No longer pending
Move most of the configuration into ClientRequest

Also fixes in-place modification of the query string which resulted in
duplication of the GET parameters when calling #to_s more than once.
Hmm, turns out something actually used that

Despite comments to the contrary
Fixed the importing of NBE files
Merge branch 'stephenfewer-master'
Merge branch 'master' into setstringproperty_spray
Merge branch 'master' into setstringproperty_spray
Merge branch 'rapid7' into dmaloney-r7-feature/http/authv2
Improved version thanks to corelanc0d3r
Correct allocation size for IE10
Documentation
Added CVE-2012-2686

Added Module for a DoS issue in OpenSSL (pre 1.0.1d). Can be exploited
with services that use TLS >= 1.1 and AES-NI. Because of improper
length computation, an integer underflow occurs leading to a
segmentation fault. This module brute-forces serveral encrypted
messages - when the decrypted message coincidentally specifies a
certain value for the size, the integer underflow occurs. Though this
could be accomplished more effectively (e.g. implementing or
maninpulating and TLS implementation), this module still does what it
should do.
More accurate docs
Re-enable some commented tests
Refactor config -> opts

Puts all the evasion stuff in the same place as regular HTTP options to
make it easier to deal with.
Msf HTTP uses this directly, can't axe it
Add test for pad_get_params
Axe set_cgi in favor of set_uri

They were identical except for a couple of extra bugs in set_cgi.

Also changes ```split("/")``` to ```split("/", -1)```, which behaves
correctly when the input has a seperator at the beginning or end.
This commit adds DNS resolution to rev_tcp_rc4

Due to the modular structure of payload stages its pretty trivial
to add DNS resolution instead of hard-coded IP address in stage0.

The only real complication here is that ReverseConnectRetries ends
up being one byte further down than in the original shellcode. It
appears that the original rev_tcp_dns payload suffers from the same
issue.

Hostname substitution is handled in the same method as the RC4 and
XOR keys, with an offset provided and replace_vars ignoring the
hostname.

Tested in x86 native and WOW64 on XP and 2k8r2 respectively.

This is a good option for those of us needing to leave persistent
binaries/payloads on hosts for long periods. Even if the hostname
resolves to a malicious party attempting to steal our hard earned
session, they'd be hard pressed to crypt the payload with the
appropriate RC4 pass. So long as we control the NS and records, the
hardenned shellcode should provide a better night's sleep if running
shells over the WAN. Changing the RC4 password string in the
shellcode and build.py should reduce the chances of recovery by RE.

Next step will likely be to start generating elipses for ECDH SSL
in meterpreter sessions and passing them with stage2 through the
RC4 socket. If P is 768-1024 the process is relatively quick, but
we may want to precompute a few defaults as well to have 2048+.
Beef up the default values for precise alloc size and consistency