Metasploit Demo Meeting 2019-07-02
Channel: Metasploit
Date: 2019-07-02

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting.

This week's demo meeting covers the following new modules:

* Nagios XI Magpie_debug.php Root RCE (CVE-2018-15708, CVE-2018-15710)
* Webmin Package Updates RCE (CVE-2019-12840)
* Windows Escalate UAC Protection Bypass (Via SilentCleanup)
* Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability (to RCE!) (CVE-2019-1821)
* Cisco Prime Infrastructure Runrshell Privilege Escalation
* Amazon Web Services EC2 instance enumeration
* Amazon Web Services S3 instance enumeration
* Amazon Web Services IAM credential enumeration
* Extract ZIP from Modbus communication

And there's also a number of enhancements and bug fixes we cover, too!

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.