The Metasploit Framework is an open-source platform for developing, testing and running exploit modules. Defenders use it to confirm that a vulnerability is real and that a fix works.
Common uses
- Validating scanner findings during authorised penetration tests.
- Demonstrating risk to stakeholders in a lab.
- Practising in deliberately vulnerable environments.
Running exploits against systems without explicit authorisation is illegal in most countries.