Metasploit Demo Meeting 2021-02-09
Channel: Metasploit
Date: 2021-02-09

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* MobileIron MDM Hessian-Based Java Deserialization RCE (CVE-2020-15505)
* PEAR Archive_Tar Arbitrary File Write (CVE-2020-28949)
* Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution (CVE-2020-11853)
* PRTG Network Monitor Authenticated RCE (CVE-2018-9276)
* FannyBMP or DementiaWheel Detection Registry Check (CVE-2010-2568)
* Abandoned Cart for WooCommerce SQLi Scanner
* Sudo Heap-Based Buffer Overflow (CVE-2021-3156)
* OneDrive Sync Provider Enumeration Module 

Included in this recording, the team demonstrates the new Sudo Heap-Based Buffer Overflow (a.k.a. Baron Samedit) and the PRTG Network Monitor Authenticated RCE modules.

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com​.