--- title: Metasploit Wrap Up: Lot of summer shells and fit http... description: Weekly Metasploit wrap-up covering thirteen new modules including RCE exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl... canonical: https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Metasploit Wrap Up: Lot of summer shells and fit http profiles | daily.dev og:description: Weekly Metasploit wrap-up covering thirteen new modules including RCE exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl... og:url: https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq og:image: https://api.daily.dev/og/posts/fg55B72bq.png og:image:alt: Metasploit Wrap Up: Lot of summer shells and fit http profiles og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Metasploit Wrap Up: Lot of summer shells and fit http profiles **[Rapid7 Cybersecurity Blog](https://daily.dev/sources/rapid7-blog)** · 9 min read · 0 upvotes · 0 comments ## Summary Weekly Metasploit wrap-up covering thirteen new modules including RCE exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, Pix for WooCommerce, and a Fragnesia Linux kernel LPE (CVE-2026-46300). It also highlights Metasploit Framework 6.5 additions like HTTP malleable C2 profiles for Meterpreter, new MCP server tooling and Bearer authentication, Linux multi-fetch payload improvements, and new Windows AArch64 reverse-TCP shell payloads. Fifteen enhancements and fifteen bug fixes round out the release, including FTP scanner improvements, Kerberos ticket trace support, and fixes for msfconsole crashes and JSON RPC auth defaults. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does the new MALLEABLEC2 option do in Metasploit Meterpreter payloads? It lets users load a standard malleable profile into Meterpreter to change the shape of its HTTP(S) traffic, similar to Cobalt Strike malleable C2 profiles. This functionality was added in Metasploit Framework 6.5 and works across all Meterpreter variants, including Windows, Java, Python, PHP, and Linux. _daily.dev helps red teamers track new evasion features like malleable C2 as tooling evolves._ ### Is there a Metasploit module for the Pterodactyl Panel CVE-2025-49132 RCE vulnerability? Yes, a module at linux/http/pterodactyl_locales_locale_json exploits CVE-2025-49132, an unauthenticated remote code execution flaw in Pterodactyl Panel versions before 1.11.11. The vulnerability lives in the locale.json endpoint, which permits path traversal and arbitrary file creation, resulting in code execution as the web server user. _Security teams patching Pterodactyl deployments can follow exploit coverage like this on daily.dev._ ### What CVEs are chained in the WordPress WP2Shell exploit module? The wp_batch_desync_rce module chains a REST API route confusion flaw (CVE-2026-63030) with a SQL injection (CVE-2026-60137) to achieve unauthenticated remote code execution on WordPress core versions 6.9.0-6.9.4 and 7.0.0-7.0.1. It escalates privileges, deploys a payload via a custom plugin, and opens a remote session. _Track fast-moving WordPress core exploit chains like this one on daily.dev._ ## Similar posts on daily.dev - [Metasploit Wrap-Up 05-06-2026](https://daily.dev/posts/metasploit-wrap-up-05-06-2026-hyrhopeeh) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments - [Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my\!](https://daily.dev/posts/metasploit-wrap-up-payloads-and-exploits-and-scanners-oh-my--cpbgdkavn) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments - [Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?](https://daily.dev/posts/metasploit-wrap-up-belgian-waffles-chocolates-and-modules-frites--5iqda17pl) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments - [Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more](https://daily.dev/posts/weekly-metasploit-update-ntlm-relay-priv-esc-mcp-server-integration-paperclip-ai-rce-chain-and-m-x1s0fcu6q) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Metasploit Wrap Up: Lot of summer shells and fit http profiles","url":"https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq"},"datePublished":"2026-08-14T21:51:48.994Z","dateModified":"2026-08-24T07:02:43.138Z","description":"Weekly Metasploit wrap-up covering thirteen new modules including RCE exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl...","image":"https://media.daily.dev/image/upload/s--P4t4XyoV--/f_auto/v1722860399/public/Placeholder%2001","thumbnailUrl":"https://media.daily.dev/image/upload/s--P4t4XyoV--/f_auto/v1722860399/public/Placeholder%2001","isAccessibleForFree":true,"articleSection":"Rapid7 Cybersecurity Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Rapid7 Cybersecurity Blog","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/rapid7-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Rapid7 Cybersecurity Blog","item":"https://daily.dev/sources/rapid7-blog"},{"@type":"ListItem","position":3,"name":"Metasploit Wrap Up: Lot of summer shells and fit http profiles"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles-fg55b72bq#faq","mainEntity":[{"@type":"Question","name":"What does the new MALLEABLEC2 option do in Metasploit Meterpreter payloads?","acceptedAnswer":{"@type":"Answer","text":"It lets users load a standard malleable profile into Meterpreter to change the shape of its HTTP(S) traffic, similar to Cobalt Strike malleable C2 profiles. This functionality was added in Metasploit Framework 6.5 and works across all Meterpreter variants, including Windows, Java, Python, PHP, and Linux. daily.dev helps red teamers track new evasion features like malleable C2 as tooling evolves."}},{"@type":"Question","name":"Is there a Metasploit module for the Pterodactyl Panel CVE-2025-49132 RCE vulnerability?","acceptedAnswer":{"@type":"Answer","text":"Yes, a module at linux/http/pterodactyl_locales_locale_json exploits CVE-2025-49132, an unauthenticated remote code execution flaw in Pterodactyl Panel versions before 1.11.11. The vulnerability lives in the locale.json endpoint, which permits path traversal and arbitrary file creation, resulting in code execution as the web server user. Security teams patching Pterodactyl deployments can follow exploit coverage like this on daily.dev."}},{"@type":"Question","name":"What CVEs are chained in the WordPress WP2Shell exploit module?","acceptedAnswer":{"@type":"Answer","text":"The wp_batch_desync_rce module chains a REST API route confusion flaw (CVE-2026-63030) with a SQL injection (CVE-2026-60137) to achieve unauthenticated remote code execution on WordPress core versions 6.9.0-6.9.4 and 7.0.0-7.0.1. It escalates privileges, deploys a payload via a custom plugin, and opens a remote session. Track fast-moving WordPress core exploit chains like this one on daily.dev."}}]} ```