Update exploits to note target authors

zeroSteiner · zeroSteiner · commit d4b196b3099b · 2025-12-17T17:30:16.000-05:00
Target authors were selected based on comments that indicated that the
author was only responsible for a set of descrete targets. Authors that
were noted as assisting with target testing, check module development,
etc. were left at the module level.
diff --git a/modules/exploits/linux/persistence/init_systemd.rb b/modules/exploits/linux/persistence/init_systemd.rb
@@ -34,13 +34,12 @@ def initialize(info = {})
         'License' => MSF_LICENSE,
         'Author' => [
           'h00die <mike@shorebreaksecurity.com>',
-          'Cale Black' # user target
         ],
         'Platform' => ['unix', 'linux'],
         'Privileged' => true,
         'Targets' => [
           ['systemd', {}],
-          ['systemd user', {}]
+          ['systemd user', { 'Author' => 'Cale Black' }]
         ],
         'DefaultTarget' => 0,
         'Arch' => [
diff --git a/modules/exploits/multi/http/struts_code_exec_classloader.rb b/modules/exploits/multi/http/struts_code_exec_classloader.rb
@@ -27,8 +27,7 @@ def initialize(info = {})
         'Author' => [
           'Mark Thomas', # Vulnerability Discovery
           'Przemyslaw Celej', # Vulnerability Discovery
-          'Redsadic <julian.vilas[at]gmail.com>', # Metasploit Module
-          'Matthew Hall <hallm[at]sec-1.com>' # SMB target
+          'Redsadic <julian.vilas[at]gmail.com>' # Metasploit Module
         ],
         'License' => MSF_LICENSE,
         'References' => [
@@ -71,6 +70,7 @@ def initialize(info = {})
             'Windows / Tomcat 6 & 7 and GlassFish 4 (Remote SMB Resource)',
             {
               'Arch' => ARCH_JAVA,
+              'Author' => 'Matthew Hall <hallm[at]sec-1.com>',
               'Platform' => 'win'
             }
           ]
diff --git a/modules/exploits/multi/misc/indesign_server_soap.rb b/modules/exploits/multi/misc/indesign_server_soap.rb
@@ -21,8 +21,7 @@ def initialize(info = {})
           The exploit drops the payload on the server and must be removed manually.
         },
         'Author' => [
-          'h0ng10', # Vulnerability discovery / Metasploit module
-          'juan vazquez' # MacOSX target
+          'h0ng10' # Vulnerability discovery / Metasploit module
         ],
         'License' => MSF_LICENSE,
         'Privileged' => false,
@@ -43,6 +42,7 @@ def initialize(info = {})
             'Indesign CS6 Server / Mac OS X Snow Leopard 64 bits',
             {
               'Arch' => ARCH_X64,
+              'Author' => 'juan vazquez',
               'Platform' => 'osx'
             }
           ]
diff --git a/modules/exploits/multi/sap/sap_mgmt_con_osexec_payload.rb b/modules/exploits/multi/sap/sap_mgmt_con_osexec_payload.rb
@@ -21,8 +21,7 @@ def initialize(info = {})
         'Name' => 'SAP Management Console OSExecute Payload Execution',
         'License' => MSF_LICENSE,
         'Author' => [
-          'Chris John Riley', # Original module, windows target
-          'juan vazquez' # Linux target
+          'Chris John Riley' # Original module, windows target
         ],
         'Description' => %q{
           This module executes an arbitrary payload through the SAP Management Console
@@ -44,6 +43,7 @@ def initialize(info = {})
             'Linux',
             {
               'Arch' => ARCH_X86,
+              'Author' => 'juan vazquez',
               'Platform' => 'linux'
             }
           ],
diff --git a/modules/exploits/multi/script/web_delivery.rb b/modules/exploits/multi/script/web_delivery.rb
@@ -62,10 +62,7 @@ def initialize(info = {})
           'Casey Smith', # AppLocker bypass research and vulnerability discovery (@subTee)
           'Trenton Ivey', # AppLocker MSF Module (kn0)
           'g0tmi1k', # @g0tmi1k // https://blog.g0tmi1k.com/ - additional features
-          'bcoles', # support for targets: pubprn, SyncAppvPublishingServer and Linux wget
-          'Matt Nelson', # @enigma0x3 // pubprn discovery
           'phra', # @phraaaaaaa // https://iwantmore.pizza/ - AMSI/SBL bypass
-          'Nick Landers', # @monoxgas // SyncAppvPublishingServer discovery
         ],
         'DefaultOptions' => {
           'Payload' => 'python/meterpreter/reverse_tcp',
