http://framework.metasploit.com

They appear to be bogged down, but a definite must for pen testing.