Help Me Choose The Right Edition
Metasploit is available in various editions. Read this section to find out which one is right for you.
- Network discovery
- Vulnerability scanner import
- Basic exploitation
- Module browser
- Smart exploitation
- Password auditing
- Evidence collection
- Logging & reporting
- Replay scripts
Metasploit Community plus:
- Social Engineering
- Web app scanning
- Post-exploitation macros
- IDS/IPS evasion
- VPN pivoting
- Team collaboration
- Tagging
- PCI & FISMA reports
- Enterprise-level Nexpose integration
- VMware & Amazon EC2 virtualization
- Persistent sessions & listeners
Metasploit Express plus:
Open source development platform
Metasploit Community Edition
If you are trying to learn about Metasploit and penetration testing, Metasploit Community Edition is your best option. Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners such as Nexpose - for free. This helps prioritize remediation and eliminate false positives, providing true security risk intelligence. IT professionals can demonstrate the impact of vulnerabilities to IT operations to obtain buy-in for remediation.
Metasploit Pro
If your professional responsibilities include penetration testing or vulnerability management, you should have a look at Metasploit Pro. Metasploit Pro helps security and IT professionals in enterprises prevent data breaches by efficiently conducting broad-scope penetration tests, prioritizing vulnerabilities, and verifying controls and mitigations. Its capabilities include smart exploitation, password auditing, web application scanning, and social engineering. Teams can collaborate in Metasploit Pro and present their findings in consolidated reports.
Metasploit Express
Metasploit Express is the "little brother" of Metasploit Pro. Metasploit Express helps network administrators and auditors discover network assets, prioritize vulnerabilities, test passwords, and verify mitigations. This increases the productivity of vulnerability management solutions, providing true security risk intelligence. Its capabilities include smart exploitation and password auditing. IT professionals can present their findings in automatically generated reports.
Metasploit Framework
If you're a developer researching looking to build your own tools and processes, this edition is right for you. The Metasploit Framework is an open source platform that supports vulnerability research, exploit development, and the creation of custom security tools. Representing the largest collection of quality-assured exploits, the Metasploit Framework is the de-facto standard for security testing around the world, with over one million downloads per year.
