{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5842","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5842/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5842/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5842/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/5842","id":100864699,"number":5842,"title":"Add Watermark Master Fileformat Exploit","user":{"login":"jakxx","id":1746973,"avatar_url":"https://avatars.githubusercontent.com/u/1746973?v=3","gravatar_id":"","url":"https://api.github.com/users/jakxx","html_url":"https://github.com/jakxx","followers_url":"https://api.github.com/users/jakxx/followers","following_url":"https://api.github.com/users/jakxx/following{/other_user}","gists_url":"https://api.github.com/users/jakxx/gists{/gist_id}","starred_url":"https://api.github.com/users/jakxx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakxx/subscriptions","organizations_url":"https://api.github.com/users/jakxx/orgs","repos_url":"https://api.github.com/users/jakxx/repos","events_url":"https://api.github.com/users/jakxx/events{/privacy}","received_events_url":"https://api.github.com/users/jakxx/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":{"login":"FireFart","id":105281,"avatar_url":"https://avatars.githubusercontent.com/u/105281?v=3","gravatar_id":"","url":"https://api.github.com/users/FireFart","html_url":"https://github.com/FireFart","followers_url":"https://api.github.com/users/FireFart/followers","following_url":"https://api.github.com/users/FireFart/following{/other_user}","gists_url":"https://api.github.com/users/FireFart/gists{/gist_id}","starred_url":"https://api.github.com/users/FireFart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FireFart/subscriptions","organizations_url":"https://api.github.com/users/FireFart/orgs","repos_url":"https://api.github.com/users/FireFart/repos","events_url":"https://api.github.com/users/FireFart/events{/privacy}","received_events_url":"https://api.github.com/users/FireFart/received_events","type":"User","site_admin":false},"milestone":null,"comments":9,"created_at":"2015-08-13T20:46:42Z","updated_at":"2015-09-07T15:42:43Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/5842","html_url":"https://github.com/rapid7/metasploit-framework/pull/5842","diff_url":"https://github.com/rapid7/metasploit-framework/pull/5842.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/5842.patch"},"body":"PR to add Watermark Master Fileformat Buffer Overflow Exploit (SEH).\r\n\r\nExploit overwrites SEH chain to hit shellcode.\r\n\r\nCVE: 2013-6935\r\nVendor Homepage: http://www.videocharge.com\r\nOriginal Advisory: https://www.exploit-db.com/exploits/29327/\r\nInstaller: https://www.exploit-db.com/apps/17c031722e03c01f7108d7d23a8ae609-WatermarkMaster_Install.exe\r\nTested on: Windows 7 x32\r\nBonus points: The application runs as a mandatory high integrity process :)\r\n\r\nUsage:\r\nInstall target software\r\nRun module\r\nOpen generated .wcf file with File->Open\r\n\r\nConsole Output:\r\n```\r\nmsf > use exploit/watermark_master \r\nmsf exploit(watermark_master) > show options\r\n\r\nModule options (exploit/watermark_master):\r\n\r\n   Name      Current Setting  Required  Description\r\n   ----      ---------------  --------  -----------\r\n   FILENAME  msf.wcf          no        The file name.\r\n\r\n\r\nExploit target:\r\n\r\n   Id  Name\r\n   --  ----\r\n   0   Watermark Master 2.2.23\r\n\r\n\r\nmsf exploit(watermark_master) > set payload windows/exec\r\npayload => windows/exec\r\nmsf exploit(watermark_master) > set cmd mspaint.exe\r\ncmd => mspaint.exe\r\nmsf exploit(watermark_master) > exploit\r\n\r\n[*] Creating 'msf.wcf' file ...\r\n[+] msf.wcf stored at /root/.msf4/local/msf.wcf\r\nmsf exploit(watermark_master) > \r\n```"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/138327430","html_url":"https://github.com/rapid7/metasploit-framework/pull/5842#issuecomment-138327430","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5842","id":138327430,"user":{"login":"FireFart","id":105281,"avatar_url":"https://avatars.githubusercontent.com/u/105281?v=3","gravatar_id":"","url":"https://api.github.com/users/FireFart","html_url":"https://github.com/FireFart","followers_url":"https://api.github.com/users/FireFart/followers","following_url":"https://api.github.com/users/FireFart/following{/other_user}","gists_url":"https://api.github.com/users/FireFart/gists{/gist_id}","starred_url":"https://api.github.com/users/FireFart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FireFart/subscriptions","organizations_url":"https://api.github.com/users/FireFart/orgs","repos_url":"https://api.github.com/users/FireFart/repos","events_url":"https://api.github.com/users/FireFart/events{/privacy}","received_events_url":"https://api.github.com/users/FireFart/received_events","type":"User","site_admin":false},"created_at":"2015-09-07T15:42:43Z","updated_at":"2015-09-07T15:42:43Z","body":"@jakxx i just installed a fresh windows 7 SP1 x64 VM and still getting this error"}}