Metasploit Demo Meeting 2021-05-04

preview_player
Показать описание
The Rapid7 Metasploit development team discusses (and demonstrates!) ongoing Metasploit work and features during their bimonthly sprint meeting, including the following NEW modules:

* Nagios XI 5.6.0-5.7.3 RCE (CVE-2020-5791)
* Nagios XI 5.5.0-5.7.3 RCE (CVE-2020-5792)
* Cockpit CMS NoSQLi to RCE (CVE-2020-35846)
* Redis Extractor
* Apache Druid 0.20.0 RCE (CVE-2021-25646)
* VMware vRealize Operations (vROps) Manager SSRF RCE (CVE-2021-21983)
* Micro Focus Operations Bridge Reporter default password (ZDI-20-1215, CVE-2020-11857)
* KOFFEE - Kia OFFensivE Exploit (CVE-2020-8539)

Included in this recording, the team demonstrates the new Druid, vRealize, and Nagios modules (also includes a demo of the Gitea and Gogs RCE modules), as well as some nice fixes and enhancements. Plus an AttackerKB update!

  1. Metasploit
  2. metasploit
  3. rapid7
  4. security
  5. msf
Рекомендации по теме
Metasploit Demo Meeting 0:28:16

Metasploit Demo Meeting 2021-05-04

Metasploit Demo Meeting 0:18:31

Metasploit Demo Meeting 2021-05-18

Metasploit Demo Meeting 0:22:56

Metasploit Demo Meeting 2021-04-20

Metasploit Demo Meeting 0:15:37

Metasploit Demo Meeting 2021-02-09

Metasploit Demo Meeting 0:34:37

Metasploit Demo Meeting 2020-05-19

Metasploit Demo Meeting 0:24:02

Metasploit Demo Meeting 2019-10-22

Metasploit Demo Meeting 0:27:28

Metasploit Demo Meeting 2020-06-16

Metasploit Demo Meeting 0:29:27

Metasploit Demo Meeting 2020-11-03

Metasploit Module for 0:01:31

Metasploit Module for Nagios XI CVE-2021-37343

TianFu Cup 2019 0:00:16

TianFu Cup 2019 Adobe Reader Exploitation (CVE-2019-16452) - Faking JSObject's element buffer

Exploit the Chat 0:04:09

Exploit the Chat Bot on Metasploitable3

jeefo - Metasploit 2:48:33

jeefo - Metasploit анхан шатны эхний коммандууд

Metasploitable3 Demo at 0:07:02

Metasploitable3 Demo at BSides Austin

Attack & Detect: 1:25:24

Attack & Detect: Raven2 vs Security Onion . Can we detect the attack traffic?

06 - BruCON 0:47:38

06 - BruCON 0x0D - Visibility beyond perimeters: Detecting C2 at time of execution - Nate Warfield

HG - Penetration 0:43:42

HG - Penetration Testing Experience and How to Get It

Introduction to Docker 1:03:14

Introduction to Docker for security work | SANS@MIC Talk

Team Viewer CVE-2019-18988 0:01:01

Team Viewer CVE-2019-18988

12-04-2021 The Story 0:47:50

12-04-2021 The Story behind CVE-2021-34743 by Global4G

Cyber Threat Hunting: 1:06:32

Cyber Threat Hunting: Identify and Hunt Down Intruders w/ Filipi Pires

Philly ETE 2016 1:04:16

Philly ETE 2016 #46 - Security Vulnerabilities in Third Party Code: FIX ALL THE THINGS! - K. Price

SOC Analyst Tools: 0:54:44

SOC Analyst Tools: Part 2

Beginners Threat Modeling 0:56:02

Beginners Threat Modeling

Give Me a 0:36:20

Give Me a SQL Injection, I Shall PWN IIS and SQL Server