Metasploit Demo Meeting 2020-02-11
Channel: Metasploit
Date: 12/02/2020

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* D-Link Devices Unauthenticated Remote Command Execution (CVE-2019-20215)
* RDP DOUBLEPULSAR Remote Code Execution
* Windscribe WindscribeService Named Pipe Privilege Escalation (CVE-2018-11479)
* Install OpenSSH for Windows

Also included in this recording are demonstrations of the RDP DOUBLEPULSAR RCE and Windscribe WindscribeService Named Pipe privesc modules, plus a demo of a recently landed PR for gathering TeamViewer credentials (CVE-2019-18988) via post module and another demo of fixes/updates to the MS16-032 Secondary Logon Handle privesc module.  Good stuff!

And there's also a number of enhancements and a couple of bug fixes we cover, too!

We also wrapped up our Metasploit Community CTF last week, detailed writeup on the results can be found on https://blog.rapid7.com/...

Additionally, we announced Beta sign-ups for a new web app we've been building called AttackerKB (Attacker Knowledge Base!).  AttackerKB is a new resource to highlight hacker community knowledge on which vulns matter most — and why!  You can find a recent write-up containing details and Beta sign up information at https://blog.rapid7.com/.

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.