Penetration testing framework
Rapid7's open-source framework for developing, testing and running exploit modules and auxiliary checks in authorised security assessments.
Metasploit Framework provides a large, curated library of modules for known vulnerabilities, scanners and post-exploitation tasks, with a common interface (msfconsole) and a database to track hosts and findings. It is used by penetration testers to validate that vulnerabilities are exploitable and by defenders to reproduce issues and test detections.
It is a dual-use tool. Use it only within an agreed scope on systems you own or are authorised to test.
BSD-3-Clause · BSD 3-Clause License · Open source
GitHub does not detect the licence; the LICENSE file (Debian copyright format) gives BSD-3-Clause for the framework, with third-party components under their own licences.
Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: NOASSERTION.
1 published advisory for Metasploit Framework in GitHub repository advisories. Keep the tool updated: security tools often run with broad access.
GHSA-4g65-vw26-x26hCVE-2026-41316high2026-08-06
db_import unsafe deserialisation (CWE-502) exposes Metasploit to code execution via crafted XML/ZIP import (related to CVE-2026-41316)
Sources: GitHub repository advisories · checked 2026-10-20.
Phishing simulation framework for awareness programmes
Open-source framework to run authorised phishing simulation campaigns, with templates, landing pages, scheduling and result tracking.
Small detection tests mapped to MITRE ATT&CK
Red Canary's library of small, portable tests mapped to MITRE ATT&CK techniques, used to check whether detections and logging work.
Automated adversary emulation platform
Adversary emulation platform created by MITRE, now in the Apache organisation on GitHub, that runs ATT&CK-mapped operations through agents to test defences.
Template-based vulnerability scanner
Fast vulnerability scanner driven by YAML templates, with thousands of community templates for CVEs, misconfigurations and exposures across many protocols.
Intercepting proxy and DAST scanner for web apps
Web application security scanner and intercepting proxy, formerly OWASP ZAP, with automated scans, a desktop UI, an API and a large add-on marketplace.
Network discovery and security auditing tool
The Network Mapper: host discovery, port scanning, service and OS detection, and the Nmap Scripting Engine (NSE) for further checks.
