The tools cover the arc of an engagement — search, exploit, session, post-exploitation, handler — so an agent can look up a module, run it against a target, and work the resulting session, with the standing caution that this is live exploitation tooling meant only for authorized environments.
A server that bridges an assistant to the Metasploit Framework, exposing its penetration-testing workflow as tools: find modules, run exploits and auxiliary and post modules, generate payloads, and manage sessions and listeners.
- list_exploits and list_payloads search exploit and payload modules, with platform and architecture filters
- run_exploit configures and runs an exploit with an optional check first; run_auxiliary_module and run_post_module run auxiliary and post-exploitation modules; generate_payload writes payload files
- Session management: list_active_sessions, send_session_command, and terminate_session
- Handler management: list_listeners, start_listener, and stop_job
Metasploit Framework installed with its RPC service running, and Python. It exposes powerful exploitation features — use only where you have explicit authorization to test.
