Rapid7 ORG

Metasploit Framework

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Unified repository for different Metasploit Framework payloads

A modern vulnerable web app

A collection of static SSH keys (public and private) that have made their way into software and hardware products.

Created by Jin Qian via the GitHub Connector

Pattern recognition for hosts, services, and content

This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.

Created by Jin Qian via the GitHub Connector

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

Packaging metasploit-framework with omnibus

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

Project Sonar

No description.

Data Analysis Pipeline

No description.

DEPRECATED: Rapid7 Nexpose API client library written in Ruby

myBFF - a Brute Force Framework

Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence, research and analytics.

Forward all your Docker logs to logentries, like a breeze

Node module for logentries.com

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

Obfuscate JavaScript (beyond repair) with Ruby

Created to simplify interactions with virtual machines

A native Ruby implementation of the SMB Protocol Family

InsightVM helpful SQL queries

the UNOFFICIAL (but useful) Python library for the Rapid7 InsightVM/Nexpose RESTful API

Plugin source code for the InsightConnect SOAR product, developer documentation at https://docs.rapid7.com/insightconnect/getting-started

Client-side JavaScript logging library for Logentries

Cross platform retrieval of system proxy configurations

Created by Paul Miseiko via the GitHub Connector

MSF database code, gemified

This toolkit detects applications vulnerable to DLL hijacking (released in 2010)

Rex library for dealing with Powershell Scripts

Centrally and dynamically change configuration values of your services!

A little tool to play with Windows security

Rex provides a variety of classes useful for security testing and exploit development.

Created by Jeffrey Martin via the GitHub Connector

No description.

Ruby logging support for logentries.com

The GitHub Active Directory Connector allows managing GitHub organizations with Active Directory.

Dead simple encryption, using WebCrypto under the hood

Scripts, SQL queries, and other resources for Nexpose

Direct logging support for Java language

Code for modeling and managing credentials in Metasploit, implemented as a Rails Engine

re2 for Java

Rapid7 Metasploit API client library written in Ruby

Golang based app that will render an html page and create a pdf.

Created by Jeffrey Martin via the GitHub Connector

A network packet synthesis language

UART proxy tool for inter-chip analysis.

DEPRECATED : Rapid7 Nexpose API client library written in Python

No description.

Tools to make CI Packer builds awesome

Created by Ivan Quintanilla via the GitHub Connector

Seamlessly view recent events, run queries and manage your account from the command line

Rex library for text generation and manipulation

Rex library for various exploitation helpers

Secure, encrypted cross-tab communication in the browser

Pilot program for CVE submission through GitHub

No description.

A place for scripts that describe web exploits to live so they can be used in testing

No description.

Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.

Metakitty, The Metasploit Resource Portal

The Data Analysis Pipeline

Logentries Community Packs

A lightweight authentication proxy for HTTP services

No description.

No description.

Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_data_models

Created by Denis Podgurskiy via the GitHub Connector

The Rex Socket Abstraction Library

The UNOFFICIAL (but useful) Ruby gem for the Rapid7 InsightVM/Nexpose RESTful API

Geppetto - Virtual machine and infrastructure orchestration

A thing that makes tables

The eventual successor to the networking/IO functionalities of Metasploit's REX library

Created by David Maloney via the GitHub Connector

Repo for creating-and-tracking issues related to AttackerKB

No description.

docker image analyzer

Build tools to generate vagrant images used by metasploit-framework CI

FastLib provides a "jar-like" format for Ruby libraries, with specific features for the Metasploit Framework

No description.

Recog java

Rapid7 InsightAppSec Extension for Azure DevOps

Client-side JavaScript logging library for InsightOps

Project intended to provide guides for InsightAppSec API examples and use cases

Validator tooling for InsightConnection integrations

Recog-Ruby: Pattern Recognition using Rapid7 Recog

Jenkins plugin that calls the AppSpider API

This repository is no longer supported

Java logging support for InsightOps

No description.

Nmap - the Network Mapper. Github mirror of official SVN repository.

Rex library providing the basis for all of the polymorphic encoders that Metasploit uses for payload encoding

node logging support for InsightOps

Docker logging support for InsightOps

Automatic Ciphertext Service

Easily create full-stack installers for your project across a variety of platforms.

Rex Library for parsing Java serialized streams

Meterpreter for Windows and POSIX Meterpreter binaries

No description.

No description.

A full-fledged msfrpc library for Metasploit framework.

Status Checker tool for GitHub. Uses https://www.githubstatus.com/api

Created by David Maloney via the GitHub Connector

Extensions to rails-erd to find clusters of models to generate subdomains specific to each model.

Source code for Rapid7 Surface Command Connectors

Rex Library which contains architecture specific information such as registers, opcodes, and stack manipulation routines.

