KAGE2027

A desktop GUI for the Metasploit RPC server: work meterpreter sessions, browse files on a target, and generate payloads without living in msfconsole. Upstream stopped in 2019 on Electron 2 and Vue 2. This fork brings it forward — Electron 42, Vue 3 with Pinia and Element Plus, current axios and ESLint — and adds tests, a CI gate, and release builds.

• > Session control, file manager and payload generation over Metasploit RPC
• > Electron 2 → 42 and Vue 2 → 3, migrated in phases with the app launching at each step
• > AppImage and .deb builds published from a tag
• > For learning and internal testing only — requires a local Metasploit Framework install

> what it does

KAGE2027 is a desktop client for the Metasploit RPC server. It lists and interacts with meterpreter sessions, browses the file system on a session, and generates payloads, from a dashboard instead of a console.

Upstream WayzDev/Kage stopped in 2019 on Electron 2 and Vue 2, which had fallen years behind on security fixes. This fork modernizes it in phases: Electron 42 and electron-builder 26, Vue 3 with vue-router 4, Pinia in place of Vuex, Element Plus in place of element-ui, and current axios and ESLint. The app was kept launching at every step.

> what’s inside

• >Session list and interaction over Metasploit RPC.
• >File manager for an active session.
• >Payload generation for Windows and Android meterpreter.
• >A Jest test harness and a CI build-and-lint gate on every pull request.
• >AppImage and .deb builds published from a tag.

> why it exists

A useful tool that stops getting updates does not stay useful — its dependency tree turns into a liability. Bringing it forward was cheaper than writing a replacement.

For learning and internal testing only. Requires a local Metasploit Framework install. Upstream Kage is licensed MIT.