Discover rapid7/vm-automation Open Source project by Rapid7 (@rapid7)

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

31,198

metasploitable3

HTML

4,644

metasploit-payloads

Unified repository for different Metasploit Framework payloads

1,543

hackazon

A modern vulnerable web app

HTML

944

ssh-badkeys

A collection of static SSH keys (public and private) that have made their way into software and hardware products.

790

IoTSeeker

Created by Jin Qian via the GitHub Connector

Perl

749

recog

Pattern recognition for hosts, services, and content

Created by Jin Qian via the GitHub Connector

591

metasploit-vulnerability-emulator

Perl

428

mettle

This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.

398

meterpreter

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

318

sonar

Project Sonar

234

metasploit-omnibus

Packaging metasploit-framework with omnibus

warvox

dap

Data Analysis Pipeline

DEPRECATED: Rapid7 Nexpose API client library written in Ruby

151

nexpose-client

embedded-tools

awsaml

Awsaml is an application for providing automatically rotated temporary AWS credentials.

myBFF - a Brute Force Framework

133

myBFF

Forward all your Docker logs to logentries, like a breeze

132

docker-logentries

Node module for logentries.com

111

le_node

Obfuscate JavaScript (beyond repair) with Ruby

108

jsobfu

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

metasploit-javapayload

A native Ruby implementation of the SMB Protocol Family

ruby_smb

the UNOFFICIAL (but useful) Python library for the Rapid7 InsightVM/Nexpose RESTful API

vm-console-client-python

Client-side JavaScript logging library for Logentries

le_js

Plugin source code for the InsightConnect SOAR product, developer documentation at https://docs.rapid7.com/insightconnect/getting-started

insightconnect-plugins

InsightVM helpful SQL queries

insightvm-sql-queries

conqueso

Centrally and dynamically change configuration values of your services!

Created by Paul Miseiko via the GitHub Connector

smbj-rpc

Cross platform retrieval of system proxy configurations

go-get-proxied

metasploit_data_models

MSF database code, gemified

Rex library for dealing with Powershell Scripts

rex-powershell

This toolkit detects applications vulnerable to DLL hijacking (released in 2010)

DLLHijackAuditKit

Created by Jeffrey Martin via the GitHub Connector

metasploit-aggregator

Rex provides a variety of classes useful for security testing and exploit development.

rex

Ruby logging support for logentries.com

le_ruby

A fully generic, modular DSL for AWS CloudFormation

data

HTML

convection

Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence, research and analytics.

Rapid7-Labs

YARA

github-connector

The GitHub Active Directory Connector allows managing GitHub organizations with Active Directory.

Dead simple encryption, using WebCrypto under the hood

krip

.NET support for Logentries

le_dotnet

le_java

Direct logging support for Java language

Code for modeling and managing credentials in Metasploit, implemented as a Rails Engine

metasploit-credential

Scripts, SQL queries, and other resources for Nexpose

nexpose-resources

re2-java

re2 for Java

Created by Jeffrey Martin via the GitHub Connector

vaccination

metasploit-baseline-builder

Golang based app that will render an html page and create a pdf.

pdf-renderer

nexpose-client-python

DEPRECATED : Rapid7 Nexpose API client library written in Python

Use security tools from within IRC.

metabot

Seamlessly view recent events, run queries and manage your account from the command line

lecli

Rapid7 Metasploit API client library written in Ruby

msfrpc-client

Rex library for various exploitation helpers

rex-exploitation

Dynamic property management at scale

propsd

Tools to make CI Packer builds awesome

builderator

sonar-client

savery

Secure, encrypted cross-tab communication in the browser

tabtalk

le_chef

A place for scripts that describe web exploits to live so they can be used in testing

Websploit-Tests

PHP

rex-text

Rex library for text generation and manipulation

The Data Analysis Pipeline

godap

memorandom

A Ruby DSL to create DataDog monitors.

dogwatch

FullAutoOSINT

Metakitty, The Metasploit Resource Portal

metakitty

UART proxy tool for inter-chip analysis.

akheron-proxy

A lightweight authentication proxy for HTTP services

guardian

Logentries Community Packs

le_community_packs

VCL

le_lambda

FastLib provides a "jar-like" format for Ruby libraries, with specific features for the Metasploit Framework

fastlib

react-prefixer

DEPRECATED : A library used to connect to the Nexpose API

nexpose_java_api

Geppetto - Virtual machine and infrastructure orchestration

geppetto

The eventual successor to the networking/IO functionalities of Metasploit's REX library

raptor-io

A thing that makes tables

presales-engineering

Shell

marionette.carpenter

A Node.js daemon that interfaces with Vault and Warden to provide a secure method to deliver secrets to servers in the cloud.

tokend

Build tools to generate vagrant images used by metasploit-framework CI

metasploit-vagrant-builders

The Rex Socket Abstraction Library

rex-socket

PsychShield provides a filtering mechanism for YAML.load when using the Psych parser

psych_shield

docker-image-analyzer

docker image analyzer

Created by Ivan Quintanilla via the GitHub Connector

insightvm-api-examples

Created by Denis Podgurskiy via the GitHub Connector

appspider-pentestkit

Created by David Maloney via the GitHub Connector

rex-bin_tools

Repo for creating-and-tracking issues related to AttackerKB

attackerkb

vm-console-client-ruby

The UNOFFICIAL (but useful) Ruby gem for the Rapid7 InsightVM/Nexpose RESTful API

A network packet synthesis language

javascript-style-guide

resynth

Rust

network_interface

insightappsec-azure-devops-extension

Rapid7 InsightAppSec Extension for Azure DevOps

TypeScript

insightcloudsec-actions

metasploit-model

Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_data_models

Jenkins plugin that calls the AppSpider API

jenkinsci-appspider-plugin

Client-side JavaScript logging library for InsightOps

r7insight_js

recog-java

Recog java

Project intended to provide guides for InsightAppSec API examples and use cases

insightappsec-api-examples

insightappsec-scan-github-actions

This repository is no longer supported

100

armor