Martin Sutovsky – Noise

Metasploit Wrap Up 05/22/2026

Martin Sutovsky — Fri, 22 May 2026 19:10:05 +0000

Another week, another authentication bypassOur humble Metasploit weekly(ish) blog has been blessed with a new network component vulnerability. The dynamic duo of @sfewer-r7 and @jburgess-r7 have discovered and authored the admin/networking/cisco_sdwan_...

Metasploit Wrap-Up 05/15/2026

Martin Sutovsky — Fri, 15 May 2026 18:54:25 +0000

Weaponizing a text editor for fun and profitGather round, dear readers, because today, we (by we, we mean @h00die) dropped the ultimate persistence mechanism: Vim plugin persistence. And honestly, calling it "persistence" feels redundant — Vim is alrea...

Metasploit Wrap-Up 03/06/2026

Martin Sutovsky — Fri, 06 Mar 2026 18:28:41 +0000

Encoder exposed!Some of our releases add new ways in; this one adds new ways to stay in. There are, of course, still new RCE toys in the box (Tactical RMM via Jinja2 SSTI and an unauthenticated MajorDoMo exploit). Still, the underlying theme is paylo...

Metasploit Wrap-Up

Martin Sutovsky — Thu, 22 May 2025 18:14:26 +0000

Making Metasploit faster

This week's wrap-up includes many new modules, but notably, we've upgraded Metasploit loading. Thanks to bcoles, the bootup performance when searching for a module has been increased in #20166. Also, we've reduced Metasploit startup time - in #20155.