Repository brief

rapid7/metasploit-framework

Read the upstream summary on the left, browse the cached forks below it, and load each fork comparison into the right-hand panel.

Cached analysis
cached 2026-03-30T15:53:40.846Z
1mo ago

rapid7/metasploit-framework

Metasploit Framework is a large, actively maintained open-source Ruby security framework with extensive documentation, container tooling, and a broad module/codebase layout. It is highly established and widely forked/starred, with recent commits showing ongoing documentation, template, and module updates. Forks are likely most interesting if you care about a mature, fast-moving security tooling ecosystem rather than a small or archived project.

GitHub
Loading tags...
Stars37,799
Forks14,809
Default branchmaster
Last pushed2026-03-30T15:44:29Z
Recommended shortcuts

Jump straight into Discofork's strongest cached fork picks, or open a compare view in one click.

Forks

Choose a fork to inspect

9 of 9 fork briefs
Selected

Prefer upstream unless you need this exact old baseline. This fork looks stale and materially behind, with no concrete added capabilities visible from the provided evidence.

Choose this fork only if its older, customized exploit/payload set is the goal. For most adopters, upstream is the safer default because this fork is substantially stale and far behind current Metasploit maintenance.

Prefer upstream unless you specifically need this Android-oriented historical fork. It looks heavily customized but materially obsolete, so adopters should expect to do their own maintenance and compatibility work.

Prefer upstream unless you need the fork's niche hardware and device workflows. Adopt this fork only if its added modules and plugins map directly to your use case and you can tolerate a very stale, highly divergent codebase.

Prefer upstream unless you specifically need this fork's customized datasets or historical snapshot behavior. This fork is not a good default choice for adopters who want current Metasploit maintenance, docs, or compatibility.

Prefer upstream unless you explicitly need the added reverse-DNS payload workflow and are prepared to maintain a very old fork. For most adopters, the maintenance and security cost outweigh the narrow feature gain.

Prefer upstream unless you specifically need this fork’s older, customized exploit-data set and are willing to own a large maintenance gap. For modern use, the fork is too stale and too divergent to adopt as a baseline.

Prefer upstream unless you specifically want an old snapshot; this fork adds no clear capabilities and is far behind current Metasploit.

This fork looks like a stale, non-differentiated snapshot of Metasploit Framework. Prefer upstream unless you specifically need an older pinned revision or are maintaining your own downstream changes.