0009854: Hayduk - open-source Metasploit GUI (Modern Armitage replacement) - Kali Linux Bug Tracker

ID	Project	Category	View Status	Date Submitted	Last Update

0009854	Kali Linux	New Tool Requests	public	2026-09-05 21:49	2026-10-29 01:11

Reporter	jolovicdev	Assigned To
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	new	Resolution	open

Summary	0009854: Hayduk - open-source Metasploit GUI (Modern Armitage replacement)
Description	Hayduk is a free, open-source graphical attack management console for Metasploit Framework. It fills the gap left by Armitage, whose last commit was July 2016. Homepage: https://github.com/jolovicdev/hayduk License: MIT Language: Go (backend), TypeScript/SolidJS (UI) Platforms: Linux, macOS, Windows (amd64, arm64) Hayduk ships as a single static Go binary with a browser-based UI. It connects to msfrpcd via the Metasploit RPC API. No JVM or runtime dependencies required. Features: Live network topology graph (the Armitage-style host map) Campaign workflows: host discovery, service scans, login attacks Hail Mary (launches matching exploits against selected hosts) Meterpreter and shell session management with live output Full module tree with option editing and payload selection Credentials, loot, and event tracking HTML report export for client delivery Team mode: multiple operators on a shared campaign Why include in Kali: Armitage was removed from the Metasploit Framework distribution in 2013 and has not been updated since 2016. Rapid7 ended Metasploit Community Edition in 2019. There is currently no maintained open-source Metasploit GUI available in Kali. Hayduk rebuilds that workflow with zero Java dependencies and works with the metasploit-framework package already in Kali. Install on Kali: sudo apt install metasploit-framework (if not already installed) msfrpcd -P yourpassword -S -f -a 127.0.0.1 ./hayduk Prebuilt binaries: https://github.com/jolovicdev/hayduk/releases Build from source: requires Go 1.26.1+ and Node, then `make && ./bin/hayduk`

jolovicdev 2026-10-28 14:35 reporter ~0022114	Status update since this request was filed (2026-09-05, then at v0.1.3). Hayduk is still actively maintained. Current release is v0.1.6 (2026-10-21), with cross-platform archives and SHA256SUMS on the releases page: https://github.com/jolovicdev/hayduk/releases What has landed since this ticket was opened The day-to-day Metasploit command surface is now feature-complete for campaign use: Listener/handler control (start/stop multi/handler, callback and caught-session details) and payload generation on the msfrpcd host. Host, service, credential, and loot management, with workspace scoping. Multiple concurrent session consoles with per-session transcripts, shell upgrade, Meterpreter tools, and pivot management (autoroute, SOCKS, port forwards). Capped credential login scans with blank-password and user-as-pass coverage. Service fingerprinting (matches modules to detected services instead of guessing from well-known ports) and exploit TARGET selection in the launch dialog. Input hardening: Shellwords-safe quoting, newline rejection on utility-console commands, and unpredictable payload paths. Seven tagged releases since late August; development is ongoing. Packaging Hayduk is a single static Go binary. No Java, Node.js, or Python runtime; the embedded web UI ships inside the binary. Its only external dependency is the Metasploit Framework itself (already in Kali as metasploit-framework), reached over msfrpcd. Each release publishes linux_amd64 and linux_arm64 archives plus darwin and windows builds, with a SHA256SUMS file. That makes Debian packaging straightforward: a Go build with no vendored runtime and a single Depends on metasploit-framework. Homepage / source: https://github.com/jolovicdev/hayduk License: MIT Language: Go (backend), TypeScript/SolidJS (UI, embedded in the binary) Platforms: Linux, macOS, Windows (amd64, arm64) I'm happy to maintain the packaging and keep it current with releases. I can provide a debian/ directory or open a merge request against the Kali packaging repo, whichever the team prefers. Why it belongs in Kali Kali ships the Metasploit Framework but has had no maintained open-source graphical console for it since Armitage (dropped from Metasploit in 2013; upstream last touched in 2016). Hayduk fills that gap: a browser-based attack-management console over an existing msfrpcd, not a new exploitation engine. It is not a DoS or anonymity tool, so it falls outside the excluded categories in the tools policy.

Date Modified	Username	Field	Change
2026-09-05 21:49	jolovicdev	New Issue
2026-09-08 07:56	daniruiz	Summary	Hayduk – open-source Metasploit GUI (Modern Armitage replacement) => Hayduk - open-source Metasploit GUI (Modern Armitage replacement)
2026-10-28 14:35	jolovicdev	Note Added: 0022114