Rapid7 has officially launched Metasploit Framework 6.5, packing two years of core development, 422 new modules, and major new capabilities designed for modern red teaming and AI-driven security workflows.
The headline additions to version 6.5 include support for Malleable C2 profiles across all Meterpreter payloads, the launch of a Model Context Protocol (MCP) server for AI agent integration, and upgraded NTLM relaying frameworks.
Key Highlights & Technical Upgrades in Metasploit 6.5
1. Native Model Context Protocol (MCP) Server for AI Agents
To streamline AI-driven penetration testing, Metasploit 6.5 introduces `msfmcpd`—a dedicated MCP server that connects LLM tools (such as Claude or Cursor) directly into the Metasploit Framework.
- Read-Only Tools (Enabled by default): 12 standardized tools allow AI agents to safely query host info, search modules, retrieve saved credentials, and monitor active jobs without altering the system state.
- Dangerous Tools (Disabled by default): 4 active execution tools (`msf_module_execute`, session writing, etc.) are locked behind the `–enable-dangerous-actions` flag to preserve human-in-the-loop controls during exploitation.
2. Malleable C2 Profiles for HTTP/HTTPS Meterpreter
For defense-evasion testing, all current Meterpreter payloads (Windows, Linux, Java, Python, PHP) now support standard Malleable C2 profiles.
Penetration testers can load custom profiles (using standard formatting) to disguise Meterpreter’s HTTP traffic to resemble normal web activity, such as e-commerce browsing.
- Stageless Payloads: Apply traffic-shaping configurations immediately upon execution.
- Staged Payloads: Load the Malleable C2 rules as soon as the main payload stage executes.
3. Enhanced NTLM Relaying & NTLMRelay2Self Support
Metasploit 6.5 expands enterprise authentication testing with a new HTTP(S) relay server engine:
- New Relay Modules: Includes `auxiliary/server/relay/http_to_smb` and `auxiliary/server/relay/http_to_ldap` to capture and relay inbound HTTP authentication directly to SMB or LDAP targets.
- Interactive Protocol Sessions: Allows red teamers to open interactive SMB/LDAP sessions and upgrade them on-demand to full Meterpreter payloads via SMB `psexec`.
- NTLMRelay2Self Workflows: Enables complex coercion techniques where targets authenticate to themselves over HTTP, allowing operators to leverage Resource-Based Constrained Delegation (RBCD) or Shadow Credentials via LDAP.
4. Massive Module Expansion
- 422 new exploit, auxiliary, and post-exploitation modules added since Metasploit 6.0.
- Expanded MITRE ATT&CK framework mapping metadata across modules.
- Payload fetch improvements and randomized block API hashes for reduced signature detection.
How to Access & Update
The update is now live for all Metasploit Framework users.
To upgrade Metasploit:
msfupdate
To launch the new MCP AI Server inside `msfconsole`:
msf > load mcp msf > mcp start
“`
