Metasploit Demo Meeting 2020-01-28
Channel: Metasploit
Date: 2020-01-29

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* Citrix ADC (NetScaler) Directory Traversal to achieve Command Execution (CVE-2019-19781)
   * Scanner
   * RCE
* D-Link DIR-859 Unauthenticated Remote Command Execution (CVE-2019-17621)
* Barco WePresent file_transfer.cgi Command Injection (CVE-2019-3929)
* Plantronics Hub SpokesUpdateService Privilege Escalation (CVE-2019-15742)
* Reliable Datagram Sockets (RDS) rds_atomic_free_op NULL pointer dereference Privilege Escalation (CVE-2019-9213)
* OpenBSD Dynamic Loader chpass Privilege Escalation
* TVT NVMS-1000 Directory Traversal (CVE-2019-20085)
* Metasploit HTTP(S) handler DoS (CVE-2019-5645)

And includes demonstrations of the Plantronics Hub SpokesUpdateService privesc and D-Link Unauthenticated RCE, plus a demo of a recently landed PR for spoofing PPID on Windows targets.

And there's also a LOT of enhancements and bug fixes we cover, too!

And we're putting on our Metasploit Community CTF very soon, details here: https://blog.rapid7.com/2020/01/15/announcing-the-2020-metasploit-community-ctf/

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.