Rapid7 dropped this week’s Metasploit update, and there’s some good stuff in here for penetration testers and red teamers.
The headliner is a new SMB to Meterpreter session upgrade module from contributor Dean Welch. It uses PsExec to upgrade authenticated SMB sessions to full Meterpreter shells. Load it with use windows/manage/smb_to_meterpreter and point it at your session number. Or just run sessions -u <session_id>. Either works. This is part of a bigger push to support session upgrades across more protocol types.
Three new modules landed this week:
Peyara Remote Mouse 1.0.1 RCE — An exploit for unauthenticated remote code execution in Peyara Remote Mouse v1.0.1. Contributed by capture0x. Path: windows/misc/peyara_remote_mouse_rce.
Linux LoongArch64 Exec Payload — A new command payload for the LoongArch64 Linux architecture, contributed by bcoles and modexp. Path: linux/loongarch64/exec.
SMB to Meterpreter via PsExec — The upgrade module mentioned above, from dwelch-r7. Path: windows/manage/smb_to_meterpreter.
There’s also an enhancement adding authentication support to the MCP server’s HTTP transport by default, plus bug fixes for a UDP sweep crash on Windows and a display issue with SSH session debug info showing the wrong user.
Update with msfupdate to grab the latest.
