Help shape the future of Metasploit FrameworkWe are planning future work in relation to the evasion capabilities present in Metasploit Framework, and how they function/are presented to users. We are currently accepting responses to our feedback form, which means that you can shape the future of how evasive capabilities are implemented in Metasploit Framework. The proposal for the changes can be found here, and you can submit your responses to the form here. The form will stop accepting responses on the 1st of July, 2026.New module content and improvements have also been added this week. This includes a Next.js Middleware Authorization Bypass scanner, LiteLLM Proxy SQL Injection, an unauthenticated API authentication bypass scanner for Audiobookshelf, a deserialization RCE in Dalfox, and improvements to service and host reporting in bruteforce-related modules.New module content (4)Audiobookshelf Unauthenticated API Authentication Bypass ScannerAuthors: Kenneth LaCroix and swiftbird07Type: AuxiliaryPull request: #21565 contributed by kenlacroixPath: scanner/http/audiobookshelf_auth_bypassAttackerKB reference: CVE-2025-25205Description: Adds audiobookshelf_auth_bypass, a detection module for CVE-2025-25205 an unauthenticated API authentication bypass in Audiobookshelf (self-hosted audiobook/podcast server), affecting versions 2.17.0 2.19.0 (fixed in 2.19.1).BerriAI LiteLLM Proxy Pre-Auth SQL Injection ScannerAuthors: Kenneth LaCroix and Tencent YunDing Security LabType: AuxiliaryPull request: #21567 contributed by kenlacroixPath: scanner/http/litellm_proxy_sqliAttackerKB reference: CVE-2026-42208Description: Adds auxiliary/scanner/http/litellm_proxy_sqli, a detection module for CVE-2026-42208 (CVSS 9.3, on the CISA KEV list) a pre-authentication SQL injection in BerriAI LiteLLM proxy.Next.js Middleware Authorization Bypass ScannerAuthors: Kenneth LaCroix, Rachid Allam, and Yasser AllamType: AuxiliaryPull request: #21566 contributed by kenlacroixPath: scanner/http According to Rapid7 Blog, help shape the future of metasploit frameworkwe are planning future work in relation to the evasion capabilities present in metasploit framework, and how they function/are presented to users. we are currently accepting responses to our feedback form, which means that you can shape the future of how evasive capabilities are implemented in metasploit framework. the proposal for the changes can be found here, and you can submit your responses to the form here. the form will stop accepting responses on the 1st of july, 2026.new module content and improvements…
