Metasploit Demo Meeting 2020-08-25
Channel: Metasploit
Date: 2020-08-25

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* vBulletin 5.x PHP remote code execution (CVE-2020-7373)
* Mikrotik Configuration Importer
* Mikrotik Gather Device General Information
* Jupyter Login Utility
* Safari Webkit JIT Exploit for iOS 7.1.2 (CVE-2018-4162)
* Apache OFBiz XML-RPC Java Deserialization (CVE-2020-9496)
* Geutebruck testaction.cgi Remote Command Execution (CVE-2020-16205)
* D-Link Central WiFi Manager CWM(100) RCE (CVE-2019-13372)
* Arista Configuration Importer
* TeamViewer Unquoted URI Handler SMB Redirect (CVE-2020-13699)

Also included in this recording are a quick overview of some new enhancements, including demos of "opt-in features" and the ability to import Nmap vulners data, and also demonstrations of the above Juypter, OFBiz, D-Link, and TeamViewer modules!!

And we discuss enhancements and bug fixes, too!

Also, our new web app that we've been building called AttackerKB (Attacker Knowledge Base) is NOW IN OPEN BETA!!!  AttackerKB is a new resource to highlight hacker community knowledge on which vulns matter most — and why!  You can check out the site yourself at https://attackerkb.com!  For more details, you can find our recent "Meet AttackerKB" post at https://blog.rapid7.com/.

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.