{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7855","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7855/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7855/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7855/events","html_url":"https://github.com/rapid7/metasploit-framework/issues/7855","id":202266344,"number":7855,"title":"Not sure what the module \"auxiliary/scanner/http/lucky_punch\" does","user":{"login":"jinq102030","id":20934902,"avatar_url":"https://avatars.githubusercontent.com/u/20934902?v=3","gravatar_id":"","url":"https://api.github.com/users/jinq102030","html_url":"https://github.com/jinq102030","followers_url":"https://api.github.com/users/jinq102030/followers","following_url":"https://api.github.com/users/jinq102030/following{/other_user}","gists_url":"https://api.github.com/users/jinq102030/gists{/gist_id}","starred_url":"https://api.github.com/users/jinq102030/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jinq102030/subscriptions","organizations_url":"https://api.github.com/users/jinq102030/orgs","repos_url":"https://api.github.com/users/jinq102030/repos","events_url":"https://api.github.com/users/jinq102030/events{/privacy}","received_events_url":"https://api.github.com/users/jinq102030/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2017-01-20T23:16:54Z","updated_at":"2017-01-23T15:42:34Z","closed_at":null,"body":"## Steps to reproduce\r\n\r\nIt appears that this module just sends a request and not does any processing on the response.   Wonder if something is wrong here. "},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/274522597","html_url":"https://github.com/rapid7/metasploit-framework/issues/7855#issuecomment-274522597","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7855","id":274522597,"user":{"login":"jinq102030","id":20934902,"avatar_url":"https://avatars.githubusercontent.com/u/20934902?v=3","gravatar_id":"","url":"https://api.github.com/users/jinq102030","html_url":"https://github.com/jinq102030","followers_url":"https://api.github.com/users/jinq102030/followers","following_url":"https://api.github.com/users/jinq102030/following{/other_user}","gists_url":"https://api.github.com/users/jinq102030/gists{/gist_id}","starred_url":"https://api.github.com/users/jinq102030/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jinq102030/subscriptions","organizations_url":"https://api.github.com/users/jinq102030/orgs","repos_url":"https://api.github.com/users/jinq102030/repos","events_url":"https://api.github.com/users/jinq102030/events{/privacy}","received_events_url":"https://api.github.com/users/jinq102030/received_events","type":"User","site_admin":false},"created_at":"2017-01-23T15:42:34Z","updated_at":"2017-01-23T15:42:34Z","body":"Thanks @pbarry-r7 for the good writeup.  @wvu-r7 mentioned it's a generic SQLi, wonder if it's ok to make a HTTP request to pull in HTML+Javascript (with injected code) for illustration purpose?   "}}
{"actor":{"display_login":"jinq102030"}}