Rapid7 (@rapid7)

Top repositories

1

metasploit-framework

Metasploit Framework
Ruby
31,198
star
2

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
HTML
4,454
star
3

metasploit-payloads

Unified repository for different Metasploit Framework payloads
C
1,543
star
4

hackazon

A modern vulnerable web app
HTML
944
star
5

ssh-badkeys

A collection of static SSH keys (public and private) that have made their way into software and hardware products.
790
star
6

IoTSeeker

Created by Jin Qian via the GitHub Connector
Perl
735
star
7

recog

Pattern recognition for hosts, services, and content
Ruby
591
star
8

metasploit-vulnerability-emulator

Created by Jin Qian via the GitHub Connector
Perl
424
star
9

mettle

This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.
C
398
star
10

meterpreter

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD
C
318
star
11

sonar

Project Sonar
234
star
12

metasploit-omnibus

Packaging metasploit-framework with omnibus
Ruby
222
star
13

warvox

Ruby
197
star
14

dap

Data Analysis Pipeline
Ruby
151
star
15

nexpose-client

DEPRECATED: Rapid7 Nexpose API client library written in Ruby
Ruby
145
star
16

embedded-tools

AGS Script
143
star
17

awsaml

Awsaml is an application for providing automatically rotated temporary AWS credentials.
JavaScript
133
star
18

myBFF

myBFF - a Brute Force Framework
Python
132
star
19

docker-logentries

Forward all your Docker logs to logentries, like a breeze
JavaScript
111
star
20

le_node

Node module for logentries.com
JavaScript
108
star
21

jsobfu

Obfuscate JavaScript (beyond repair) with Ruby
JavaScript
89
star
22

metasploit-javapayload

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD
Java
87
star
23

ruby_smb

A native Ruby implementation of the SMB Protocol Family
Ruby
76
star
24

vm-console-client-python

the UNOFFICIAL (but useful) Python library for the Rapid7 InsightVM/Nexpose RESTful API
Python
75
star
25

le_js

Client-side JavaScript logging library for Logentries
JavaScript
73
star
26

vm-automation

Created to simplify interactions with virtual machines
Python
73
star
27

insightconnect-plugins

Plugin source code for the InsightConnect SOAR product, developer documentation at https://docs.rapid7.com/insightconnect/getting-started
Python
62
star
28

conqueso

Centrally and dynamically change configuration values of your services!
JavaScript
55
star
29

smbj-rpc

Created by Paul Miseiko via the GitHub Connector
Java
54
star
30

rex-powershell

Rex library for dealing with Powershell Scripts
Ruby
51
star
31

metasploit_data_models

MSF database code, gemified
Ruby
51
star
32

DLLHijackAuditKit

This toolkit detects applications vulnerable to DLL hijacking (released in 2010)
JavaScript
51
star
33

metasploit-aggregator

Created by Jeffrey Martin via the GitHub Connector
Ruby
50
star
34

go-get-proxied

Cross platform retrieval of system proxy configurations
Go
49
star
35

insightvm-sql-queries

InsightVM helpful SQL queries
49
star
36

rex

Rex provides a variety of classes useful for security testing and exploit development.
Ruby
48
star
37

le_ruby

Ruby logging support for logentries.com
Ruby
47
star
38

data

HTML
42
star
39

convection

A fully generic, modular DSL for AWS CloudFormation
Ruby
41
star
40

github-connector

The GitHub Active Directory Connector allows managing GitHub organizations with Active Directory.
Ruby
34
star
41

krip

Dead simple encryption, using WebCrypto under the hood
JavaScript
33
star
42

le_dotnet

.NET support for Logentries
C#
30
star
43

le_java

Direct logging support for Java language
Java
30
star
44

metasploit-credential

Code for modeling and managing credentials in Metasploit, implemented as a Rails Engine
Ruby
29
star
45

re2-java

re2 for Java
Java
27
star
46

vaccination

C
26
star
47

metasploit-baseline-builder

Created by Jeffrey Martin via the GitHub Connector
Python
25
star
48

nexpose-client-python

DEPRECATED : Rapid7 Nexpose API client library written in Python
Python
25
star
49

