Just because it's a LLM / AI agent doesn't make it any different than any other program. If I fire up Metasploit and use it to hack a company, I can't say "Metasploit did the hacking, not me", so how is a defense of "the LLM did the hacking, not me" any better?
August 5, 2026 at 10:45 AM
Just because it's a LLM / AI agent doesn't make it any different than any other program. If I fire up Metasploit and use it to hack a company, I can't say "Metasploit did the hacking, not me", so how is a defense of "the LLM did the hacking, not me" any better?
If I setup some Metasploit script with a bunch of custom payloads and random targets which ends up hacking a government website, can I also just say:
"Oopsy boopsy! My machine just did that itself!"
And walk away without consequence?
Or will that be considered a serious crime I'm responsible for?
"Oopsy boopsy! My machine just did that itself!"
And walk away without consequence?
Or will that be considered a serious crime I'm responsible for?
September 24, 2026 at 5:03 PM
If I setup some Metasploit script with a bunch of custom payloads and random targets which ends up hacking a government website, can I also just say:
"Oopsy boopsy! My machine just did that itself!"
And walk away without consequence?
Or will that be considered a serious crime I'm responsible for?
"Oopsy boopsy! My machine just did that itself!"
And walk away without consequence?
Or will that be considered a serious crime I'm responsible for?
the universe where every script kiddie basically has access to more advanced tactics is more and more likely, when earlier they'd at least have to learn stuff like Metasploit
August 31, 2026 at 6:19 AM
the universe where every script kiddie basically has access to more advanced tactics is more and more likely, when earlier they'd at least have to learn stuff like Metasploit
These are not AGI agents. The companies are framing it as the agents doing unforeseeable "hacks" because they want PR and to avoid liability under the CFAA. These are tools humans are giving commands and internet access. Functionally no different than pointing a Metasploit package at someone else.
September 24, 2026 at 3:17 AM
These are not AGI agents. The companies are framing it as the agents doing unforeseeable "hacks" because they want PR and to avoid liability under the CFAA. These are tools humans are giving commands and internet access. Functionally no different than pointing a Metasploit package at someone else.
What is going to fuck us isn't some fake bullshit about "AIs going rogue" it's language like this where we act like the people who ran this software aren't liable for what the software does because it's "AI", somehow, as if that would be a defense if they were using Metasploit or whatever.
*It'll be a little hard to put this entity in jail, but these are serious computer crimes including wire fraud, identity fraud, unauthorized access, malware distribution, and supply‑chain tampering laws.
*A human blackhat could do 20 years for that in the USA
*A human blackhat could do 20 years for that in the USA
August 6, 2026 at 7:14 AM
What is going to fuck us isn't some fake bullshit about "AIs going rogue" it's language like this where we act like the people who ran this software aren't liable for what the software does because it's "AI", somehow, as if that would be a defense if they were using Metasploit or whatever.
Metasploit on steroids
July 28, 2026 at 10:15 PM
Metasploit on steroids
"The 21 July announcement that OpenAI’s agents had slipped out of control and hacked Hugging Face"
*metasploit doesn't 'slip out of control' and hack your target too hard, you fuck up and hack your target too hard*..
these journalists have literally no integrity. fucking press release.
*metasploit doesn't 'slip out of control' and hack your target too hard, you fuck up and hack your target too hard*..
these journalists have literally no integrity. fucking press release.
September 25, 2026 at 11:41 PM
"The 21 July announcement that OpenAI’s agents had slipped out of control and hacked Hugging Face"
*metasploit doesn't 'slip out of control' and hack your target too hard, you fuck up and hack your target too hard*..
these journalists have literally no integrity. fucking press release.
*metasploit doesn't 'slip out of control' and hack your target too hard, you fuck up and hack your target too hard*..
these journalists have literally no integrity. fucking press release.
I propose "mechasploit", after the pentesting tool "metasploit", usually deployed against non-consenting targets with known weaknesses,
June 4, 2025 at 6:24 PM
I propose "mechasploit", after the pentesting tool "metasploit", usually deployed against non-consenting targets with known weaknesses,
the metasploit and vulnerability research teams will be in full force at brucon tomorrow, which we are very much looking forward to
September 23, 2026 at 8:29 PM
the metasploit and vulnerability research teams will be in full force at brucon tomorrow, which we are very much looking forward to
Metasploit Adds Exploit Module for Recently Disclosed FortiWeb 0-Day Vulnerabilities
Metasploit Adds Exploit Module for Recently Disclosed FortiWeb 0-Day Vulnerabilities
cybersecuritynews.com
November 22, 2025 at 6:49 AM
Metasploit Adds Exploit Module for Recently Disclosed FortiWeb 0-Day Vulnerabilities
Holy shit Metasploit added this feature. We're doomed y'all!
February 26, 2025 at 9:12 PM
Holy shit Metasploit added this feature. We're doomed y'all!
And by infosec savvy I mean someone who understands stuff like the threat model human rights defenders face in Saudi Arabia. Not just "runs Kali Linux and can use metasploit".
February 3, 2025 at 6:25 PM
And by infosec savvy I mean someone who understands stuff like the threat model human rights defenders face in Saudi Arabia. Not just "runs Kali Linux and can use metasploit".
"We installed MetaSploit on the VM the model was running on and then out of nowhere it used the tools for hacking we installed to hack! How could we have prevented this thing we never planned for by installing a specific hacking tool for doing this thing we never told it to do." 🤦👍
September 24, 2026 at 11:06 PM
"We installed MetaSploit on the VM the model was running on and then out of nowhere it used the tools for hacking we installed to hack! How could we have prevented this thing we never planned for by installing a specific hacking tool for doing this thing we never told it to do." 🤦👍
Which is to say that any existential risk of AI is because they are basically running an automated metasploit bot and intentionally choosing to run it against successively more risky targets.
