RepoGuard
Updated 1 h ago
Rapid7

Organization

Public GitHub footprint of Rapid7

@rapid7
View profile on GitHub
Boston, MA

309

Public repositories

54,038

Total stars

3,109

Followers

Rapid7 maintains a substantial public presence on GitHub, hosting a wide range of repositories primarily in Ruby, Python, Java, C, and JavaScript. Notable projects include the Metasploit Framework, a widely used penetration testing tool, and Metasploitable3, a deliberately vulnerable VM designed for security training.

Top languages

Ruby 32Python 19Java 11C 7JavaScript 6HTML 2Perl 2Shell 2

Public repositories

metasploit-framework

38,379

Metasploit Framework

Ruby
Updated Jun 13, 2026

metasploitable3

5,589

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

HTML
Updated Jun 13, 2026

metasploit-payloads

2,017

Unified repository for different Metasploit Framework payloads

C
Updated Jun 11, 2026

hackazon

1,035

A modern vulnerable web app

HTML
Updated Jun 12, 2026

ssh-badkeys

856

A collection of static SSH keys (public and private) that have made their way into software and hardware products.

Unknown Language
Updated May 14, 2026

IoTSeeker

797

Created by Jin Qian via the GitHub Connector

Perl
Updated Jun 5, 2026

recog

775

Pattern recognition for hosts, services, and content

Ruby
Updated Jun 5, 2026

mettle

474

This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.

C
Updated Jun 7, 2026

metasploit-vulnerability-emulator

436

Created by Jin Qian via the GitHub Connector

Perl
Updated Jun 2, 2026

meterpreter

350

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

C
Updated May 13, 2026

metasploit-omnibus

321

Packaging metasploit-framework with omnibus

Ruby
Updated May 28, 2026

ReflectiveDLLInjection

258

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

C
Updated Jun 1, 2026

sonar

239

Project Sonar

Unknown Language
Updated May 8, 2026

warvox

210

No description provided for this repository.

Ruby
Updated May 27, 2026

dap

162

Data Analysis Pipeline

Ruby
Updated Jun 11, 2026

nexpose-client

154

DEPRECATED: Rapid7 Nexpose API client library written in Ruby

Ruby
Updated May 8, 2026

embedded-tools

154

No description provided for this repository.

AGS Script
Updated Mar 18, 2026

myBFF

144

myBFF - a Brute Force Framework

Python
Updated May 21, 2026

Rapid7-Labs

106

Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence, research and analytics.

Shell
Updated Jun 10, 2026

metasploit-javapayload

92

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

Java
Updated May 3, 2026

jsobfu

90

Obfuscate JavaScript (beyond repair) with Ruby

JavaScript
Updated May 16, 2026

vm-automation

88

Created to simplify interactions with virtual machines

Python
Updated May 31, 2026

ruby_smb

83

A native Ruby implementation of the SMB Protocol Family

Ruby
Updated Jun 8, 2026

insightvm-sql-queries

80

InsightVM helpful SQL queries

Unknown Language
Updated Jun 9, 2026

insightconnect-plugins

73

Plugin source code for the InsightConnect SOAR product, developer documentation at https://docs.rapid7.com/insightconnect/getting-started

Python
Updated Jun 12, 2026

go-get-proxied

65

Cross platform retrieval of system proxy configurations

Go
Updated May 23, 2026

smbj-rpc

62

Created by Paul Miseiko via the GitHub Connector

Java
Updated May 8, 2026

metasploit_data_models

56

MSF database code, gemified

Ruby
Updated May 8, 2026

DLLHijackAuditKit

54

This toolkit detects applications vulnerable to DLL hijacking (released in 2010)

JavaScript
Updated Jun 2, 2026

rex-powershell

54

Rex library for dealing with Powershell Scripts

Ruby
Updated May 8, 2026

mimikatz

53

A little tool to play with Windows security

C
Updated May 8, 2026

metasploit-aggregator

51

Created by Jeffrey Martin via the GitHub Connector

Ruby
Updated May 8, 2026

nexpose-resources

31

Scripts, SQL queries, and other resources for Nexpose

Ruby
Updated May 8, 2026

le_java

30

Direct logging support for Java language

Java
Updated Jun 1, 2026

metasploit-credential

30

Code for modeling and managing credentials in Metasploit, implemented as a Rails Engine

Ruby
Updated May 28, 2026

re2-java

28

re2 for Java

Java
Updated Apr 22, 2026

pdf-renderer

27

Golang based app that will render an html page and create a pdf.

