Enumerate WinXP/7 MUICache registry key
Minor fix based on suggestions
EtherPAD Duo Login

I've run it through retab. Msfpro loads the module fine. msftidy seems broken though. Gives this on run:
msftidy.rb:444: undefined (?...) sequence: /(?<!\.)datastore\[["'][^"']+["']\]\s*=(?![=~>])/

BR
Rename ehterpadduo_login to ehterpadduo_login.rb
Rename ehterpadduo_login.rb to etherpadduo_login.rb
PocketPAD login
msftidy done
msftidy done
Adding module description

This module scans for EtherPAD Duo login portal, and performs a login brute force attack to identify valid credentials.
Adding module description

This module scans for PocketPAD login portal, and performs a login brute force attack to identify valid credentials.
Bumped ruby version to newest 1.9.3

Otherwise this message is always displayed when entering the folder
ruby-1.9.3-p484 is not installed.
To install do: 'rvm install ruby-1.9.3-p484'

And running up to date software is never a failure (even when
1.9.3 is no longer maintained)
Demote datastore edits to info status

SeeRM #8498
Add an environment option to suppress info msgs

It's often you want counts of just WARN and ERROR messages, and don't
want to spam yourself with INFO messages that you don't intend to
address anyway. This is most often the case with CI, such as with

https://travis-ci.org/todb-r7/metasploit-framework
OWA bruteforce shouldnt edit datastore (@wchen-r7)

This module was written in an era where the defaults for bruteforcing
included a lot of lock-inducing behavior, thus, it was quite serious
about setting datastore options directly. Also, there was apparently a
bug in USER_AS_PASS that this module attempted to avoid by setting the
datastore directly, rather than fixing the bug directly. As far as I
know, this bug has been long since resolved.
PHP module shouldnt zap CMD option (@wchen-r7)

As far as I can tell, there is no purpose for this cleanup. No other CMD
exec module takes pains to clear out CMD after run, and it looks like a
bad idea -- what happens when you rexploit?
Ora XID HTTP needn't edit DBUSER (@cellabosm)

Looks like copypasta artifacts. DBUSER and DBPASS aren't ever set as
options in the module, and the module doesn't include MC's
Exploit::ORACLE mixin. It's also from four years ago and doesn't
report_auth or anything useful like that, but that's out of scope for
this branch.
HTTP traversal shouldnt upcase METHOD (@wchen-r7)

If the user wants to use downcased or mixed case HTTP methods, heck,
more power to them. If it doesn't work, it doesn't work. No other HTTP
module makes this call.
Use normalize_uri (@wchen-r7)

Instead of editing the datastore['PATH'], use normalize_uri.

Since the purpose of this module is quite fuzz-like, I didn't want to
apply the normalize_uri to the whole uri -- the original code merely
applied to datastore['PATH'] (which seems like it should be
datastore['URI'] really) and then added on a bunch of other stuff to
test for traversals.
Warn if it's not UPPERCASE method (@wchen-r7)

See the discussion on f7bfab5a26, PR #3386
Improve reliability of have_powershell

I have a case where on a Windows 2008 R2 host with PowerShell 2.0 the 'have_powershell' method times out.  When I interactively run the command I find that the output stops after the PowerShell command and the token from 'cmd_exec' is NOT displayed.  When I hit return the shell then processes the '&echo <randomstring>' and generates the token that 'cmd_exec' was looking for.  I tried various versions of the PowerShell command string such as 'Get-Host;Exit(0)', '$PSVErsionTable.PSVersion', and '-Command Get-Host' but was unable to change the behavior.  I found that adding 'echo. | ' simulated pressing enter and did not disrupt the results on this host or on another host where the 'have_powershell' method functioned as expected.

There may be a better solution, but this was the only one that I could find.