auxiliary/spoof/dhcp/dhcpv6_dns_takeover modules to enable native IPv6 DNS-takeover coercion as part of a Kerberos authentication relay attack chain.
   • Introduces Rex::Proto::Gss::KerberosToken as a shared low-level implementation for handling Kerberos tokens carried by GSS-API and SPNEGO.
   • Adds Windows AArch64 staged shell payloads.

   +5 more show less

   • Adds a multi-platform persistence module for Kate.
   • Adds a scanner module that enumerates ports on a host to determine whether each is a Metasploit reverse handler and what kind of shell it expects.
   • Adds an auxiliary scanner module that fingerprints Inductive Automation Ignition gateways across all major version families by probing unauthenticated info endpoints.
   • Adds a Linux x64 sandbox-evasion module that performs runtime environment checks and aborts execution when a likely sandbox or VM is detected.
   • Adds auxiliary/scanner/http/spip_annee_sqli, which exploits a blind SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. in SPIP's date column escaping logic.

   11 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !JSON RPC now requires authentication by default (via database credentials or auth token); existing unauthenticated JSON RPC clients will be rejected on upgrade.
4. docs update Aug 11, 2026 · issue 042

   Metasploit Pro adds Malleable C2 Profile support to blend Meterpreter C2 traffic with legitimate patterns and evade NIDS.

   ⤢ ⤢ ⤢ ⤢
   • Adds a Modules > Malleable Profiles page in the workspace tab bar for managing custom and framework C2 profiles, with create, upload, edit, download, and delete capabilities.
   • Supports attaching a Malleable C2 profile to a listener via Global Settings > Persistent Listeners > New Listener using the Malleable C2 Profile section — options include None, Choose an existing malleable profile, or Enter file path to a malleable profile (absolute path to a .profile file on the server filesystem).
   • Supports attaching a Malleable C2 profile when running individual exploit modules via Advanced Payload Options in the Single Module Run interface, with the same three options as listener configuration.
   • Implements the Cobalt Strike profile language subset — honoring set useragent, set uri, header, parameter, base64, base64url, prepend, and append directives inside http-get, http-post, client, server, metadata, id, and output blocks to actively shape wire traffic.
   • Accepts (but ignores) unsupported Cobalt Strike directives including https-certificate, stage, http-stager, transform-x64, transform-x86, dns-beacon, process-inject, post-ex, and keywords such as mask, netbios, xor, and print, so most real Cobalt Strike profiles load without error.

   +3 more show less

   • Applies to reverse HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. Meterpreter payloads across Windows, Linux, PHP, Python, and Java architectures, including windows/meterpreter_reverse_http, windows/x64/meterpreter_reverse_https, linux/x64/meterpreter_reverse_http, php/meterpreter_reverse_http, python/meterpreter_reverse_http, and java/meterpreter_reverse_http.
   • Validates profile content on save or upload — requiring a non-empty file containing both an http-get block and an http-post block; displays an error and aborts the save if validation fails.
   • Requires Metasploit Pro version 5.1 or later.

   8 details in Everything

5. August 3, 2026: 5.1.0-2026073001 Aug 3, 2026 · issue 035

   Metasploit Pro 5.1.0-2026073001 adds MALLEABLEC2 HTTP(S) shaping, 8 new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, RISC-V payloads, expanded CertificateTrace/KerberosTicketTrace, and an HTTP-to-SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. relay module.

