Merge pull request #8 from rapid7/master

bla
Create exploit for CVE-2014-8499
Rename manageengine_pmp_sadmin.rb to manageengine_pmp_privesc.rb
Add github adv URL
Add full disclosure URL
Change title
Redefine RPORT having into account it is builtin
Use target_uri
Favor && over and
Check res.body before accessing #to_s
Fix indentation
Fail with NoAccess
do run clean up

* Reduce code complexity
* Don't report not valid administrator credentials
Create report_super_admin_creds method
Create loot_passwords method
Do print_status
Fix banner
Merge pull request #9 from jvazquez-r7/review_4155

Clean exploit for CVE-2014-8499 - PMP privesc + password disclosure
Differentiate failed binds from connects, closes #4169

This change adds two new Rex exceptions and changes the local comm to raise the right one depending on the circumstances. The problem with the existing model is
that failed binds and failed connections both raised the same exception. This change is backwards compatible with modules that rescue Rex::AddressInUse in additi
on to Rex::ConnectionError. There were two corner cases that rescued Rex::AddressInUse specifically:

1. The 'r'-services mixin and modules caught the old exception when handling bind errors. These have been updated to use BindFailed
2. The meterpreter client had a catch for the old exception when the socket reports a bad destination (usually a network connection dropped). This has been updat
ed to use InvalidDestination as that was the intention prior to this change.

Since AddressInUse was part of ConnectionError, modules and mixins which caught both in the same rescue have been updated to just catch ConnectionError.
Clean up failure messaging when bad CHOST