metasploit®

PRODUCT BRIE F

Put Your Defenses
to the Test
Knowing Adversaries’ Moves Helps
You Better Prepare Your Defenses
Metasploit gives you insight that’s backed by a communityof well over 200,000 users and contributors: It’s themost impactful penetration testing solution on the planet.
With Metasploit you can uncover weaknesses in yourdefenses, focus on the highest risks, and improve yoursecurity outcomes.

Rapid7’s penetration testing
solution, Metasploit, increases
penetration testers’ productivity,
validates vulnerabilities, enables
phishing and broader socialengineering, and improves
security awareness.

Know Your Weak Points

Simulate real-world attacks to find your weak points before
a malicious attacker does. Metasploit seamlessly integrates
with the open-source Metasploit Framework, giving youaccess to exploitation and reconnaissance modules to saveyou effort and accelerate testing. Use attacker techniquesto evade antivirus, find weak credentials, and pivot
throughout the network.

Utilize the World’s Largest Code-Reviewed
Exploit Database

Leading the Metasploit Framework open-source project
gives Rapid7 unique insights into the attacker mindset,current vectors, and methodologies. Rapid7 works withthe user community to regularly add new exploits every
week, currently amassing more than 2,300 exploits andmore than 3,300 modules and payloads.

Simulate Real-World Attacks Against Your Defenses
Metasploit consistently evades leading antivirus solutions
and enables you to efficiently exfiltrate data fromcompromised machines with over 330 post-exploitation
modules. Once one machine is compromised, dig deeper
in your network with the Credential Domino MetaModule
or easy-to-use VPN pivot, and find out how far an attacker
can get.

Uncover Weak and Reused Credentials

Test your network for weak and reused passwords.
Going beyond just cracking operating system accounts,
Metasploit can run brute-force attacks against over 15
account types, including databases, web servers, andremote administration solutions.

Prioritize What Matters Most
Finding your weak points is only half the battle. As apenetration tester, it is your job to perform thoroughassessments and communicate how to reduce the risk ofa breach. Metasploit allows you to pinpoint the weak links
in the attack chain, then validate and prioritize vulnerabilities
seamlessly with InsightVM or Nexpose closed-loop
integration using Top Remediation Reports.

Pinpoint Weak Links in the Attack Chain

Attacks are more sophisticated today; the adversary isusing multiple, combined techniques to breach your systems
faster than ever. With Metasploit, you can simulate attacks
from the perspective of the adversary and easily report thebiggest security risks.

011819

2,3003,300

Rapid7 has worked with the user community to amass more than
2,300 exploits and more than 3,300 modules and payloads.

Closed-Loop Integration with Rapid7 InsightVM andNexpose for Remediation

When other departments question the validity of scan results,demonstrate that a vulnerability puts systems and data at risk. You’ll
get quick buy-in for remediation measures and build credibility withstakeholders. The integration of Metasploit and InsightVM (or Nexpose)
provides the only closed-loop validation solution from a single vendor that
simplifies vulnerability prioritization and remediation reporting.

Improve Your OutcomesTime is of the essence. As a penetration tester, you don’t have the luxury
to wait. Metasploit allows you to accelerate improvement by running
penetration tests at scale and completing compliance programs faster.
In addition, you can simulate phishing campaigns to harvest credentials,
deliver payloads, and improve security awareness.

“Theexploitation
modulesthat are inMetasploit
Pro are great.
It saves mefrom having todocument somuch by handand saves
me a lot ofman-hours.”— Tim Lawrence, IT
Security Analyst

Run Penetration Testing Programs at Scale

Conducting an assessment and managing data in networks withover 100 hosts can be challenging with traditional command line tools.
Metasploit scales to support thousands of hosts per project onengagements involving multiple, simultaneous penetration testers.
Automate penetration testing steps with Task Chains, Resource Scripts,and MetaModules to improve productivity.

Test and Infiltrate Users with Sophisticated Social Engineering

Send and track emails to thousands of users with Metasploit Pro’s scalable
phishing campaigns. Clone web application login pages with one click toharvest credentials, deliver payloads, and direct security awareness training
by measuring conversion rates at each step in the social engineering
campaign funnel.

Ready to Get Started?
call +1.866.7.RAPID7
email: sales@rapid7.com

Start a Free Trial:
www.rapid7.com/
metasploit-download

Training:
www.rapid7.com/pen-test-training

Complete Compliance Programs Faster

Generate reports to show your findings and sort them by regulations
such as PCI DSS and FISMA. Additionally, users can verify thatcompensating controls implemented to protect systems are operationaland effective. How can Metasploit adapt to your organization? Create
vulnerability exceptions based on hard evidence that will easily pass yournext audit. Even better, automatically record actions and findings fromyour network and application-layer assessment to save valuable timeotherwise spent manually building reports.

©RAPID7 2018

Supportcall +1.866.380.8113

Customer Portal