Metasploit Meterpreter Reverse HTTPS Default Self-Signed TLS Certificate

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•0

Detects outbound network traffic established by a client using the default self-signed TLS certificate generated by Metasploit for Meterpreter Reverse HTTPS sessions. The rule looks for the common default subject fields 'CN=metasploit' and 'O=msf' within the TLS handshake.