Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add 'Also known as', AKA 'AKA', to module references #8629

Merged
merged 3 commits into from Jun 29, 2017
Merged

Conversation

busterb
Copy link
Member

@busterb busterb commented Jun 28, 2017

This adds a new reference type for things like named vulns, nicknames, marketing speak, etc. to make it possible to add a reference for common nomenclature without having to use these names in the modules themselves.

Verification

  • Start msfconsole
  • modules/auxiliary/server/dhclient_bash_env
  • info
  • Verify that an 'Also known as:' annotation appears

@@ -30,6 +30,7 @@ def initialize(info = {})
'License' => MSF_LICENSE,
'References' =>
[
[ 'AKA', 'Shellshock' ],
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an exploit for the bot, so there's no Shellshock here. The bot was likely deployed through other vulns, too.

@@ -33,6 +33,7 @@ def initialize(info = {})
'License' => MSF_LICENSE,
'References' =>
[
[ 'AKA', 'Shellshock' ],
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as above. Bot exploit.

@@ -34,6 +34,7 @@ def initialize(info = {})
'License' => MSF_LICENSE,
'References' =>
[
[ 'AKA', 'explodingcan' ],
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you capitalize this like the other NSA code names? Thanks!

@wvu
Copy link
Contributor

wvu commented Jun 29, 2017

So, the nice thing about this that I wanted to test is that it works with search seamlessly and without being case-sensitive.

msf > search explodingcan

Matching Modules
================

   Name                                                 Disclosure Date  Rank    Description
   ----                                                 ---------------  ----    -----------
   exploit/windows/iis/iis_webdav_scstoragepathfromurl  2017-03-26       manual   Microsoft IIS WebDav ScStoragePathFromUrl Overflow


msf > 

Double win.

wvu added a commit to wvu/metasploit-framework that referenced this pull request Jun 29, 2017
@wvu wvu merged commit aa8c580 into rapid7:master Jun 29, 2017
@h00die
Copy link
Contributor

h00die commented Jun 29, 2017

+1 this request, its a good idea to pull these things out.

@wvu
Copy link
Contributor

wvu commented Jun 29, 2017

Release Notes

A new module reference type, AKA (also known as), has been added. You can use AKA references to map modules to a particular vulnerability's common name, which enables searching by that name.

@alrosenthal-r7 alrosenthal-r7 added the rn-enhancement release notes enhancement label Jul 12, 2017
@busterb busterb deleted the aka branch January 18, 2018 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants