{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4873","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4873/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4873/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4873/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/4873","id":59753906,"number":4873,"title":"Fixed rc4 block decoding.","user":{"login":"enioh","id":11307742,"avatar_url":"https://avatars.githubusercontent.com/u/11307742?v=3","gravatar_id":"","url":"https://api.github.com/users/enioh","html_url":"https://github.com/enioh","followers_url":"https://api.github.com/users/enioh/followers","following_url":"https://api.github.com/users/enioh/following{/other_user}","gists_url":"https://api.github.com/users/enioh/gists{/gist_id}","starred_url":"https://api.github.com/users/enioh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/enioh/subscriptions","organizations_url":"https://api.github.com/users/enioh/orgs","repos_url":"https://api.github.com/users/enioh/repos","events_url":"https://api.github.com/users/enioh/events{/privacy}","received_events_url":"https://api.github.com/users/enioh/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/bug","name":"bug","color":"e11d21"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/library","name":"library","color":"fad8c7"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/payload","name":"payload","color":"eb6420"}],"state":"open","locked":false,"assignee":{"login":"hmoore-r7","id":1171392,"avatar_url":"https://avatars.githubusercontent.com/u/1171392?v=3","gravatar_id":"","url":"https://api.github.com/users/hmoore-r7","html_url":"https://github.com/hmoore-r7","followers_url":"https://api.github.com/users/hmoore-r7/followers","following_url":"https://api.github.com/users/hmoore-r7/following{/other_user}","gists_url":"https://api.github.com/users/hmoore-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/hmoore-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hmoore-r7/subscriptions","organizations_url":"https://api.github.com/users/hmoore-r7/orgs","repos_url":"https://api.github.com/users/hmoore-r7/repos","events_url":"https://api.github.com/users/hmoore-r7/events{/privacy}","received_events_url":"https://api.github.com/users/hmoore-r7/received_events","type":"User","site_admin":false},"milestone":null,"comments":31,"created_at":"2015-03-04T05:59:05Z","updated_at":"2015-03-18T21:14:02Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4873","html_url":"https://github.com/rapid7/metasploit-framework/pull/4873","diff_url":"https://github.com/rapid7/metasploit-framework/pull/4873.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/4873.patch"},"body":"ESP was not incremented so that the shellcode was overwriting itself, failing to execute later stage.\r\n\r\nFixing #4867"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/83180237","html_url":"https://github.com/rapid7/metasploit-framework/pull/4873#issuecomment-83180237","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4873","id":83180237,"user":{"login":"schierlm","id":1568931,"avatar_url":"https://avatars.githubusercontent.com/u/1568931?v=3","gravatar_id":"","url":"https://api.github.com/users/schierlm","html_url":"https://github.com/schierlm","followers_url":"https://api.github.com/users/schierlm/followers","following_url":"https://api.github.com/users/schierlm/following{/other_user}","gists_url":"https://api.github.com/users/schierlm/gists{/gist_id}","starred_url":"https://api.github.com/users/schierlm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/schierlm/subscriptions","organizations_url":"https://api.github.com/users/schierlm/orgs","repos_url":"https://api.github.com/users/schierlm/repos","events_url":"https://api.github.com/users/schierlm/events{/privacy}","received_events_url":"https://api.github.com/users/schierlm/received_events","type":"User","site_admin":false},"created_at":"2015-03-18T21:14:02Z","updated_at":"2015-03-18T21:14:02Z","body":"@Meatballs1 as some \"security products\" expect TLS handshake only at the beginning of the connection or after some plaintext (like SMTP STARTTLS) but as soon as there has been undecodable binary garbage, they don't try to find a TLS handshake hidden in the middle of a stream.\r\n[Of course no TLS handshake at all would be better, but that probably would require some way of passing the key to Meterpreter and having it use some symmetric algorithm for the encryption as well]"}}