{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6990","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6990/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6990/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6990/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/6990","id":161009976,"number":6990,"title":"NetBIOS Name Spoofing Modules","user":{"login":"hdm","id":1171392,"avatar_url":"https://avatars.githubusercontent.com/u/1171392?v=3","gravatar_id":"","url":"https://api.github.com/users/hdm","html_url":"https://github.com/hdm","followers_url":"https://api.github.com/users/hdm/followers","following_url":"https://api.github.com/users/hdm/following{/other_user}","gists_url":"https://api.github.com/users/hdm/gists{/gist_id}","starred_url":"https://api.github.com/users/hdm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hdm/subscriptions","organizations_url":"https://api.github.com/users/hdm/orgs","repos_url":"https://api.github.com/users/hdm/repos","events_url":"https://api.github.com/users/hdm/events{/privacy}","received_events_url":"https://api.github.com/users/hdm/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":12,"created_at":"2016-06-18T06:29:59Z","updated_at":"2016-06-19T06:17:34Z","closed_at":"2016-06-19T06:17:34Z","pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/6990","html_url":"https://github.com/rapid7/metasploit-framework/pull/6990","diff_url":"https://github.com/rapid7/metasploit-framework/pull/6990.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/6990.patch"},"body":"This changeset adds a new module to exploit the BadTunnel vulnerability.\r\n\r\n- [ ] Start `msfconsole` on machine outside of a NAT gw from the target\r\n- [ ] `use auxiliary/server/netbios_badtunnel`\r\n- [ ] `set WPADHOST 1.2.3.4`\r\n- [ ] `set PPSRATE 30000`\r\n- [ ] `run`\r\n- [ ] On the victim machine: `dir \\\\ip.of.msfconsole\\share\\something`\r\n- [ ] Wait for the timeout\r\n- [ ] On the victim machine: `ping wpad`\r\n- [ ] Note that it resolves to 1.2.3.4\r\n- [ ] Merge this PR =)\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/226981681","html_url":"https://github.com/rapid7/metasploit-framework/pull/6990#issuecomment-226981681","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6990","id":226981681,"user":{"login":"hdm","id":1171392,"avatar_url":"https://avatars.githubusercontent.com/u/1171392?v=3","gravatar_id":"","url":"https://api.github.com/users/hdm","html_url":"https://github.com/hdm","followers_url":"https://api.github.com/users/hdm/followers","following_url":"https://api.github.com/users/hdm/following{/other_user}","gists_url":"https://api.github.com/users/hdm/gists{/gist_id}","starred_url":"https://api.github.com/users/hdm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hdm/subscriptions","organizations_url":"https://api.github.com/users/hdm/orgs","repos_url":"https://api.github.com/users/hdm/repos","events_url":"https://api.github.com/users/hdm/events{/privacy}","received_events_url":"https://api.github.com/users/hdm/received_events","type":"User","site_admin":false},"created_at":"2016-06-19T06:17:34Z","updated_at":"2016-06-19T06:17:34Z","body":"Confirmed by @tombkeeper, not the BadTunnel issue, and not patched in the recent update (design bug). Will merge with @vvalien's [work](https://github.com/vvalien/msf_modules/blob/master/nbns_brute.rb) and resubmit with the right title."}}
{"actor":{"display_login":"hdm"}}