The open source Metasploit penetration testing framework has been acquired by a firm called Rapid7.

The open source Metasploit framework is often the place where security vulnerabilities become usable enabling security researchers to test out exploits and fix flaws. Until recently, Metasploit was typically used only as a standalone community project, but that's no longer the case.

Hacking into systems (albeit for testing purposes) is apparently getting easier with the upcoming open source Metasploit 3.2 framework, according to its creator.

Didn't think it was possible to detect a Metasploit attack? New open source tool will change your mind.

metasploit 3.1 review of the new msfgui3 and why distcc over a public network or wireless is not good (improperly configured allows remote command execution) -- with video -- and with recommendations on securing distcc

Pentoo Linux is a Gentoo-based Linux distribution that runs as a Live CD or Live USB. Pentoo has been designed to provide a penetration testing and security assessment solution through the use of Nessus and Metasploit. Pentoo uses the Enlightenment window manager, is optimized for Pentium III architecture, and supports package modularity like Slax.

For January and February, we chose some of the staples of open source security (GnuPG and Nmap) as the tool of the month. And deservedly so; both have just celebrated their ten-year anniversary in the open source realm, a rare feat for any open source project, much less one founded on security.

It is distribution designed for penetration testers and other security professionals, or those who want to mess with all the best security and penetration testing applications the free software community has to offer.

Microsoft has released part of its .NET Framework - the part for internet-connected smart devices - into the open-source community. The company said on Monday that it's releasing source code for the .NET Micro Framework under an Apache 2.0 license.