Rapid7 releases Metasploit Framework 6.5

Rapid7 has released Metasploit Framework 6.5, adding 422 new modules and a range of features. The update introduces support for Malleable C2 profiles across all current Meterpreter payloads, allowing users to alter the shape of HTTP(S) traffic. Staged payloads apply the configuration after the stage is loaded, while stageless payloads use it immediately.

The release also includes the Metasploit MCP Server (msfmcpd), a middleware layer that exposes 16 standardized tools for AI-driven interactions, and improved NTLM relaying with new HTTP-to-SMB and HTTP-to-LDAP modules. Fetch payloads have been extended with fileless and pipe variants, and a new module automates the NTLMRelay2Self attack technique.