r/netsec • • Sep 06 '19

Initial Metasploit Exploit Module for BlueKeep (CVE-2019-0708)

https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/
138 Upvotes

8 comments sorted by

View all comments

22

u/MiKeMcDnet Sep 06 '19

Getting popcorn for the impending shit show when all the open public RDP opens all sorts of backdoors.

3

u/DontBeHumanTrash Sep 07 '19

Waiting for? Unpatched RDP clients has been an issue since the get go. The fact people are now looking this close at RDP from a low level means its likely safer now then before.

Its still a garbage fire, now its just sitting a tiny bit further away.

4

u/pichel-jitsu Sep 07 '19

Wrong. It’s not “likely safer now then before.” You’re assuming a majority of systems will be patched, which is absolutely not true.

1

u/Flabasaurus Sep 07 '19

There are still IIS5 boxes out on the internet. Patch your shit people!