Cracken + Metasploit
Once it ships, Cracken will drive Metasploit's exploit, auxiliary, and post modules through msfconsole and Meterpreter sessions, routing through compromised hosts to reach internal-only targets. Each will be held at an approval gate.
Connecting Metasploit
- Connect with
No credentials — runs on your own Tentacle
- Cadence
Not running yet
- Requires
The C2 Tools entitlement, which only unlocks the (empty) C2 tab in the Integration Center — no connector ships yet
What Cracken gets from Metasploit
Cracken reads nothing from Metasploit until its connector ships.
What Metasploit does not do
The Metasploit integration does not exist yet: the Integration Center card is Coming soon and reads "Not available yet", so no Meterpreter session, job or module result is imported as data. The Metasploit Framework that does ship is a package installed in the Tentacle image and driven as commands through the Bash Vessel — it returns console output to the operation, it is not a connection to an msfconsole or Metasploit Pro instance you run.
How Cracken uses Metasploit
- 01
Select and run the matching module
- 02
Work the Meterpreter session
- 03
Pivot and prove impact
Frequently asked questions
Does Cracken need a commercial Metasploit edition?
No; Cracken will drive the open-source Metasploit Framework through msfconsole modules and Meterpreter sessions, with no Metasploit Pro license required.
How does Cracken run Metasploit?
Cracken will chain Metasploit modules and Meterpreter sessions as one validated intrusion, each launch under the approval gates and autonomy limits you set.
More integrations
Brute Ratel
When it ships, Cracken will drive Brute Ratel's Badger implants across an operation.
Cobalt Strike
When it ships, Cracken will drive Cobalt Strike's Beacon from your team server.
Covenant
When it ships, Cracken will drive Covenant's in-memory Grunts across an operation.