   ⤢ ⤢ ⤢
   └──▷ TRY IT
   Shape Meterpreter HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. traffic using a Malleable C2 profile to blend into expected network baselines during an engagement.
   copy

   $ use exploit/multi/handler
   set PAYLOAD windows/x64/meterpreter/reverse_https
   set LHOST 10.0.0.1
   set LPORT 443
   set MALLEABLEC2 /opt/profiles/jquery.profile
   run

   Start the MCP server with dangerous module-execution actions enabled so MCP tool integrations can run and check modules via RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets..
   copy

   $ msfmcpd --enable-dangerous-actions

   • Adds MALLEABLEC2 option to all Meterpreter HTTP(S) payloads (Windows, Java, Python, PHP, Linux) to load a standard Malleable C2 profile and reshape HTTP(S) traffic.
   • Adds --enable-dangerous-actions flag to the msfmcpd CLI to opt in to dangerous actions across the eight new MCP tools that wrap existing RPC endpoints for module and session control.
   • Adds eight new MCP tools wrapping existing RPC endpoints for module and session control, backed by strict per-tool input validation.
   • Adds run_uuid job tracking across all module types when executed through RPC endpoints to support MCP tool integrations.
   • Extends CertificateTrace peer cert tracing (using the existing off / metadata / full enum) to LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. over TLS and RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely..

   +18 more show less

   • Extends CertificateTrace to surface the server's TLS peer certificate when an HTTP module connects over HTTPS, using the same off / metadata / full enum.
   • Adds a Certificate Signing Request (CSRCSRA Certificate Signing Request is a block of encoded data submitted to a certificate authority, containing a public key and identity details, so the CA can issue a signed TLS certificate without ever seeing the private key.) trace to the CertificateTrace functionality so operators can see the CSR printed when requesting certificates from AD CS.
   • Adds CertificateTrace peer cert tracing to PostgreSQL over TLS, and passes the SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. datastore option through to the underlying Postgres connection.
   • Adds improved granularity to KerberosTicketTrace: operators can now print the full trace, only tickets, or only metadata.
   • Reuses KerberosTicketTrace formatting for offline KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. artifact workflows so stored and converted tickets render with the same output style as live authentication.
   • Adds Bearer Authentication support to the MCP server plugin.
   • Adds ftp_fingerprint and ftp_list_directory methods to the Exploit::Remote::Ftp mixin, leveraging recog to fingerprint targets from their banners.
   • Adds resource and parents fields to the msf_service_info MCP tool, resource to msf_vulnerability_info, data to msf_note_info, and realm_key / realm_value to msf_credential_info.
   • Adds four encoder variants for both RISC-V 32-bit and 64-bit little-endian architectures.
   • Adds reverse_tcp and bind_tcp stagers and a shell command stage for RISC-V 64-bit and 32-bit little-endian Linux targets.
   • Adds Windows on ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. (AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices.) reverse-TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. command-shell payload.
   • Adds Linux fetch multi payloads, a fetch server for FTP-based fetch payloads, and a TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. server to rex/proto.
   • Adds a new persistence module exploits/linux/persistence/apache_htaccess that plants a mod_cgi .htaccess web shell on Linux Apache targets.
   • Adds an HTTP-to-SMB NTLM relay server module that relays incoming NTLM HTTP authentication requests to multiple SMB servers to establish SMB sessions.
   • Pro: Adds support for selecting Malleable C2 profiles from the single module run page, the payload generator, and the global persistent listeners page.
   • Pro: Adds multiple enhancements to the network topology page.
   • Pro: Adds a warning alert in the payload generator when encoder/none or encoder/eicar is selected.
   • Improves scanner/ftp/ftp_version to report the service when a host is up but no FTP banner is received.

   23 details in Everything

6. August 3, 2026: 5.1.0-2026073001 Aug 3, 2026 · issue 006

   Metasploit Pro 5.1.0-2026073001 adds MALLEABLEC2 HTTP(S) shaping, 8 new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, RISC-V payloads, expanded CertificateTrace/KerberosTicketTrace, and an HTTP-to-SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. relay module.

