Metasploit Demo Meeting 2019-09-24
Channel: Metasploit
Date: 2019-09-24

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting.

This week's demo meeting covers the following NEW modules:

* LibreNMS Collectd Command Injection (CVE-2019-10669)
* Generic Zip Slip Traversal Vulnerability
* October CMS Upload Protection Bypass Code Execution (CVE-2017-1000119)
* Windows 10 UAC Protection Bypass Via Windows Store (WSReset.exe)
* Windows 10 UAC Protection Bypass Via Windows Store (WSReset.exe) and Registry
* OpenEMR 5.0.1 Patch 6 SQLi Dump (CVE-2018-17179)
* Applocker Evasion - Microsoft Workflow Compiler
* Applocker Evasion - Windows Presentation Foundation Host
* Applocker Evasion - Microsoft .NET Assembly Registration Utility

And there's also a number of enhancements and bug fixes we cover, too!

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.