Go
Updated May 8, 2026

metasploit-baseline-builder

27

Created by Jeffrey Martin via the GitHub Connector

Python
Updated May 8, 2026

msfrpc-client

26

Rapid7 Metasploit API client library written in Ruby

Ruby
Updated May 8, 2026

resynth

24

A network packet synthesis language

Rust
Updated May 29, 2026

sonar-client

23

No description provided for this repository.

Ruby
Updated May 8, 2026

akheron-proxy

23

UART proxy tool for inter-chip analysis.

Python
Updated Feb 20, 2026

insightvm-api-examples

22

Created by Ivan Quintanilla via the GitHub Connector

Python
Updated May 8, 2026

rex-text

21

Rex library for text generation and manipulation

Ruby
Updated May 18, 2026

FullAutoOSINT

20

No description provided for this repository.

Python
Updated Apr 7, 2026

metakitty

19

Metakitty, The Metasploit Resource Portal

Ruby
Updated May 8, 2026

metasploit-model

15

Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_data_models

Ruby
Updated May 8, 2026

rex-socket

14

The Rex Socket Abstraction Library

Ruby
Updated May 27, 2026

vm-console-client-ruby

14

The UNOFFICIAL (but useful) Ruby gem for the Rapid7 InsightVM/Nexpose RESTful API

Ruby
Updated Feb 27, 2026

geppetto

14

Geppetto - Virtual machine and infrastructure orchestration

Python
Updated Feb 9, 2026

rapid7-bulk-export-mcp

13

Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.

Python
Updated Jun 9, 2026

attackerkb

12

Repo for creating-and-tracking issues related to AttackerKB

Unknown Language
Updated May 8, 2026

insightcloudsec-actions

12

No description provided for this repository.

Unknown Language
Updated May 8, 2026

rex-bin_tools

12

Created by David Maloney via the GitHub Connector

Ruby
Updated Apr 14, 2026

recog-java

11

Recog java

Java
Updated May 8, 2026

insightappsec-azure-devops-extension

11

Rapid7 InsightAppSec Extension for Azure DevOps

TypeScript
Updated May 8, 2026

r7insight_js

11

Client-side JavaScript logging library for InsightOps

JavaScript
Updated May 8, 2026

insightappsec-api-examples

11

Project intended to provide guides for InsightAppSec API examples and use cases

Python
Updated Apr 28, 2026

icon-integrations-validators

10

Validator tooling for InsightConnection integrations

Python
Updated May 26, 2026

recog-ruby

9

Recog-Ruby: Pattern Recognition using Rapid7 Recog

Ruby
Updated Jun 2, 2026

armor

9

This repository is no longer supported

Java
Updated May 8, 2026

r7insight_java

9

Java logging support for InsightOps

Java
Updated May 8, 2026

rex-encoder

8

Rex library providing the basis for all of the polymorphic encoders that Metasploit uses for payload encoding

Ruby
Updated Jun 3, 2026

r7insight_node

8

node logging support for InsightOps

JavaScript
Updated May 8, 2026

r7insight_docker

8

Docker logging support for InsightOps

JavaScript
Updated May 8, 2026

nmap

7

Nmap - the Network Mapper. Github mirror of official SVN repository.

Lua
Updated May 8, 2026

omnibus

7

Easily create full-stack installers for your project across a variety of platforms.

Ruby
Updated May 8, 2026

metasploit-omnibus-cache

6

No description provided for this repository.

Shell
Updated May 16, 2026

meterpreter-deps

6

No description provided for this repository.

C
Updated May 8, 2026

komand-pymetasploit

6

A full-fledged msfrpc library for Metasploit framework.

Python
Updated May 8, 2026

github-status-checker

6

Status Checker tool for GitHub. Uses https://www.githubstatus.com/api

Python
Updated May 8, 2026

rex-core

6

Created by David Maloney via the GitHub Connector

Ruby
Updated May 8, 2026

metasploit-erd

6

Extensions to rails-erd to find clusters of models to generate subdomains specific to each model.