No description.

Ruby logging support for InsightOps

Loads `ActiveSupport::Concern`s from `app/concerns` and and includes them in the appropriate class using `ActiveSupport.on_load(<underscored_class_name>)`.

No description.

Jaspersoft Studio report templates for Nexpose Data Warehouse

Fork of python-nmap from Bitbucket (https://bitbucket.org/xael/python-nmap) with changes for Komand plugin support

Created by Philip Quinn via the GitHub Connector

An HTTP proxy service to add role-based access control to any REST-like API.

dotnet logging support for InsightOps

This is a mirror of the mercurial repository for metasm

Contains Lambda functions to be used for automatic rotation of secrets stored in AWS Secrets Manager

autocompose

Created by David Maloney via the GitHub Connector

GitHub Pages for Rapid7 (Metasploit, Nexpose, and various other GitHub-hosted projects)

Created by David Maloney via the GitHub Connector

The YARD tasks used across metasploit projects

A proxy for delivering GitHub webhooks to internal locations without firewall pinholes or port forwarding.

Shared examples for testing that the version of gems follow semantic naming rule tied to the branch and tag.

DataHub Actions is a framework for responding to changes to your DataHub Metadata Graph in real time.

Fork of https://code.google.com/p/python-whois/ project. This fork adds the remainder of the WHOIS information to the Domain class.

System Information Gatherer And Reporter

Lambda logging support for InsightOps

Komand Plugin SDK V2 for Go

windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or contact us. http://libguestfs.org

Pure Ruby implementation of an SSH (protocol 2) client

A simple python library to assist in working with cpes

Rex Library for creating and using C-like structures.

Rex Library for reading/writing Object-Linking-and-Embedding (OLE) files and streams

No description.

The Metadata Platform for the Modern Data Stack

Ruby implementation of MSFT's NTLM

🎮 GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration)

fixes for http://software.schmorp.de/pkg/libeio.html

Rapid7 Terraform Provider

Python logging support for InsightOps

PHP logging support for InsightOps

A Java implementation of the Community ID flow hashing standard

Mirror of Apache Flink

No description.

Lambda function for sending AWS CloudWatch logs to Rapid 7

Dependencies for mettle

Rex Library for creating and/or parsing MIME messages

Snyk's public vulnerability database

Python library for Windows Remote Management (WinRM)

Python library for creating usable objects out of eml files.

Full-featured high-performance event loop loosely modelled after libevent

Rex library for dynamic generation of x86 multi-byte NOPs

Rapid7 InsightAppSec Plugin for Atlassian Bamboo

Fork of the terraform-provider-kong terraform plugin.

Logentries Log Export application that gives you the ability to synchronize your Logentries data with 3rd parties.

No description.

Debezium Server runtime for standalone execution of Debezium connectors

Repository for holding the SIEM collector EULA, to be referenced at https://hub.docker.com/r/rapid7/idr-collector Created by Thom Holmes via the GitHub Connector

Apache Iceberg

Rex Library for generating strings that conform to most standards for an identifier

A database of vulnerable Ruby Gems

Analytics Pack for InsightOps

Programmatically create presto queries

CVE database store

Grails Data Mapping Project

This project provides integration of the Quartz scheduling framework into the Grails Framework

No description.

ControlsInsight Ruby client

A modern, high customizable, responsive Jekyll theme for documention with built-in search.

Rex Library for parsing offline copies of Windows Registry Hives

Rex Library for creating Zip based archives

Utility used to import InsightAppSec scans into Threadfix

Splunk App for InsightConnect

Python interface for c-ares

A Chef cookbook to provide a unified interface for installing Python, managing Python packages, and creating virtualenvs.

Find licenses for your project's dependencies.

Pure-Ruby Readline Implementation

A suricata rule compiler and checker Created by Gianni Tedesco via the GitHub Connector

Apache Kafka® running on Kubernetes

Kafka exporter for Prometheus

Kafka Web UI

Puppet support

Win32 IO-related utilities for Go

Apache Airflow - A platform to programmatically author, schedule, and monitor workflows

Lambda version manager for deploying lambdas based on yaml file configs

DataStax Spark Cassandra Connector

Use Vagrant to manage your EC2 and VPC instances.

Some extensions to HAML to allow generation of Handlebars templates.

YARD plugin that uses metasploit-erd to add Entity-Relationship Diagrams to each namespace Module and ActiveRecord::Base subclass's documentation.

No description.

libpcap bindings for ruby

Static Analysis Library for Containers

Development repository for Opscode Cookbook supervisor

A fork of Apache Tomcat Native, based on finagle-native

This is the fork of the cpython repo so that we can create custom cpython builds with different openssl versions.