Blog
The Framework that we all know and love is about to take a massive leap into the future. The MSF crew as well as the MSF itself has been placed under Rapid 7’s corporate umbrella.
The framework will continue to be free, running under the BSD license. We expect to see major improvements in the MSF due to this shift. With corporate backing there will be more resources and time to improve the MSF. We have been told that version 3.3 will be a MAJOR improvement due to a whole new structure. In version 3.4 the jump will be even more drastic since full time staff and resources will be devoted to developing that version. HD Moore is still overseeing this project and will be heavily involved in development, creation and keeping MSF the awesome framework we are all used to.
Offensive Security, which has become a leader in the security market for training and penetration testing is now the official training partners for MSF education to the public. Offensive Security worked with the MSF crew to create the acclaimed Metasploit Unleashed Course and we will continue to work closely with HD Moore and the Metasploit crew to continue offering amazing training on the MSF. We look forward to seeing how all this unravels.
What’s coming in the future? We are sure to see new and exciting developments in the MSF as well in new and improved Offensive Security Courses.
Cybersecurity leader resources
Sign up for the Secure Leader and get the latest info on industry trends, resources and best practices for security leaders every other week
Latest from OffSec

Federal
Addressing the Unique Cybersecurity Challenges Faced by Government Agencies
Explore the unique cybersecurity challenges government agencies face and how tailored strategies can protect national security and public trust.
Feb 12, 2025
8 min read

Enterprise Security
Building a Cyber-Resilient Public Sector Through Hands-on Security Training
Learn how hands-on cybersecurity training equips public sector teams to protect critical infrastructure, featuring real-world cases from Atlanta, Oldsmar, and Texas that demonstrate why practical experience trumps theoretical knowledge alone. Discover why agencies are moving beyond certifications to combat-ready security training.
Feb 5, 2025
4 min read

Research & Tutorials
CVE-2025-21298: A Critical Windows OLE Zero-Click Vulnerability
Explore CVE-2025-21298, a critical Windows OLE zero-click flaw enabling RCE via email. Learn its risks, impact, and how to defend against attacks.
Feb 3, 2025
3 min read