Top committers this last month

dledda-r7 (35)Martin Sutovsky (33)jenkins-metasploit (31)Diego Ledda (22)Spencer McIntyre (14)cgranleese-r7 (10)jheysel-r7 (7)Valentin Lobstein (5)adfoster-r7 (5)Xorriath (5)
Tarek Nakkouch (4)Christophe De La Fuente (4)sfewer-r7 (4)Brendan (3)h00die (3)Alex (3)msutovsky-r7 (3)Jack Heysel (2)jbx81-1337 (2)kali (2)
ptrstr (2)bcoles (1)DataExplorerX (1)Alex Hagenah (1)Dean Welch (1)

Top items this last week

New Open Pull Requests

Check out some of the new Open Pull Requests for this week!
Expose encoder options 2026-01-08T16:14:24+00:00 dledda-r7
Bump rex-arch gem from 0.1.18 to 0.1.19 2026-01-08T15:57:12+00:00 bcoles
Add three modules for exploiting Xerte Online Toolkits 2026-01-07T20:14:29+00:00 haicenhacks
Adds modules for multiple CVEs for FreePBX (CVE-2025-61675, CVE-2025-61678, CVE-2025-66039) 2026-01-05T14:59:49+00:00 msutovsky-r7
Add Linux ARM chmod payloads 2026-01-05T14:08:01+00:00 bcoles
Windows Userinit persistence 2026-01-03T20:58:15+00:00 6a6f656c
windows telemetry persistence 2026-01-03T19:51:01+00:00 h00die
active setup persistence 2026-01-03T15:48:13+00:00 h00die
Updated MongoDB memory disclosure module (CVE-2025-14847) 2026-01-02T13:32:22+00:00 xaitax
New persistence module: Microsoft Bits 2026-01-02T01:01:17+00:00 h00die
Update metasploit-payloads gem to 2.0.239 2026-01-08T20:02:10+00:00 zeroSteiner
Poolparty injection Stubs 2026-01-08T10:17:59+00:00 dledda-r7
Fixes typo in generating X64 PE file 2026-01-07T11:16:52+00:00 msutovsky-r7
Fix extra characters in print and merge docs for ssh_login/ssh_login_pubkey 2026-01-06T15:42:13+00:00 dwelch-r7
Added React2Shell exploit for RSC Next.js applications. 2026-01-02T00:27:23+00:00 oxagast

New Open Features and Enhancements

Check out some of the new Open Features and Enhancements for this week!

New Open Bugs

Check out some of the new Open Bugs for this week!