The most valuable features of the solution are the scripts, the modules, and the tools that the Rapid7 Metasploit framework has.

View full review »

The greatest advantage of Rapid7 Metasploit is that it is the only system that can directly exploit vulnerabilities on the Metasploit platform. Metasploit is used for penetration testing, while Rapid7 and Nessus are used solely for vulnerability assessment. Metasploit can be used to both test and exploit vulnerabilities, while other systems such as Tenable and Invicti are unable to do so since they do not have a penetration testing platform.

View full review »

The tool's most useful feature for penetration testing is its automation capabilities. With the professional edition, you can upload the results from Nessus in the Rapid7 Metasploit solution portal.

It then automates the generation of commands to compromise the target machine without the need for manual commands. This automates the testing process and enables the creation of reports to highlight weaknesses in the target machine for management review.

The Metasploit framework is easy. 

View full review »

The base has already been established. While there is a free community version commonly used, it requires manual installation of exploits. It allows us to concentrate solely on identified vulnerabilities without the hassle of additional setup. It has the capability to execute session attacks, generating deceptive pages from the target page. This mimics a fake page, enticing individuals to interact after receiving email session letters. This feature allows the creation of campaigns with efficient letters deployed within unique pages—a utility that sets it apart from other products solely focused on exploit databases.

View full review »

The initial setup is straightforward. 

The product scales well.

It's very stable and reliable. 

Technical support has been helpful and responsive. 

It's great for detecting phishing campaigns. 

View full review »

The Search Engineering feature is good. 

View full review »

For the solution, I think it's the user interface and usability that are the main features of the solution. Also, you can do more with the interface.

Some features that are not available on the console are available in the user interface, like, for example, the creation of payload. The creation of a payload is a tough part in the terminal. So, it is kind of handy when we use Rapid7 Metasploit.

View full review »

My organization has been happy with it.

View full review »

The solution is open source and has many small targetted penetration tests that have been written by many people that are useful. You can choose different subjects for the test, such as Oracle databases or Apache servers.

Someone has created a graphical interface for this solution called Armitage which has been very useful and easier to use. The solution typically only has a command-line interface.

You are able to do network tests over a network, not necessarily on the web server, but on desktops and other devices.

View full review »

The most valuable feature for us is the support for testing Linux-based web server components.

View full review »

All of the features are great. I used it as a tool for penetration testing. The exploitation capabilities and the development in general, are all great. It's open-source and very handy. 

View full review »

The solution automatically discovers vulnerabilities. We don't need to update or fine-tune the tool. It automatically handles that itself.

The reporting on the solution is good.

View full review »

I use Rapid7 Metasploit for payload generation and Post-Exploitation.

View full review »

It is easy to use.

Rapid7 Metasploit is a useful product.

It has a very long list of available payloads.

View full review »

The most valuable one is the integration between Nmap, the database and Metasploit. That saves a lot of time.

View full review »

• The option to generate phishing emails has proven to be very valuable in understanding the behavior of users. 
• It contains almost all the available exploits and payloads. 
• The in-built Wireshark is valuable in performing packet analysis. 
• It has different installation files for different OSs.

View full review »

Good features- 1) Availability of both graphical and command line interfaces. 2) HTML based report collection 3) Integration with PostgreSQL 4) Integration of NMAP for network scanning, brute force techniques 5) Around 800 active modules with exploits for linux, bsd , microsoft and MacOS 6) Collaboration with team feature also available 7) Open Source 8)Integration with Backtrack OS View full review »