Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

module

HTTP Fetch, Linux dup2 Command Shell, Bind TCP Stager

Disclosed
N/A

Description

Fetch and execute an ARMLE payload from an HTTP server.
dup2 socket in r12, then execve.

Listen for a connection
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.