Add Android cookie theft attack.
Use the hash to pass the script.
Add patch discovery date.
Fix #4431 - Support arbitrary session response timeout

Fix #4431
Rescue rescue Rex::TimeoutError so the iteration can keep going
Restore original timeout
Add hint for exploit on old devices.
Fix msftidy warnings
Use get_uri instead, note lack of Rex::Text method

See rapid7#4461
Merge pull request #16 from todb-r7/fixup-4461

Fixup #4461, Android sqllite theft bug
Add Rafay's blog as a reference
Land #4461, Android cookie database theft
`
Thanks @jvennix-r7!
fix backward meterpreter packet timeout logic

The current logic times out every packet almost immediately, making it possible
for almost any non-trivial meterpreter session to receive duplicate packets.

This causes problems especially with any interactions that involve passing
resource handles or pointers back and forth between MSF and meterpreter, since
meterpreter can be told to operate on freed pointers, double-closes, etc.

This probably fixes tons of heisenbugs, including #3798.

To reproduce this, I enabled all debug messages in meterpreter to slow it
down, then ran this RC script with a reverse TCP meterpreter, after linking in
the test modules:

(cd modules/post
 ln -s ../../test/modules/post/test)

die.rc:
use exploit/multi/handler
set payload windows/meterpreter/reverse_tcp
set lhost 192.168.43.1
exploit -j
sleep 5
use post/test/services
set SESSION 1
run
Land #4475, inverted timeout fix
Land #4442, wchen-r7's configurable session response timeout option

fixes #4431