rapid7/metasploit-framework — pull request #3034 by kn0 (2014-02-24 22:18:30+00:00)
Title: Added 301 Redirect option to Basic Auth module

This change adds an optional RedirectURL option to the auxiliary/server/capture/http_basic module. When set, this option causes the server to send a 302 redirect to the connecting client once they have provided basic auth credentials. This is useful when a tester/attacker wants to redirect users to a legitimate site (to reduce suspicion) or to another attack site (e.g. browser_autopwn).

Notes:
* The module output was changed to include the IP of the connecting client. This (IMHO) makes the output more readable. Requiring that the *VERBOSE* option be set to *true* before outputting anything but the *print_good* on line 76 may further help readability.
* This change was tested using a Firefox 27.0.1 and Chrome 32.0 on a Linux host and Firefox 27.0.1 and IE 10.0.9200.16798 using a Windows host.
* Msftidy did not return any output when given the updated module.