Metasploit Wrap-Up 04/03/2026

Rapid7 published multiple posts covering new Metasploit modules and exploit additions (unauthenticated FreeScout .htaccess RCE, Grav and other RCE modules, a generic multi/http/os_cmd_exec module, new HTTP/HTTPS CMD payloads, improved SMB NTLM relaying, and a Windows persistence technique abusing HKCU\Environment\UserInitMprLogonScript). A Metasploit auxiliary module targets networked Epson-compatible ESC/POS printers via CVE-2026-23767. Rapid7 Labs released a whitepaper describing seven new stealthy BPFDoor kernel-level backdoor variants (notably httpShell and icmpShell) that use BPF and stat