EIP-2026-103982

This Metasploit module exploits a predictable filename vulnerability in the 'pcap_log' plugin (Metasploit < 4.4) to create a hard link to /etc/passwd, allowing privilege escalation by injecting a privileged user entry via UDP.