Metasploit Wrap-Up 03/06/2026
2026-03-09T07:24:10Z•da3908aff8a3ece3a7f7e48078e93b7769033efdcde62ba59c31198de063595d
Jinja2 SSTIMajorDoMoRC4 packerRCETactical RMMencodersevasionexploitin-memory executionmetasploitoffensive toolingpayloadthreat-actor enablement
What happened
Rapid7’s Metasploit wrap-up (2026-03-06) announces offensive-capability upgrades: selectable encoders for exploit and payload modules (runtime bad-character handling), improved payload packaging to reduce crashes, and new module content including a Linux RC4 packer with in-memory execution (x86) for evasion. The release also highlights new RCE modules (Tactical RMM via Jinja2 SSTI and an unauthenticated MajorDoMo exploit). These changes make it easier for attackers to deliver, execute, and persist payloads while evading detection.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- da3908aff8a3ece3a7f7e48078e93b7769033efdcde62ba59c31198de063595d
- Enrichment time
- 2026-03-09T07:24:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.