September 10, 2026 at 10:30 PM
Which is to say that any existential risk of AI is because they are basically running an automated metasploit bot and intentionally choosing to run it against successively more risky targets.
Lols. I remember getting an actual phone call from msft network security people when I installed metasploit inside kali on wsl
Even with tooling override there is no way to actually download PsExec through our gateway, it's too dangerous. Second, your machine would be immediately isolated harder than a a guy with leg cramps at Alcatraz.
+Guess what. Scheduled Task subsystem doesn't launch in Safe Mode.
Neither does WiFi.
+Guess what. Scheduled Task subsystem doesn't launch in Safe Mode.
Neither does WiFi.
July 24, 2025 at 3:11 AM
Lols. I remember getting an actual phone call from msft network security people when I installed metasploit inside kali on wsl
All the "will 'AI' replace the humanities" shit is so boring, why aren't we trying to supplant random academic fields with other useful coding tools? Metasploit is going to replace comp lit. We'll be doing historical musicology with linters. Let's go
June 8, 2026 at 2:56 PM
All the "will 'AI' replace the humanities" shit is so boring, why aren't we trying to supplant random academic fields with other useful coding tools? Metasploit is going to replace comp lit. We'll be doing historical musicology with linters. Let's go
Metasploit is a powerful penetration testing tool. It helps security pros find & fix vulnerabilities in systems before malicious actors can exploit them. Here, Manish explains how Metasploit works & covers auxiliaries, exploits, payloads, msfconsole, common commands, & more.
https://buff.ly/4h8Xy5y
https://buff.ly/4h8Xy5y
January 24, 2025 at 1:01 AM
Metasploit is a powerful penetration testing tool. It helps security pros find & fix vulnerabilities in systems before malicious actors can exploit them. Here, Manish explains how Metasploit works & covers auxiliaries, exploits, payloads, msfconsole, common commands, & more.
https://buff.ly/4h8Xy5y
https://buff.ly/4h8Xy5y
Metasploit 6.5 is out just in time for Hack Summer Camp. This release comes with Malleable C2 support for Meterpreter, more relaying improvements and an integrated MCP server. Check out all the details here: https://www.rapid7.com/blog/post/pt-metasploit-framework-6-5-released/
Rapid7
Metasploit Framework 6.5 launches with Malleable C2 profile support, new MCP server integration support for AI-tooling, NTLM relaying upgrades, and MITRE ATT&CK tagging to streamline threat emulation
www.rapid7.com
July 30, 2026 at 6:05 PM
Metasploit 6.5 is out just in time for Hack Summer Camp. This release comes with Malleable C2 support for Meterpreter, more relaying improvements and an integrated MCP server. Check out all the details here: https://www.rapid7.com/blog/post/pt-metasploit-framework-6-5-released/
Am 11.03.26 20:00 gibts einen Einblick in Metasploit für Haecksen. Ein sehr spannendes opensource Tool!
hope to see you there!
8pm in Mighty Mary
Die letzten Male waren so toll, schau mal vorbei!
hope to see you there!
8pm in Mighty Mary
Die letzten Male waren so toll, schau mal vorbei!
Metasploit | Penetration Testing Software, Pen Testing Security | Metasploit
Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the world's best penetration testing software now.
www.metasploit.com
March 9, 2026 at 9:58 AM
Am 11.03.26 20:00 gibts einen Einblick in Metasploit für Haecksen. Ein sehr spannendes opensource Tool!
hope to see you there!
8pm in Mighty Mary
Die letzten Male waren so toll, schau mal vorbei!
hope to see you there!
8pm in Mighty Mary
Die letzten Male waren so toll, schau mal vorbei!
But, like, folks are not looking at plaintext context for things like "metasploit" in a timely way so, uh, some work to do on the platform side
September 26, 2026 at 6:15 PM
But, like, folks are not looking at plaintext context for things like "metasploit" in a timely way so, uh, some work to do on the platform side
Armitage and Metasploit Collaboration (NoVa Hackers - May 2011)
I thought this one was lost. One of my earliest talks on the red team collaboration vision for Armitage and some reflection from using it in some 2011 exercises.
www.youtube.com/watch?v=Mjr9...
I thought this one was lost. One of my earliest talks on the red team collaboration vision for Armitage and some reflection from using it in some 2011 exercises.
www.youtube.com/watch?v=Mjr9...
Armitage and Metasploit Collaboration Raphael Mudge NoVa Hackers May 2011
YouTube video by Georgia Weidman
www.youtube.com
August 25, 2026 at 10:59 PM
Armitage and Metasploit Collaboration (NoVa Hackers - May 2011)
I thought this one was lost. One of my earliest talks on the red team collaboration vision for Armitage and some reflection from using it in some 2011 exercises.
www.youtube.com/watch?v=Mjr9...
I thought this one was lost. One of my earliest talks on the red team collaboration vision for Armitage and some reflection from using it in some 2011 exercises.
www.youtube.com/watch?v=Mjr9...
Throwing NMAP and metasploit exploit suggester at hardware hacking is not hardware hacking, I beg the cybersecurity world to get to grips with this.
November 10, 2025 at 5:47 PM
Throwing NMAP and metasploit exploit suggester at hardware hacking is not hardware hacking, I beg the cybersecurity world to get to grips with this.
Metasploit Cheat Sheet for Penetration Testing -- weems.blog/metasploit-c...
Metasploit Cheat Sheet for Penetration Testing
Michael Weems Blog
weems.blog
January 7, 2025 at 3:39 AM
Metasploit Cheat Sheet for Penetration Testing -- weems.blog/metasploit-c...
I used to poke around metasploit!
September 20, 2024 at 10:36 PM
I used to poke around metasploit!