The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Serialization Mischief in Ruby Land (CVE-2013-0156)

Vulnerabilities and Exploits

Serialization Mischief in Ruby Land (CVE-2013-0156)

HD Moore's avatar

HD Moore

Free Metasploit Penetration Testing Lab in the Cloud

Products and Tools

Free Metasploit Penetration Testing Lab in the Cloud

Christian Kirsch's avatar

Christian Kirsch

Using BackTrack 5 R3 with Metasploit Community or Metasploit Pro

Products and Tools

Using BackTrack 5 R3 with Metasploit Community or Metasploit Pro

Christian Kirsch's avatar

Christian Kirsch

Guide to monitoring JVM Memory usage

Rapid7 Blog

Guide to monitoring JVM Memory usage

Landon Dalke's avatar

Landon Dalke

Security Death Match: Open Source vs. Pay-for-Play Exploit Packs

Products and Tools

Security Death Match: Open Source vs. Pay-for-Play Exploit Packs

Christian Kirsch's avatar

Christian Kirsch

How Metasploit's 3-Step Quality Assurance Process Gives You Peace Of Mind

Vulnerabilities and Exploits

How Metasploit's 3-Step Quality Assurance Process Gives You Peace Of Mind

Christian Kirsch's avatar

Christian Kirsch

New Metasploit Exploit: Crystal Reports Viewer CVE-2010-2590

Vulnerabilities and Exploits

New Metasploit Exploit: Crystal Reports Viewer CVE-2010-2590

Juan Vazquez's avatar

Juan Vazquez

Weekly Metasploit Update: CrystalReports and Testing Discipline

Products and Tools

Weekly Metasploit Update: CrystalReports and Testing Discipline

Tod Beardsley's avatar

Tod Beardsley

5 Tips to Ensure Safe Penetration Tests with Metasploit

Exposure Management

5 Tips to Ensure Safe Penetration Tests with Metasploit

Christian Kirsch's avatar

Christian Kirsch

Introduction to Metasploit Hooks

Exposure Management

Introduction to Metasploit Hooks

Egypt's avatar

Egypt

The Odd Couple: Metasploit and Antivirus Solutions

Exposure Management

The Odd Couple: Metasploit and Antivirus Solutions

David Maloney's avatar

David Maloney

Weekly Metasploit Update: Exploit Dev How-to and InfoSec Targets

Products and Tools

Weekly Metasploit Update: Exploit Dev How-to and InfoSec Targets

Tod Beardsley's avatar

Tod Beardsley

November Exploit Trends: Apache Killer Exploit New to List

Vulnerabilities and Exploits

November Exploit Trends: Apache Killer Exploit New to List

Christian Kirsch's avatar

Christian Kirsch

Introducing Nexpose 5.5 - CIS, USGCB 2, Enhanced Reporting, and Data Scalability

Products and Tools

Introducing Nexpose 5.5 - CIS, USGCB 2, Enhanced Reporting, and Data Scalability

Eric Reiners's avatar

Eric Reiners

Metasploit Hits 1000 Exploits

Rapid7 Blog

Metasploit Hits 1000 Exploits

Tod Beardsley's avatar

Tod Beardsley

Skynet, a Tor-powered botnet straight from Reddit

Vulnerabilities and Exploits

Skynet, a Tor-powered botnet straight from Reddit

nex's avatar

nex

What would Trinity do with Kingcope's SSH 0day?

Rapid7 Blog

What would Trinity do with Kingcope's SSH 0day?

Wei Chen's avatar

Wei Chen

A New Look for Rapid7

Rapid7 Blog

A New Look for Rapid7

Carol Meyers's avatar

Carol Meyers

Weekly Metasploit Update: OpenVAS, SAP, NetIQ, and More!

Products and Tools

Weekly Metasploit Update: OpenVAS, SAP, NetIQ, and More!

Tod Beardsley's avatar

Tod Beardsley

Getting terminal colors right

Products and Tools

Getting terminal colors right

Rapid7's avatar

Rapid7

Weekly Metasploit Update: Web Libs, SAP, ZDI, and More!

Products and Tools

Weekly Metasploit Update: Web Libs, SAP, ZDI, and More!

Tod Beardsley's avatar

Tod Beardsley