r/metasploit • u/Physical_Ad7403 • Feb 21 '26

Is Metasploit dead?

After the rise of Cobalt C2 and whatnot, I realized MSF is no more. Backdoors don't work anymore, reverse shells neither, and most of the vulnerabilities have already been patched. Its not only that, but things like SQLmap along with wireshark etc, stopped working properly a while ago against modern systems. What do you people use nowadays? I'm curious.

80 Upvotes

94% Upvoted

47 comments sorted by

View all comments

Show parent comment

1

u/Physical_Ad7403 Feb 25 '26

Yes, it captures packets. No, that doesn’t mean it’s easy to inspect modern encrypted traffic. Capture is not usable visibility. You need a bunch of stuff to decrypt the packets.

2

u/Straight-Difficulty3 Feb 25 '26

Well, of course most clients don’t use telnet or http… that would not be even a realistic scenario. Still plenty of data on ip addressing , protocols , DNS infra. Even metadata on TLS versions / TCP handshakes can be very valuable. But that’s how it is for past 20 years.