{"push_id":611925438,"size":246,"distinct_size":6,"ref":"refs/heads/bug/4340-racing-msfconsole-x","head":"452d8cba8c67320837500a2ec7775b69aefdb104","before":"40586980863414965983b39c590bc8f69507dc76","commits":[{"sha":"b634bde8a1fd98efe45a7175eae6e1ce7587e837","author":{"email":"abd857202f27a5c4cd64d9d708f8827f90162841@hotmail.co.uk","name":"Meatballs"},"message":"Lateral movement through PSRemoting","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/b634bde8a1fd98efe45a7175eae6e1ce7587e837"},{"sha":"831ba8b470eddfe0b27060f394f66535e991635b","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Improve (mis)Fortune Cookie (CVE-2014-9222) scanner","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/831ba8b470eddfe0b27060f394f66535e991635b"},{"sha":"b1ca1cc110b094cc66e47d558bfa8cec0c787a82","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Add back TARGETURI because Exploit::Remote::HttpClient doesn't define one (...)","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/b1ca1cc110b094cc66e47d558bfa8cec0c787a82"},{"sha":"9491e4c9775d815b9c5f21491fcbadbb39a29434","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Use send_request_raw; set realistic (and often necessary) Referer","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/9491e4c9775d815b9c5f21491fcbadbb39a29434"},{"sha":"d4843f46ede07b34ec8f52b5fbbb1ba6eba26bb1","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Make auth checking optional and off by default","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/d4843f46ede07b34ec8f52b5fbbb1ba6eba26bb1"},{"sha":"9e76e0b0d8c14ec55ebd24f2929fe8fc4d2c7522","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Simplify.  Document.  Handle edge cases\n\nSimplify detection logic.\n\nDocument testing method better\n\nEnsure that body doesn't include canary cookie name too\n\nUse full_uri in prints when possible","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/9e76e0b0d8c14ec55ebd24f2929fe8fc4d2c7522"},{"sha":"766a07a904cad617eaba6554f57ee7a1f4f05647","author":{"email":"7d5328b16dd9623c2bfb1b242f3248cf3a81923a@gmail.com","name":"jstnkndy"},"message":"Add CVE-2015-0975 XXE for OpenNMS <= 14.0.2","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/766a07a904cad617eaba6554f57ee7a1f4f05647"},{"sha":"1f6defda73421da657429f796da75c40e12f4f55","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Use more correct check codes","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/1f6defda73421da657429f796da75c40e12f4f55"},{"sha":"4641b0264629f343fb1c1a9ce96ec04832495239","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Base canary path from TARGET_URI","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/4641b0264629f343fb1c1a9ce96ec04832495239"},{"sha":"3489ea540ec4cd2aaec5a63cc5fb56f0ba5a93a1","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Make status code checking configurable","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/3489ea540ec4cd2aaec5a63cc5fb56f0ba5a93a1"},{"sha":"2dca18265ee4258c4b4bd75794f130fa65dc3111","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Track and vprint canary value and code","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/2dca18265ee4258c4b4bd75794f130fa65dc3111"},{"sha":"d68b62cf21ee349246cd96340d18543d7736fa87","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Make canary value (URI) configurable","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/d68b62cf21ee349246cd96340d18543d7736fa87"},{"sha":"14fc8d4cd02aeb1de7248f4b284fac1671033f7b","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Only allow 401/403/404","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/14fc8d4cd02aeb1de7248f4b284fac1671033f7b"},{"sha":"a5e14d586934be7601496249ba1eb95c03fae226","author":{"email":"07ee4be5720abe19445bef3036fd75b0a35e7f7e@rapid7.com","name":"Jon Hart"},"message":"Use checkcode status text when not obviously vulnerable, more consistent text","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/a5e14d586934be7601496249ba1eb95c03fae226"},{"sha":"44a7e7e4bccd2edef068bde1f00d099f00fe867f","author":{"email":"0ad4dde1d893b364261917a8546a2c3be304e5f9@gmail.com","name":"jakxx"},"message":"publish-it fileformat exploit","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/44a7e7e4bccd2edef068bde1f00d099f00fe867f"},{"sha":"615d71de6e80bf36ce1e3f138b35b1293e2bfa64","author":{"email":"d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","name":"HD Moore"},"message":"Remove extraneous calls to GC.start()","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/615d71de6e80bf36ce1e3f138b35b1293e2bfa64"},{"sha":"bdd52765244fda66556191630d07928308c1d2d9","author":{"email":"d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","name":"HD Moore"},"message":"This fixes a number of issues with the Capture mixin\n\n * The use of www.metasploit.com in a datastore option results in a DNS lookup (infoleak). Switch to 8.8.8.8 (TTL=1)\n * The hackey code around #each_packet is no longer necessary in newer Ruby versions\n * The arp()/probe_gateway() calls to inject_reply() had broken logic leading to early exit and missed replies\n * The arp() function now tries up to three times to get a reply (helpful with lossy L2)\n * GC.start is extraneous and should be removed\n * Increased timeouts","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/bdd52765244fda66556191630d07928308c1d2d9"},{"sha":"9730a1655e37ea410ce9cd53ea2238a01128205c","author":{"email":"d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","name":"HD Moore"},"message":"Small cleanups to the LLMR responder module","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/9730a1655e37ea410ce9cd53ea2238a01128205c"},{"sha":"1b1716bcf63957e48eaaf16a97a8b5aa2b30bfa3","author":{"email":"d4a529376a6eb9ddb8539def18d9673ca1eba14b@rapid7.com","name":"HD Moore"},"message":"Fix a handful of bugs that broke this modules. Fixes #4799","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/1b1716bcf63957e48eaaf16a97a8b5aa2b30bfa3"},{"sha":"242d3b86808a2cc1af200791c4a3094d166a6a5f","author":{"email":"7e09c9d3e96378bf549fc283fd6e1e5b7014cc33@rastating.com","name":"rastating"},"message":"Add WP EasyCart privilege escalation module","distinct":false,"url":"https://api.github.com/repos/todb-r7/metasploit-framework/commits/242d3b86808a2cc1af200791c4a3094d166a6a5f"}]}