This week’s release includes five new modules, including a full unauthenticated RCE chain for Paperclip AI and a VS Code extension persistence technique. On the post-exploitation side, the new windows/local/ntlm_relay_2_self module coerces the local machine account to authenticate via OpenEncryptedFileRaw (WebDAV), relays that NTLM authentication to a Domain Controller’s LDAP service, then uses the resulting LDAP session to write Shadow Credentials and obtain a Kerberos service ticket as Administrator via S4U2Proxy, enabling PsExec back to itself for SYSTEM access.On the enhancement side, the new MCP server plugin lets AI tools assist operators directly within a running msfconsole instance, and module check codes now return richer detail for users.New module content (5)Paperclip AI RCE using a chain of six API calls (CVE-2026-41679)Authors: Sagilayani https://github.com/sagilayani and h00die-gr3y h00die.gr3y@gmail.comType: ExploitPull request: #21547 contributed by h00die-gr3yPath: linux/http/paperclipai_unauth_rce_cve_2026_41679AttackerKB reference: CVE-2026-41679Description: Adds an exploit module for CVE-2026-41679 which exploits Paperclip. An unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in authenticated mode with default configuration. The entire chain is six API calls.Xerte Online Toolkits Arbitrary File Upload – Unauthenticated Media UploadAuthor: bootstrapbool bootstrapbool@gmail.comType: ExploitPull request: #21371 contributed by bootstrapboolPath: multi/http/xerte_unauthenticated_mediauploadAttackerKB reference: CVE-2026-41459Description: Exploits authentication failure (CVE-2026-34413), extension blacklist (CVE-2026-34415), and path traversal (CVE-2026-34414) vulnerabilities in Xerte Online Toolkits versions 3.15 and earlier.VS Code Extension PersistenceAuthor: h00dieType: ExploitPull request: #21465 contributed by h00diePath: multi/persistence/vscode_extensionDescription: Adds a new p According to Rapid7 Blog, this week’s release includes five new modules, including a full unauthenticated rce chain for paperclip ai and a vs code extension persistence technique. on the post-exploitation side, the new windows/local/ntlm_relay_2_self module coerces the local machine account to authenticate via openencryptedfileraw (webdav), relays that ntlm authentication to a domain controller’s ldap service, then uses the resulting ldap session to write shadow credentials and obtain a kerberos service ticket as administrator via s4u2proxy, enabling psexec back to itself for system access.on the enhancement side, the new mcp server plugin lets ai tools assist operators directly within a running msfconsole instance, and…
