Download Metasploit to complete your penetration testing assessments faster and easier

Metasploit helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments.

Select your operating system

With this single download, you can choose to install:

Metasploit Edition After Installation
Metasploit Pro Request 7-day trial or enter purchased license.
Metasploit Express Enter purchased license.
Metasploit Community Request free product key.
Metasploit Framework No registration required.
Screenshots

View more screenshots

Related Software

Nexpose Community Edition

The Nexpose Community Edition is a free, single-user vulnerability management solution specifically designed for very small organizations or individual use.

Select your prefered OS to download

Metasploit Framework Source Code

The Metasploit Framework is an open source platform that supports vulnerability research, exploit development, and the creation of custom security tools. If you wish to work with the source code, this download is right for you. If you are looking to use Metasploit Framework for penetration testing, we recommend you download the generic Metasploit installer instead.

SOURCE CODE DOWNLOAD

Metasploit Archive

We have our secret stash of old copies of Metasploit Framework because we just can't let go. If you're like us, you'll enjoy the Metasploit Framework download archive.

METASPLOIT ARCHIVE

Download and Verify

Verify Metasploit Download

Check the SHA-1 hash if your installer is not working properly, or verify the PGP signature to verify that the download is genuine.

Windows SHA1 PGP
Linux 32-bit SHA1 PGP
Linux 64-bit SHA1 PGP
Framework Source SHA1 PGP

Download a snapshot via Subversion:

All Metasploit Framework installations include the Subversion (SVN) version control system, which is mainly used to update the Metasploit Framework to the latest version. Subversion also enables you to download any outdated snapshot of the Metasploit Framework in-between these stable versions. Simply enter the following command to get started:

$ svn co https://www.metasploit.com/svn/framework3/trunk/

We use a 'Turbo SSL' SSL certificate for the metasploit.com server and mirror the Subversion tree on the SSL service of metasploit.com. If you are using the SSL service to access the Subversion tree, Subversion may not recognize the certificate authority and ask you to verify the fingerprint. Please verify that what you see matches the text below and select "p" to permanently trust our certificate.

$ svn update
Error validating server certificate for 'https://www.metasploit.com:443':
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
Certificate information:
- Hostname: metasploit.com
- Valid: from Tue, 16 Mar 2010 12:09:59 GMT until Mon, 01 Apr 2013 22:02:24 GMT
- Issuer: 07969287, http://certificates.godaddy.com/repository, GoDaddy.com, Inc., Scottsdale, Arizona, US
- Fingerprint: da:16:ad:cb:4c:6f:7d:cf:b7:7e:5e:e5:f9:a7:a1:8b:3a:a2:6a:92
(R)eject, accept (t)emporarily or accept (p)ermanently?

See the Metasploit Framework installation guides for platform-specific information.