Metasploit Wrap-Up 03/13/2026

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-03-13-2026
• Blog Title: Metasploit Wrap-Up 03/13/2026
• Suggested Section: HackTricks Main -> Generic Methodologies & Resources (External Recon / OSINT) for LeakIX-based recon; and Windows/AV Bypass or Generic Hacking (Evasion / Payloads) for Linux RC4 packing + nanosleep delay technique; additionally Network Services Pentesting -> Pentesting Web -> SPIP (or create a SPIP subsection) to reference CVE-2025-71243 / metasploit exploit/multi/http/spip_saisies_rce.

🎯 Content Summary

Rapid7 Metasploit Wrap-Up (Mar 13, 2026): This release introduces three new Metasploit Framework modules spanning recon, evasion, and exploitation, plus two enhancements and one bug fix. It also notes a Metasploit Pro 5.0.0 product milestone (UI update + SSO), but that section does not provide exploit details.

1) Recon: LeakIX Search (auxiliary/gather/leakix_search)

What it is: A new auxiliary recon/gather module that integrates the L...

🔧 Technical Details

LeakIX-assisted external attack surface discovery: Use LeakIX (via Metasploit’s auxiliary/gather/leakix_search) to enumerate an organization’s externally exposed services and locate leaked credential/database artifacts associated with the target. This reconnaissance output can be used to prioritize validation of exposed endpoints and identify high-value leads (e.g., leaked secrets) that enable subsequent exploitation.

Linux payload static-evasion via RC4 packing + runtime stub: Wrap a Linux x64 payload by encrypting it with RC4 and embedding it alongside a compact loader stub that decrypts and executes the payload at runtime. Optionally add a nanosleep-based delay before decryption/execution to reduce effectiveness of short-lived sandbox runs and automated detonations.

Unauthenticated PHP code injection to RCE via attacker-controlled parameter: When a PHP application/plugin processes an attacker-controlled parameter (here: <...

🤖 Agent Actions

Summary

• Added LeakIX recon guidance and Metasploit module usage to external recon.
• Documented the Linux RC4 packer evasion workflow in the msfvenom cheatsheet.
• Created a SPIP page for Saisies unauth PHP injection, linked it from the web methodology and SUMMARY, and added references.

Files

• src/generic-methodologies-and-resources/external-recon-methodology/README.md
• src/generic-hacking/reverse-shells/msfvenom.md
• src/network-services-pentesting/pentesting-web/spip.md
• src/network-services-pentesting/pentesting-web/README.md
• src/SUMMARY.md

Tests

• Not run (docs-only changes).

Next Steps

1. Review the new SPIP page placement and wording.
2. Run the book build if you want to validate nav rendering.

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

📚 Repository Maintenance

• MD files processed: 955
• MD files fixed: 2

All .md files have been checked for proper formatting (headers, includes, etc.).

[carlospolop]

🔗 Additional Context

Original Blog Post: https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-03-13-2026

Content Categories: Based on the analysis, this content was categorized under "HackTricks Main -> Generic Methodologies & Resources (External Recon / OSINT) for LeakIX-based recon; and Windows/AV Bypass or Generic Hacking (Evasion / Payloads) for Linux RC4 packing + nanosleep delay technique; additionally Network Services Pentesting -> Pentesting Web -> SPIP (or create a SPIP subsection) to reference CVE-2025-71243 / metasploit exploit/multi/http/spip_saisies_rce.".

Repository Maintenance:

• MD Files Formatting: 955 files processed (2 files fixed)

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0