Add more ranks

[farkwun]

This PR hopes to resolve the last few missing module rankings as per #7923

I've also included a few lines of justification for each ranking - these ones seem a little less cut and dry than the previous set, so please do tell me if I've misinterpreted something!

../vmware_mount.rb
Rank = Excellent
Exploit uses check code for target availability,
the vulnerability does not require user action,
and the exploit uses privilege escalation to run
arbitrary executables

../movabletype_upgrade_exec.rb
Rank = ExcellentRanking
Exploit utilizes code injection,
has a check for availability

../uptime_file_upload_2.rb
Rank = ExcellentRanking
Exploit allows execution of arbitrary commands,
has a check for availability

../zpanel_information_disclosure_rce.rb
Rank = ExcellentRanking
Exploit allows remote code execution,
implements version check for pChart

../spip_connect_exec.rb
Rank = ExcellentRanking
Exploit utilizes code injection,
has a check for availability

../wp_optimizepress_upload.rb
Rank = ExcellentRanking
Exploit allows execution of arbitrary code,
has a check for availability

../wing_ftp_admin_exec.rb
Rank = ExcellentRanking
Exploit allows execution of arbitrary commands,
has a check for availability

../novell_mdm_lfi.rb
Rank = ExcellentRanking
Exploit allows execution of arbitrary code,
has a check for availability

../run_as.rb
Rank = ExcellentRanking
Exploit utilizes command injection,
checks system type, and does not require user action

Verification

• Run msftidy on the exploit modules, verify the below files no longer throw [INFO] No Rank Specified messages:
  • ../exploits/linux/local/vmware_mount.rb
  • ../exploits/multi/http/movabletype_upgrade_exec.rb
  • ../exploits/multi/http/uptime_file_upload_2.rb
  • ../exploits/multi/http/zpanel_information_disclosure_rce.rb
  • ../exploits/unix/webapp/spip_connect_exec.rb
  • ../exploits/unix/webapp/wp_optimizepress_upload.rb
  • ../exploits/windows/ftp/wing_ftp_admin_exec.rb
  • ../exploits/windows/http/novell_mdm_lfi.rb
  • ../exploits/windows/local/run_as.rb

[wvu]

exploit/linux/local/vmware_mount is local privesc and basically already command injection. Should it be ExcellentRanking?

[farkwun]

Thanks @wvu-r7 !

I've changed exploit/linux/local/vmware_mount.rb to ExcellentRanking!

Do tell me if there are any other inaccuracies!

[wvu]

Thanks for doing this. I was trying to finish them the other day but didn't have the motivation to finish, lol.

[wvu]

Release Notes

Module rank warnings have been removed from msftidy. Improved descriptions have been added to existing module rankings.