Metasploit Demo Meeting 2021-03-23
Channel: Metasploit
Date: 2021-03-23

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* VMware vCenter Server Unauthenticated OVA File Upload RCE (CVE-2021-21972)
* HPE Systems Insight Manager AMF Deserialization RCE (ZDI-20-1449, CVE-2020-7200)
* Microsoft Windows RRAS Service MIBEntryGet Overflow (CVE-2017-8461)
* Windows Server 2012 SrClient DLL hijacking

Included in this recording, the team demonstrates the new vCenter Server Unauthenticated OVA File Upload RCE and SrClient DLL hijacking modules (you can see a demo of the HPE SIM Unauthenticated AMF Deserialization code execution module in our previous recording!), as well as some nice fixes and enhancements.  Also includes an AttackerKB update!

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com​.