   ⤢ ⤢ ⤢
   └──▷ TRY IT
   Shape Meterpreter HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. traffic using a Malleable C2 profile to blend into expected network baselines during an engagement.
   copy

   $ use exploit/multi/handler
   set PAYLOAD windows/x64/meterpreter/reverse_https
   set LHOST 10.0.0.1
   set LPORT 443
   set MALLEABLEC2 /opt/profiles/jquery.profile
   run

   Start the MCP server with dangerous module-execution actions enabled so MCP tool integrations can run and check modules via RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets..
   copy

   $ msfmcpd --enable-dangerous-actions

   • Adds MALLEABLEC2 option to all Meterpreter HTTP(S) payloads (Windows, Java, Python, PHP, Linux) to load a standard Malleable C2 profile and reshape HTTP(S) traffic.
   • Adds --enable-dangerous-actions flag to the msfmcpd CLI to opt in to dangerous actions across the eight new MCP tools that wrap existing RPC endpoints for module and session control.
   • Adds eight new MCP tools wrapping existing RPC endpoints for module and session control, backed by strict per-tool input validation.
   • Adds run_uuid job tracking across all module types when executed through RPC endpoints to support MCP tool integrations.
   • Extends CertificateTrace peer cert tracing (using the existing off / metadata / full enum) to LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. over TLS and RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely..

   +18 more show less

   • Extends CertificateTrace to surface the server's TLS peer certificate when an HTTP module connects over HTTPS, using the same off / metadata / full enum.
   • Adds a Certificate Signing Request (CSRCSRA Certificate Signing Request is a block of encoded data submitted to a certificate authority, containing a public key and identity details, so the CA can issue a signed TLS certificate without ever seeing the private key.) trace to the CertificateTrace functionality so operators can see the CSR printed when requesting certificates from AD CS.
   • Adds CertificateTrace peer cert tracing to PostgreSQL over TLS, and passes the SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. datastore option through to the underlying Postgres connection.
   • Adds improved granularity to KerberosTicketTrace: operators can now print the full trace, only tickets, or only metadata.
   • Reuses KerberosTicketTrace formatting for offline KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. artifact workflows so stored and converted tickets render with the same output style as live authentication.
   • Adds Bearer Authentication support to the MCP server plugin.
   • Adds ftp_fingerprint and ftp_list_directory methods to the Exploit::Remote::Ftp mixin, leveraging recog to fingerprint targets from their banners.
   • Adds resource and parents fields to the msf_service_info MCP tool, resource to msf_vulnerability_info, data to msf_note_info, and realm_key / realm_value to msf_credential_info.
   • Adds four encoder variants for both RISC-V 32-bit and 64-bit little-endian architectures.
   • Adds reverse_tcp and bind_tcp stagers and a shell command stage for RISC-V 64-bit and 32-bit little-endian Linux targets.
   • Adds Windows on ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. (AArch64AArch64The 64-bit execution state of the ARM architecture, defined by Arm Ltd., offering a wider register file and cleaner instruction set than 32-bit ARM; cyber tools target it to run natively on ARM-based servers, phones, and embedded devices.) reverse-TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. command-shell payload.
   • Adds Linux fetch multi payloads, a fetch server for FTP-based fetch payloads, and a TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. server to rex/proto.
   • Adds a new persistence module exploits/linux/persistence/apache_htaccess that plants a mod_cgi .htaccess web shell on Linux Apache targets.
   • Adds an HTTP-to-SMB NTLM relay server module that relays incoming NTLM HTTP authentication requests to multiple SMB servers to establish SMB sessions.
   • Pro: Adds support for selecting Malleable C2 profiles from the single module run page, the payload generator, and the global persistent listeners page.
   • Pro: Adds multiple enhancements to the network topology page.
   • Pro: Adds a warning alert in the payload generator when encoder/none or encoder/eicar is selected.
   • Improves scanner/ftp/ftp_version to report the service when a host is up but no FTP banner is received.

   23 details in Everything

7. July 1, 2026: 5.0.0-2026070101 Jul 1, 2026 · release notes

   Metasploit Pro v5.0 adds modem pivot sessions, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments.-to-Meterpreter upgrade, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server plugin for msfconsole

   • Adds a new modem session type that allows opening a session to an arbitrary modem and pivoting network traffic over it as if it were a Meterpreter session.
   • Adds the ability to upgrade authenticated SMB sessions to Meterpreter sessions using PsExec techniques.
   • Adds the ability to start and stop a Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) server within msfconsole via a plugin, enabling AI tools to assist operators without restarting Metasploit.
   • Adds -c flag to msfconsole search functionality to hide child elements of search results, with global options SearchSort and SearchChildMode for controlling result ordering and visibility.
   • Updates the scanner/redis/redis_server module to output server INFO details as a readable table.

