Give auth_brute ability to try credentials stored in db

Added two options:
DB_USER_PASS: this will try each user/pass couple stored in the db
DB_ADD_ALL: this will add each user and password to the lists.
By setting this to true, auth_brute will try every user with
every known password.
Fixed issue downloading XML reports

The XML report has an extra </report> tag which prevents the .text
method from working properly. I used the .to_s method instead.

I also moved the rescue statement because it was masking other errors
that were being raised.
Handle single quotes for OpenVAS import
Merge pull request #1 from todb-r7/bug/pr1736-fix-db-import

Handle single quotes for OpenVAS import
Fixed issue downloading XML reports

The XML report has an extra </report> tag which prevents the .text
method from working properly. I used the .to_s method instead.

I also moved the rescue statement because it was masking other errors
that were being raised.
Handle single quotes for OpenVAS import
Merge branch 'master' of https://github.com/averagesecurityguy/metasploit-framework
Fixed issue downloading XML reports

The XML report has an extra </report> tag which prevents the .text
method from working properly. I used the .to_s method instead.

I also moved the rescue statement because it was masking other errors
that were being raised.
Handle single quotes for OpenVAS import
Merge branch 'master' of https://github.com/averagesecurityguy/metasploit-framework
Keep better track of resources

[See #1623]
[SeeRM #7692]
Move deletion into #remove_resource

Doing it here means that modules manually calling remove_resource won't
screw up the cleanup
Add a method for dealing with hardcoded URIs
No need to have rescue around a print
Add spec for HttpServer#hardcoded_uripath
Removed options DB_ADD_ALL. Added options DB_ALL_PASS and DB_ALL_USERS
to add already known user and passwords to the lists.
Add a class for generating random identifiers

Will be useful for all kinds of things, but brought about in discussions
specifically for Util::EXE in #2037.
Make first char's character class configurable
dlink upnp command injection
Store inverted hash for better lookups

Also clarifies comment about infinite loops