← Back to feed
Vulnerabilities & PatchesEmerging1 sourceJul 30, 2026 · 14:29via Rapid7 Blog

Metasploit Framework 6.5 Released

Brief

Today we’re proud to announce that Metasploit Framework version 6. 5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features.

Malleable C2 Profiles for HTTP

One of the latest and most requested features is support for Malleable C2 profiles across all current Meterpreter payloads. This feature enables users to load a standard profile into Meterpreter and change the shape of its HTTP(S) traffic. All Meterpreters, including Windows, Java, Python, PHP and Linux, have been updated with this functionality.

Due to the size restrictions on staged payloads, staged payloads will only use the Malleable C2 configuration once the stage has been loaded. Since stageless payloads skip the download phase, they immediately use the Malleable C2 configuration.

Read more on Rapid7 Blog