Metasploit Demo Meeting 2020-12-15
Channel: Metasploit
Date: 16/12/2020

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* Ghostcat (CVE-2020-1938)
* Avast AV Memory Dumping Utility
* Aerospike Database UDF Lua Code Execution (CVE-2020-13151)
* GitLab File Read Remote Code Execution (CVE-2020-10977)
* FlexDotnetCMS Arbitrary ASP File Upload (CVE-2020-27386)
* WordPress Email Subscribers and Newsletter Hash SQLi Scanner by Wordfence, h00die, and red0xff, which exploits CVE-2019-20361
* Windows Pulse Secure Connect Client Saved Password Extractor (CVE-2020-8956)

Included in this recording are demos of the new Pulse Secure Connect, Avast, Aerospike, FlexDotnetCMS, and GitLab modules, as well as discussion of new modules, enhancements, and fixes!

Also, our new web app that we've been building called AttackerKB (Attacker Knowledge Base) is NOW GA!!!  AttackerKB is a new resource to highlight hacker community knowledge on which vulns matter most — and why!  You can check out the site yourself at https://attackerkb.com!

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.