Metasploit makes exploitation fairly easy to use. The Meterpreter module makes windows post-exploitation way easier. You can develop your own payloads and exploits using Ruby. Review collected by and hosted on G2.com.

The exploit database is not as update as it should, a lot of the good new exploits are not yet available on Metasploit. Also, the tool can be very noisy sometimes, so if you're trying to be stealthy that might be an issue Review collected by and hosted on G2.com.

Metasploit is widely used pentesting tool which is free and it can be used on every platform. Basically it's product of Rapid7 which is used for vulnerability exploitation purpose. It's very helpful tool for people practicing the security exploitation and pentesting. Review collected by and hosted on G2.com.

Most of the time its dabtabase is not updating with latest vulnerabilities, so we need to search it from another platform for its usage. Also finding right module for practice is time consuming task. User interface should be improved for metasploit. Review collected by and hosted on G2.com.

Gui is simple and it's vast amount of payloads are tremendous Review collected by and hosted on G2.com.

Sometime scripting can be complex and difficult Review collected by and hosted on G2.com.

Its a corner stone for pentesting career. Its absolutely a must know framework when entering the security field. Alot of the things are still used and practiced today Review collected by and hosted on G2.com.

There is nothing to dislike about the framework. It's functional and updated, very easy to use. The learning curve for this framework isnt steep compared to more modern C2 Frameworks Review collected by and hosted on G2.com.

Metasploit has a huge count of exploits over multiple platforms like android, python, java and more. Review collected by and hosted on G2.com.

There is no point in disliking such a best tool. Review collected by and hosted on G2.com.

Great tool, helped me a lot when I worked as a pentester :) Review collected by and hosted on G2.com.

Great job was done! You are doing the right way! Review collected by and hosted on G2.com.

Literally find what you are looking for, specific by issue. Rapid 7 was instrumental in finding all the missed requirements in an older Administration software we needed to retool. Review collected by and hosted on G2.com.

If you didn't know what you were looking for, there could be more tool tips, guidance for a user that was new to looking at Pen Test data. Review collected by and hosted on G2.com.

Its capability to provide security vulnerabilities and support penetration testing in appreciated and useful. Considering it is an open source community, it is quite impressive. Even Rapid7 is helpful to security teams do more things apart from verifying vulnerabilities, doing security assessments, and improve security awareness and hence training. Review collected by and hosted on G2.com.

The GUI just disappoints me, not that much though considering open source tool (free). Sometimes I feel vulnerabilities are not up to date. I am not sure if there is any descriptive documentation around how to use it self train on commands and exploits. It's update are less frequent, which is good and bad. Review collected by and hosted on G2.com.

This tool is useful to learn and understand vulnerabilities that exist within a system. You are able to learn what exploits and payloads can be used on the vulnerability. I like that it is an automated tool that carries out the exploitation on the system and we are able to see what information is disclosed based on the payload and vulnerability exploited. Great penetration testing tool. I also like that you can perform a vulnerability and discovery scans. Review collected by and hosted on G2.com.

One downside to exploit is that the list of exploits may not be up to date. Although Metasploit provides extremely useful documentation, sometimes the explanations are extremely brief and not easy to follow. Review collected by and hosted on G2.com.

I love how its open source and freely available and that it includes an extensive toolset of pentesting tools. Its included freely with Kali Linux on their platforms. Review collected by and hosted on G2.com.

I feel that there should be proper documentation for using the exploits and as well as more user friendly CLI commands to run the exploits. Also maybe an auto-update feature would be nice to update the framework. Review collected by and hosted on G2.com.