{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7732","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7732/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7732/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7732/events","html_url":"https://github.com/rapid7/metasploit-framework/issues/7732","id":196786267,"number":7732,"title":"Default option for FILEPATH is misleading for module hp_imc_reportimgservlt_traversal","user":{"login":"jinq102030","id":20934902,"avatar_url":"https://avatars.githubusercontent.com/u/20934902?v=3","gravatar_id":"","url":"https://api.github.com/users/jinq102030","html_url":"https://github.com/jinq102030","followers_url":"https://api.github.com/users/jinq102030/followers","following_url":"https://api.github.com/users/jinq102030/following{/other_user}","gists_url":"https://api.github.com/users/jinq102030/gists{/gist_id}","starred_url":"https://api.github.com/users/jinq102030/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jinq102030/subscriptions","organizations_url":"https://api.github.com/users/jinq102030/orgs","repos_url":"https://api.github.com/users/jinq102030/repos","events_url":"https://api.github.com/users/jinq102030/events{/privacy}","received_events_url":"https://api.github.com/users/jinq102030/received_events","type":"User","site_admin":false},"labels":[{"id":124421898,"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/bug","name":"bug","color":"e11d21","default":true},{"id":103436014,"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-12-20T21:31:22Z","updated_at":"2016-12-21T15:38:43Z","closed_at":null,"body":"## Steps to reproduce\r\n\r\nDefault option for module \"auxiliary/scanner/http/hp_imc_reportimgservlt_traversal\":  FILEPATH ==> \r\n\"/windows\\win.ini\" but the this module expect the http response Content-Type to be an image\r\n\r\n```\r\nmsf auxiliary(hp_imc_reportimgservlt_traversal) > show options\r\n\r\nModule options (auxiliary/scanner/http/hp_imc_reportimgservlt_traversal):\r\n\r\n   Name       Current Setting   Required  Description\r\n   ----       ---------------   --------  -----------\r\n   DEPTH      4                 yes       Traversal depth\r\n   FILEPATH   /windows\\win.ini  yes       The name of the file to download\r\n   Proxies                      no        A proxy chain of format type:host:port[,type:host:port][...]\r\n   RHOSTS     127.0.0.1         yes       The target address range or CIDR identifier\r\n   RPORT      8080              yes       The target port\r\n   SSL        false             no        Negotiate SSL/TLS for outgoing connections\r\n   TARGETURI  /imc              yes       Path to HP Intelligent Management Center\r\n   THREADS    1                 yes       The number of concurrent threads\r\n   VHOST                        no        HTTP server virtual host\r\n```\r\n\r\nThe default FILEPATH should not be an ini file. \r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/268553516","html_url":"https://github.com/rapid7/metasploit-framework/issues/7732#issuecomment-268553516","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7732","id":268553516,"user":{"login":"jinq102030","id":20934902,"avatar_url":"https://avatars.githubusercontent.com/u/20934902?v=3","gravatar_id":"","url":"https://api.github.com/users/jinq102030","html_url":"https://github.com/jinq102030","followers_url":"https://api.github.com/users/jinq102030/followers","following_url":"https://api.github.com/users/jinq102030/following{/other_user}","gists_url":"https://api.github.com/users/jinq102030/gists{/gist_id}","starred_url":"https://api.github.com/users/jinq102030/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jinq102030/subscriptions","organizations_url":"https://api.github.com/users/jinq102030/orgs","repos_url":"https://api.github.com/users/jinq102030/repos","events_url":"https://api.github.com/users/jinq102030/events{/privacy}","received_events_url":"https://api.github.com/users/jinq102030/received_events","type":"User","site_admin":false},"created_at":"2016-12-21T15:38:43Z","updated_at":"2016-12-21T15:38:43Z","body":"@h00die, thanks for the link, but it's not available as of now.\r\n\r\n@wvu-r7 This will mean the default will not work when the win.ini is served, the content-type will not be ```image/png```.  Maybe remove the check on content-type is the way to go? "}}
{"actor":{"display_login":"jinq102030"}}