Metasploit Demo Meeting 2019-11-05
Channel: Metasploit
Date: 2019-11-05

The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* Total.js CMS 12 Widget JavaScript Code Injection (CVE-2019-15954)
* Nostromo Directory Traversal into Remote Command Execution (CVE-2019-16278)
* Privilege Escalations!
   * Microsoft Exchange (CVE-2019-0724)
   * Xorg X11 Server SUID modulepath (CVE-2018-14665)
   * Solaris xscreensaver log (CVE-2019-3010)
   * Linux 'ptrace_traceme_root' (CVE-2019-13272)
* ThinVNC Directory Traversal (CVE-2019-17662)
* URGENT/11 Scanner (CVE-2019-12258)
* Grub Password Gatherer

And includes demonstrations of two of the above Exchange and xscreensaver modules!

And there's also a number of enhancements and bug fixes we cover, too!

See all the latest modules, PRs, Metasploit blogs, and contributors at https://metasploit.com.