{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/10067","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/10067/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/10067/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/10067/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/10067","id":324643381,"node_id":"MDExOlB1bGxSZXF1ZXN0MTg5MTk2NTA3","number":10067,"title":"Add - Badodt - CVE-2018-10583","user":{"login":"rmdavy","id":29480277,"node_id":"MDQ6VXNlcjI5NDgwMjc3","avatar_url":"https://avatars1.githubusercontent.com/u/29480277?v=4","gravatar_id":"","url":"https://api.github.com/users/rmdavy","html_url":"https://github.com/rmdavy","followers_url":"https://api.github.com/users/rmdavy/followers","following_url":"https://api.github.com/users/rmdavy/following{/other_user}","gists_url":"https://api.github.com/users/rmdavy/gists{/gist_id}","starred_url":"https://api.github.com/users/rmdavy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rmdavy/subscriptions","organizations_url":"https://api.github.com/users/rmdavy/orgs","repos_url":"https://api.github.com/users/rmdavy/repos","events_url":"https://api.github.com/users/rmdavy/events{/privacy}","received_events_url":"https://api.github.com/users/rmdavy/received_events","type":"User","site_admin":false},"labels":[{"id":103436014,"node_id":"MDU6TGFiZWwxMDM0MzYwMTQ=","url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420","default":false},{"id":466360142,"node_id":"MDU6TGFiZWw0NjYzNjAxNDI=","url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/needs-docs","name":"needs-docs","color":"bfd4f2","default":false}],"state":"open","locked":false,"assignee":{"login":"asoto-r7","id":35073726,"node_id":"MDQ6VXNlcjM1MDczNzI2","avatar_url":"https://avatars1.githubusercontent.com/u/35073726?v=4","gravatar_id":"","url":"https://api.github.com/users/asoto-r7","html_url":"https://github.com/asoto-r7","followers_url":"https://api.github.com/users/asoto-r7/followers","following_url":"https://api.github.com/users/asoto-r7/following{/other_user}","gists_url":"https://api.github.com/users/asoto-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/asoto-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asoto-r7/subscriptions","organizations_url":"https://api.github.com/users/asoto-r7/orgs","repos_url":"https://api.github.com/users/asoto-r7/repos","events_url":"https://api.github.com/users/asoto-r7/events{/privacy}","received_events_url":"https://api.github.com/users/asoto-r7/received_events","type":"User","site_admin":false},"assignees":[{"login":"asoto-r7","id":35073726,"node_id":"MDQ6VXNlcjM1MDczNzI2","avatar_url":"https://avatars1.githubusercontent.com/u/35073726?v=4","gravatar_id":"","url":"https://api.github.com/users/asoto-r7","html_url":"https://github.com/asoto-r7","followers_url":"https://api.github.com/users/asoto-r7/followers","following_url":"https://api.github.com/users/asoto-r7/following{/other_user}","gists_url":"https://api.github.com/users/asoto-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/asoto-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asoto-r7/subscriptions","organizations_url":"https://api.github.com/users/asoto-r7/orgs","repos_url":"https://api.github.com/users/asoto-r7/repos","events_url":"https://api.github.com/users/asoto-r7/events{/privacy}","received_events_url":"https://api.github.com/users/asoto-r7/received_events","type":"User","site_admin":false}],"milestone":null,"comments":6,"created_at":"2018-05-19T16:50:58Z","updated_at":"2018-05-30T18:56:21Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/10067","html_url":"https://github.com/rapid7/metasploit-framework/pull/10067","diff_url":"https://github.com/rapid7/metasploit-framework/pull/10067.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/10067.patch"},"body":"CVE-2018-10583 \r\n\r\nBADODT is a module that create an odt file which contains a UNC link pointing back to a listening server. This technique can be used to gather NetNTLM hashes if used in conjunction with other tools such as Responder or the auxiliary/server/capture/smb module.\r\n\r\n- [x] Start `msfconsole`\r\n- [x] `use auxiliary/odt/badodt`\r\n- [x] set CREATOR documentcreator\r\n- [x] set FILENAME desiredfilename\r\n- [x] set LISTENER iphere\r\n\r\n![badodt_metasploit](https://user-images.githubusercontent.com/29480277/40270827-e4788aba-5b8b-11e8-8c41-aceec6657e35.JPG)\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/393277721","html_url":"https://github.com/rapid7/metasploit-framework/pull/10067#issuecomment-393277721","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/10067","id":393277721,"node_id":"MDEyOklzc3VlQ29tbWVudDM5MzI3NzcyMQ==","user":{"login":"bwatters-r7","id":17987018,"node_id":"MDQ6VXNlcjE3OTg3MDE4","avatar_url":"https://avatars3.githubusercontent.com/u/17987018?v=4","gravatar_id":"","url":"https://api.github.com/users/bwatters-r7","html_url":"https://github.com/bwatters-r7","followers_url":"https://api.github.com/users/bwatters-r7/followers","following_url":"https://api.github.com/users/bwatters-r7/following{/other_user}","gists_url":"https://api.github.com/users/bwatters-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/bwatters-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bwatters-r7/subscriptions","organizations_url":"https://api.github.com/users/bwatters-r7/orgs","repos_url":"https://api.github.com/users/bwatters-r7/repos","events_url":"https://api.github.com/users/bwatters-r7/events{/privacy}","received_events_url":"https://api.github.com/users/bwatters-r7/received_events","type":"User","site_admin":false},"created_at":"2018-05-30T18:56:21Z","updated_at":"2018-05-30T18:56:21Z","author_association":"CONTRIBUTOR","body":"@asoto-r7 do you think it would be worthwhile to put another layer in case this grows?  like `auxiliary/fileformat/pdf/foxit_authbypass`  I have no idea how popular this is, but I feel like there's a lot of file format stuff around, though not aux-ish file format stuff....?"}}
{"actor":{"display_login":"bwatters-r7"}}