   5 details in Everything

8. June 18, 2026: 5.0.0-2026061601 Jun 18, 2026 · release notes

   Metasploit Pro 5.0 introduces payloads_manager plugin, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. tracing, and improved backup handling

   • Adds the payloads_manager plugin to maintain a local archive of custom payloads and stage them into the data directory
   • Introduces KerberosTicketTrace datastore option for Metasploit’s Kerberos authentication flows to view AS-REQ/REP messages
   • Adds multiple improvements to the backup functionality in Metasploit Pro, including better progress tracking and support for backups larger than 4GB

   3 details in Everything

9. May 13, 2026: 5.0.0-2026051301 May 13, 2026 · release notes

   Metasploit Pro 5.0.0-2026051301 adds read-only MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server and NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. relay module

   • Adds a read-only MCP server for Metasploit capable of retrieving information from loaded modules and database.
   • Adds an NTLM relay module that relays from HTTP to LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., opening an authenticated LDAP session upon success.

   2 details in Everything

10. April 27, 2026: 5.0.0-2026042601 Apr 27, 2026 · release notes

    New persistence modules, HWBridge command execution, RISC-V fileless payloads, and improved module metadata performance

    • Adds new persistence module exploit/windows/persistence/telemetry that abuses the Windows Telemetry scheduled task to establish persistence.
    • Enables command execution for non-interactive HWBridge sessions via the sessions -c flag.
    • Adds a new payload linux/loongarch64/chmod to change file permissions on LoongArch64 targets.
    • Adds riscv64le and riscv32le architecture support to the fileless fetch payload adapter, enabling in-memory ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code. execution via memfd_creatememfd_createA Linux system call that creates an anonymous, file-descriptor-backed memory region that never touches disk, giving cyber tools a way to load and execute code entirely in RAM without leaving filesystem artifacts..
    • Updates the network topology graph to show bruteforcible services present on a host.

    +2 more show less

    • Updates db.hosts RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. call to include comments associated with hosts.
    • Improves module metadata cache performance and reduces memory footprint for faster module listing.

    7 details in Everything

11. April 3, 2026: 5.0.0-2026040201 Apr 3, 2026 · release notes

    Metasploit Pro 5.0 adds OptTimedelta, DHCPEINTERFACE, and new exploit modules including generic HTTP command exec.

    • Adds LDAP::QuerySacl datastore option to ldap_query module to control whether SACL queries are performed by default
    • Adds OptTimedelta datastore option type allowing time durations in human-friendly syntax for module authors and users
    • Adds new exploits/multi/http/os_cmd_exec module targeting generic HTTP command execution vulnerabilities
    • Adds DHCPEINTERFACE option to the DHCP server mixin allowing binding to a specific network interface

    4 details in Everything

12. March 3, 2026: 4.22.9-2026030301 Mar 3, 2026 · release notes

    Metasploit Pro 4.22.9 adds GHSA/OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. references, child services reporting, GitLab service reports, default module options precedence, and social engineering tracking details.

    • Adds negative caching to the LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. entry cache, recording missing objects by DN, sAMAccountName, or SID
    • Updates the single module run page to support default module options precedence: User Selection > Default Target Options > Payload Options
    • Enhances services to support child services for improved reporting (e.g., SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. -> HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.)
    • Adds reporting support for GitLab services
    • Adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. tags and technique references to LDAP, AD CS, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. account, SCCM, Windows password cracking, getsystem, cve_2020_1472_zerologon, and atlassian_confluence_rce_cve_2023_22527 modules

