Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20709, adds module for Twonky Server Authentication Bypass (CVE-2025-13315,CVE-2025-13316) Auxiliary module for CVE-2025-13315/CVE-2025-13316 - Twonky Server Log Leak Authentication Bypass	Nov 28, 2025	msutovsky-r7
Land #20718, adds module for Monsta FTP RCE (CVE-2025-34299) Add Monsta FTP downloadFile RCE (CVE-2025-34299)	Nov 27, 2025	msutovsky-r7
Land #20482, fixes bug in HTTP-based login scanners Fix HTTP-based login scanners when using SSL with custom port	Nov 25, 2025	msutovsky-r7

Title

Date

Author

Land #20709, adds module for Twonky Server Authentication Bypass (CVE-2025-13315,CVE-2025-13316) Auxiliary module for CVE-2025-13315/CVE-2025-13316 - Twonky Server Log Leak Authentication Bypass

Nov 28, 2025

msutovsky-r7

Land #20718, adds module for Monsta FTP RCE (CVE-2025-34299) Add Monsta FTP downloadFile RCE (CVE-2025-34299)

Nov 27, 2025

msutovsky-r7

Land #20482, fixes bug in HTTP-based login scanners Fix HTTP-based login scanners when using SSL with custom port

Nov 25, 2025

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Add autocheck report_vuln logic	library , enhancement , rn-enhancement	adfoster-r7
Add unauth RCE exploit module for HPE OneView (CVE-2025-37164)	rn-modules	sfewer-r7
Update nodejs cache sizes	easy , rn-no-release-notes	zeroSteiner
Update react2shell module: Add Waku framework support		Chocapikk
Update Pro versions	rn-no-release-notes	adfoster-r7
Add HTTP Server Version Scanner Module		apk-exe1

Name

Labels

Author

Add autocheck report_vuln logic

library , enhancement , rn-enhancement

adfoster-r7

Add unauth RCE exploit module for HPE OneView (CVE-2025-37164)

rn-modules

sfewer-r7

Update nodejs cache sizes

easy , rn-no-release-notes

zeroSteiner

Update react2shell module: Add Waku framework support

Chocapikk

Update Pro versions

rn-no-release-notes

adfoster-r7

Add HTTP Server Version Scanner Module

apk-exe1

Create a Pull Request

Recent Blog Posts

Fri Dec 19 2025

Metasploit Wrap-Up 12/19/2025

React2Shell Payload ImprovementsLast week Metasploit released an exploit for the React2Shell vulnerability, and this week we have made a couple of improvements to the payloads that it uses. The first improvement affects all M...

Fri Dec 12 2025

Metasploit Wrap-Up 12/12/2025

React2shell ModuleAs you may have heard, on December 3, 2025, the React team announced a critical Remote Code Execution (RCE) vulnerability in servers using the React Server Components (RSC) Flight protocol. The vulnerability...

Fri Dec 05 2025

Metasploit Wrap-Up 12/05/2025

Twonky Auth Bypass, RCEs and RISC-V Reverse Shell PayloadsThis was another fantastic week in terms of PR contribution to the Metasploit Framework. Rapid7’s very own Ryan Emmons recently disclosed CVE-2025-13315 and CVE-2025-1...

View More Metasploit Blog Posts