Ruby
Updated May 8, 2026

r7-surcom-connectors

6

Source code for Rapid7 Surface Command Connectors

Python
Updated May 8, 2026

rex-arch

6

Rex Library which contains architecture specific information such as registers, opcodes, and stack manipulation routines.

Ruby
Updated May 7, 2026

r7insight_ruby

5

Ruby logging support for InsightOps

Ruby
Updated May 8, 2026

metasploit-concern

5

Loads `ActiveSupport::Concern`s from `app/concerns` and and includes them in the appropriate class using `ActiveSupport.on_load(<underscored_class_name>)`.

Ruby
Updated May 8, 2026

csp-inline-agent-tcell

5

No description provided for this repository.

JavaScript
Updated Apr 2, 2026

metasm

4

This is a mirror of the mercurial repository for metasm

Ruby
Updated May 20, 2026

aws-secrets-manager-rotation-lambda

4

Contains Lambda functions to be used for automatic rotation of secrets stored in AWS Secrets Manager

Python
Updated May 8, 2026

autocompose

4

autocompose

Python
Updated Apr 24, 2026

metasploit-version

3

Shared examples for testing that the version of gems follow semantic naming rule tied to the branch and tag.

Gherkin
Updated May 15, 2026

datahub-actions

3

DataHub Actions is a framework for responding to changes to your DataHub Metadata Graph in real time.

Python
Updated May 8, 2026

komand-python-whois

3

Fork of https://code.google.com/p/python-whois/ project. This fork adds the remainder of the WHOIS information to the Domain class.

Python
Updated May 8, 2026

sigar

3

System Information Gatherer And Reporter

C
Updated Apr 23, 2026

r7insight_python

2

Python logging support for InsightOps

Python
Updated May 8, 2026

r7insight_php

2

PHP logging support for InsightOps

PHP
Updated May 8, 2026

terraform-provider-rapid7

2

Rapid7 Terraform Provider

Unknown Language
Updated May 8, 2026

community-id-java

2

A Java implementation of the Community ID flow hashing standard

Java
Updated Apr 13, 2026

flink-tcell

2

Mirror of Apache Flink

Java
Updated Apr 2, 2026

tcell-deployment-examples

2

No description provided for this repository.

Unknown Language
Updated Apr 2, 2026

debezium-operator

1

No description provided for this repository.

Java
Updated May 8, 2026

debezium-server

1

Debezium Server runtime for standalone execution of Debezium connectors

Java
Updated May 8, 2026

idr-collector-image-eula

1

Repository for holding the SIEM collector EULA, to be referenced at https://hub.docker.com/r/rapid7/idr-collector Created by Thom Holmes via the GitHub Connector

Unknown Language
Updated May 8, 2026

iceberg

1

Apache Iceberg

Unknown Language
Updated May 8, 2026

rex-random_identifier

1

Rex Library for generating strings that conform to most standards for an identifier

Ruby
Updated Apr 10, 2026

ruby-advisory-db-tcell

1

A database of vulnerable Ruby Gems

Ruby
Updated Apr 2, 2026

LicenseFinder

0

Find licenses for your project's dependencies.

Unknown Language
Updated May 21, 2026

rb-readline

0

Pure-Ruby Readline Implementation

Ruby
Updated May 16, 2026

prism-ids

0

A suricata rule compiler and checker Created by Gianni Tedesco via the GitHub Connector

Unknown Language
Updated Feb 27, 2026

Frequently asked questions

What does rapid7 build on GitHub?

Rapid7 develops several security-focused projects on GitHub, including the Metasploit Framework for penetration testing and Metasploitable3, a VM designed for practicing security skills. Their repositories include tools for web application security and vulnerability assessment.

Which programming languages does rapid7 use?

Rapid7's public repositories primarily utilize languages such as Ruby, Python, Java, C, JavaScript, and HTML. This diverse language use supports their development of various security tools and applications.

Are rapid7's repositories public?

Yes, all of Rapid7's repositories are public on GitHub. This transparency allows developers and security professionals to access their tools and contribute to ongoing projects in the cybersecurity community.

Is this exposure intended?

Monitor Rapid7 with RepoGuard and get alerted the moment a new public repository appears.

Monitor this account