    +3 more show less

    • Adds support for GHSA (GitHub Security Advisories) and OSV (Open Source Vulnerabilities) references in modules
    • Allows Acunetix vulnerabilities to be imported without complete web page data
    • Updates social engineering campaign capabilities with details on email open tracking affected by auto-fetch or blocked tracking pixels

    8 details in Everything

13. February 9, 2026: 4.22.9-2026020501 Feb 9, 2026 · release notes

    Metasploit Pro adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. tags for KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. modules and enhances MongoBleed with new options

    • Adds MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. metadata tags to modules related to Kerberos and unconstrained delegation, enabling content searches by ATT&CK technique ID.
    • Updates the MongoBleed auxiliary module to use the Wiz Magic Packet for quick detection, warn or halt if zlib is not enabled, reuse the MongoDB socket connection during memory scanning, and store extracted data in raw or JSON format.

    2 details in Everything

14. January 20, 2026: 4.22.9-2026011901 Jan 20, 2026 · release notes

    Metasploit Pro 4.22.9 adds KrbClockSkew option, Linux RISC-V payload support, and React2Shell/Waku improvements

    • Adds KrbClockSkew datastore option to KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application.-authenticated modules for clock skew mitigation
    • Adds new bind shell and fetch payload support for Linux RISC-V targets
    • Adds register constants for aarch64, amd64, arm, loongarch64, mips32, mips64, ppc32, ppc64, riscv32, riscv64, and zarch architectures
    • Adds Waku framework support to the React2Shell module via modular configuration
    • Adds additional ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. references to persistence modules

    5 details in Everything

15. December 17, 2025: 4.22.9-2025121601 Dec 17, 2025 · release notes

    Metasploit Pro 4.22.9 adds ESC16 support, session re-running, MSSQL encryption, LoongArch64 payloads, and new NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent./WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host. persistence modules.

    • AD CS MetaModule now supports ESC10ESC10A Windows Active Directory privilege-escalation vulnerability in certificate template and CA configuration abuse, allowing attackers to impersonate other accounts; tools use it to test PKI misconfigurations., ESC16, and ESC9ESC9A Windows Active Directory privilege-escalation technique exploiting certificate template configurations where the template lacks the security extension, allowing an attacker to abuse certificate enrollment to impersonate other accounts. certificate abuse chains
    • Adds the ability to re-run individual sessions using their previous configuration via the Pro interface
    • Adds a new NTLM relay module for relaying from SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. to MSSQL servers, opening an MSSQL session on success
    • Extends payload support to the LoongArch64 architecture with a new reboot payload
    • Enables sessions to MSSQL servers that require encryption by adding a new MsTds::Channel for TLS negotiation

    +1 more show less

    • Adds a Windows persistence module targeting WSL, creating registry entries (Run, RunOnce) to run Linux payloads stored in WSL

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The auxiliary/scanner/ssh/ssh_login_pubkey module has been removed; functionality is now integrated into auxiliary/scanner/ssh/ssh_login
16. November 7, 2025: 4.22.9-2025110601 Nov 7, 2025 · release notes

    Metasploit Pro 4.22.9 adds ReDoc detection, NCR RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. and Windows startup persistence modules; pro_tasks -a CLI flag

    • Adds new module #20594 for detecting publicly exposed ReDoc API documentation pages
    • Adds new unauthenticated RCE module #20650 for NCR Command Center Agent via malicious XML
    • Adds new persistence module #20662 for Windows startup folder (user or system-wide)
    • Adds support for aarch64 payloads to exploit/multi/http/gitea_git_fetch_rce (#20661)

    4 details in Everything

17. October 27, 2025: 4.22.8-2025102701 Oct 27, 2025 · release notes

    Metasploit Pro 4.22.8 adds new modules for Listmonk, MotionEye, Vvveb and Windows Script Host generation.

    • Adds auxiliary scanner module for insecure template function vulnerability in Listmonk (versions >= v4.0.0 and < v5.0.2)
    • Adds Windows fileformat module able to generate malicious Windows Script Host files

    2 details in Everything