nexpose-resources

Scripts, SQL queries, and other resources for Nexpose
Ruby
25
star
50

metabot

Use security tools from within IRC.
Ruby
24
star
51

pdf-renderer

Golang based app that will render an html page and create a pdf.
Go
24
star
52

lecli

Seamlessly view recent events, run queries and manage your account from the command line
Python
23
star
53

msfrpc-client

Rapid7 Metasploit API client library written in Ruby
Ruby
23
star
54

propsd

Dynamic property management at scale
JavaScript
22
star
55

builderator

Tools to make CI Packer builds awesome
Ruby
22
star
56

sonar-client

Ruby
21
star
57

savery

JavaScript
21
star
58

tabtalk

Secure, encrypted cross-tab communication in the browser
JavaScript
21
star
59

le_chef

Ruby
20
star
60

Websploit-Tests

A place for scripts that describe web exploits to live so they can be used in testing
PHP
20
star
61

rex-text

Rex library for text generation and manipulation
Ruby
19
star
62

rex-exploitation

Rex library for various exploitation helpers
Ruby
19
star
63

godap

The Data Analysis Pipeline
Go
18
star
64

memorandom

Ruby
18
star
65

dogwatch

A Ruby DSL to create DataDog monitors.
Ruby
17
star
66

akheron-proxy

UART proxy tool for inter-chip analysis.
Python
16
star
67

guardian

A lightweight authentication proxy for HTTP services
JavaScript
16
star
68

metakitty

Metakitty, The Metasploit Resource Portal
Ruby
16
star
69

le_community_packs

Logentries Community Packs
VCL
16
star
70

le_lambda

Python
16
star
71

FullAutoOSINT

Python
15
star
72

fastlib

FastLib provides a "jar-like" format for Ruby libraries, with specific features for the Metasploit Framework
Ruby
15
star
73

react-prefixer

JavaScript
15
star
74

nexpose_java_api

DEPRECATED : A library used to connect to the Nexpose API
Java
15
star
75

raptor-io

The eventual successor to the networking/IO functionalities of Metasploit's REX library
Ruby
13
star
76

geppetto

Geppetto - Virtual machine and infrastructure orchestration
Python
13
star
77

presales-engineering

Shell
13
star
78

marionette.carpenter

A thing that makes tables
JavaScript
13
star
79

docker-image-analyzer

docker image analyzer
Java
13
star
80

tokend

A Node.js daemon that interfaces with Vault and Warden to provide a secure method to deliver secrets to servers in the cloud.
JavaScript
13
star
81

rex-socket

The Rex Socket Abstraction Library
Ruby
12
star
82

psych_shield

PsychShield provides a filtering mechanism for YAML.load when using the Psych parser
Ruby
12
star
83

appspider-pentestkit

Created by Denis Podgurskiy via the GitHub Connector
JavaScript
12
star
84

rex-bin_tools

Created by David Maloney via the GitHub Connector
Ruby
11
star
85

metasploit-vagrant-builders

Build tools to generate vagrant images used by metasploit-framework CI
Ruby
11
star
86

javascript-style-guide

10
star
87

vm-console-client-ruby

The UNOFFICIAL (but useful) Ruby gem for the Rapid7 InsightVM/Nexpose RESTful API
Ruby
10
star
88

insightcloudsec-actions

10
star
89

insightvm-api-examples

Created by Ivan Quintanilla via the GitHub Connector
Python
10
star
90

network_interface

C
10
star
91

attackerkb

Repo for creating-and-tracking issues related to AttackerKB
10
star
92

metasploit-model

Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_data_models
Ruby
10
star
93

jenkinsci-appspider-plugin

Jenkins plugin that calls the AppSpider API
Java
9
star
94

insightappsec-azure-devops-extension

Rapid7 InsightAppSec Extension for Azure DevOps
TypeScript
9
star
95

recog-java

Recog java
Java
9
star
96

armor

Java
8
star
97

acs

Automatic Ciphertext Service
JavaScript
8
star
98

r7insight_node

node logging support for InsightOps
JavaScript
8
star
99

conqueso-client-java

Connect your Java services to Conqueso
Java
8
star
100

r7insight_js

Client-side JavaScript logging library for InsightOps
JavaScript
8
star