Metasploit Demo Meeting 2019-09-10 w/ BlueKeep Demo
Channel: Metasploit
Date: 2019-09-11

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting.

This week's demo meeting covers the following NEW modules:

* Cisco UCS Director
  * Unauthenticated Remote Code Execution (CVE-2019-1936)
  * default scpuser password (CVE-2019-1935)
* Cisco Data Center Network Manager
  * Unauthenticated Remote Code Execution (CVE-2019-1620)
  * Unauthenticated File Download (CVE-2019-1621)
* AwindInc SNMP Service Command Injection (CVE-2017-16709)
* Webmin password_change.cgi Backdoor RCE (CVE-2019-15107)
* Exim Local Privilege Escalation (CVE-2019-10149)
* ptrace Sudo Token Privilege Escalation
* ktsuss suid Privilege Escalation (CVE-2011-2921)

And there's also a number of enhancements and bug fixes we cover, too!

And there's a demo of the new BlueKeep module currently in the Framework PR queue!

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.