Rapid7

module

HTTP Fetch, Linux Reboot

Disclosed
N/A
Created
Jan 5, 2026

Description

Fetch and execute an RISC-V 64-bit payload from an HTTP server.

A very small shellcode for rebooting the system using
the reboot syscall. This payload is sometimes helpful
for testing purposes. Requires CAP_SYS_BOOT privileges.

Authors

Brendan Watters
Spencer McIntyre
bcoles [email protected]

Platform

Linux

Architectures

cmd

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use payload/cmd/linux/http/riscv64le/reboot
msf payload(reboot) > show actions
...actions...
msf payload(reboot) > set ACTION < action-name >
msf payload(reboot) > show options
...show and set options...
msf payload(reboot) > run

Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.