Add missing ranks

[farkwun]

This PR hopes to resolve some of the missing exploit module rankings as per #7923

I've also included a few lines of justification for each ranking - tell me if I'm off the mark!

../exec_shellcode.rb
Rank = Great
This exploit is missing autodetection and version checks,
but should be ranked Great due to high number of possible targets

../cfme_manageiq_evm_upload_exec.rb
Rank = Great
This exploit implements a check to assess target availability,
and the vulnerability does not require any user action

../dlink_dcs_930l_authenticated_remote_command_execution
Rank = Excellent
Exploit utilizes command injection

../efw_chpasswd_exec
Rank = Excellent
Exploit utilizes command injection

../foreman_openstack_satellite_code_exec
Rank = Excellent
Exploit utilizes code injection

../nginx_chunked_size
Rank = Great
Exploit has explicit targets with nginx version auto-detection

../tp_link_sc2020n_authenticated_telnet_injection
Rank = Excellent
See dlink_dcs_930l_authenticated_remote_command_execution,
exploit uses OS Command Injection

../hp_smhstart
Rank = Average
Must be specific user to exploit, no autodetection,
specific versions only

Verification

• Run msftidy on the exploit modules, verify the below files no longer throw [INFO] No Rank Specified messages:
  • ../exploits/firefox/local/exec_shellcode.rb
  • ../exploits/linux/http/cfme_manageiq_evm_upload_exec.rb
  • ../exploits/linux/http/dlink_dcs_930l_authenticated_remote_command_execution.rb
  • ../exploits/linux/http/efw_chpasswd_exec.rb
  • ../exploits/linux/http/foreman_openstack_satellite_code_exec.rb
  • ../exploits/linux/http/nginx_chunked_size.rb
  • ../exploits/linux/http/tp_link_sc2020n_authenticated_telnet_injection.rb
  • ../exploits/linux/local/hp_smhstart.rb

[h00die]

https://github.com/rapid7/metasploit-framework/wiki/Exploit-Ranking

[h00die]

a lot of those are command execution modules and correct with the excellent ranking.

I think exec_shellcode and cfme_manageiq_evm_upload_exec should be excellent as well since its just code exec

I think hp_smhstart i think can be normal.

[farkwun]

Hi h00die!

I've made the changes to the files - verification remains the same :)

Please tell me if there's anything else preventing a merge!

[h00die]

Release Notes

Exploit rankings have been added for 8 modules.

[h00die]

@farkwun thanks for the submission, and all the explanations you added!