@@ -110,12 +107,20 @@ def initialize(info = {})
           ],
           [
             'pubprn', {
+              'Author' => [
+                'bcoles',
+                'Matt Nelson' # @enigma0x3
+              ],
               'Platform' => 'win',
               'Arch' => [ARCH_X86, ARCH_X64]
             }
           ],
           [
             'SyncAppvPublishingServer', {
+              'Author' => [
+                'bcoles',
+                'Nick Landers' # @monoxgas
+              ],
               'Platform' => 'win',
               'Arch' => [ARCH_X86, ARCH_X64]
             }
@@ -128,6 +133,7 @@ def initialize(info = {})
           ],
           [
             'Linux', {
+              'Author' => 'bcoles',
               'Platform' => 'linux',
               'Arch' => [ARCH_X86, ARCH_X64]
             }
diff --git a/modules/exploits/windows/browser/mozilla_mchannel.rb b/modules/exploits/windows/browser/mozilla_mchannel.rb
@@ -34,8 +34,7 @@ def initialize(info = {})
         'License' => MSF_LICENSE,
         'Author' => [
           'regenrecht', # discovery
-          'Rh0', # metasploit module
-          'mr_me <steventhomasseeley[at]gmail.com>' # win7 target
+          'Rh0' # metasploit module
         ],
         'References' => [
           ['CVE', '2011-0065'],
@@ -71,6 +70,7 @@ def initialize(info = {})
             'Firefox 3.6.16 on Windows 7 + Java',
             {
               'Arch' => ARCH_X86,
+              'Author' => 'mr_me <steventhomasseeley[at]gmail.com>',
               'Fakevtable' => 0x1000,
               'Fakefunc' => 0x100002a4,
               'Ppppr' => 0x7c3410c0,
diff --git a/modules/exploits/windows/browser/mozilla_reduceright.rb b/modules/exploits/windows/browser/mozilla_reduceright.rb
@@ -26,9 +26,7 @@ def initialize(info = {})
           'Yan Ivnitskiy',  # Matasano Security (Initial discovery with Chris?)
           'Matteo Memelli', # PoC from Exploit-DB
           'dookie2000ca',   # "Helping" ryujin (Matteo)
-          'sinn3r',         # Metasploit
-          'mr_me <steventhomasseeley[at]gmail.com>',  # XP target (no aslr)
-          'TecR0c <roccogiovannicalvi[at]gmail.com>', # XP target (no aslr)
+          'sinn3r'          # Metasploit
         ],
         'References' => [
           ['CVE', '2011-2371'],
@@ -52,6 +50,10 @@ def initialize(info = {})
             # Windows XP (no JAVA)
             'Mozilla Firefox 3.6.16 (no JAVA)',
             {
+              'Author' => [
+                'mr_me <steventhomasseeley[at]gmail.com>',
+                'TecR0c <roccogiovannicalvi[at]gmail.com>',
+              ],
               'pivot' => 0x104C26F0, # 1st pivot [push esi;pop esp;and [esi+44],0;xor eax,eax;pop esi;retn 4]
               'pivot2' => 0x10055326, # 2nd pivot [add esp,40;ret]
             }
diff --git a/modules/exploits/windows/fileformat/aol_desktop_linktag.rb b/modules/exploits/windows/fileformat/aol_desktop_linktag.rb
@@ -23,9 +23,7 @@ def initialize(info = {})
         'Author' => [
           'sup3r', # Initial disclosure, poc (9.5)
           'sickn3ss',     # 9.6 poc
-          'sinn3r',       # Metasploit
-          'mr_me <steventhomasseeley[at]gmail.com>', # NX bypass target
-          'silent_dream', # Win 7 target
+          'sinn3r'       # Metasploit
         ],
         'References' => [
           [ 'CVE', '2011-10027' ],
@@ -53,6 +51,7 @@ def initialize(info = {})
           [
             'AOL Desktop 9.6 on Windows XP SP3 - NX bypass',
             {
+              'Author' => 'mr_me <steventhomasseeley[at]gmail.com>',
               'Ret' => 0x6C02D216, # PUSH ESI, POP ESP, POP ESI, POP EDI, POP EDI, RETN 8
               'vp' => 0x7C801AD4, # (kernel32.dll) => VirtualProtect()
               'Offset' => 5368, # offset to rop
@@ -62,6 +61,7 @@ def initialize(info = {})
           [
             'AOL Desktop 9.6 on Windows 7',
             {
+              'Author' => 'silent_dream',
               'Ret' => 0x63227D6D,  # JMP ESP in coolapi.dll
               'Offset' => 4327, # Offset to EIP
               'Max' => 8000, # Buffer max. Can be more
diff --git a/modules/exploits/windows/fileformat/blazedvd_plf.rb b/modules/exploits/windows/fileformat/blazedvd_plf.rb
@@ -20,10 +20,7 @@ def initialize(info = {})
         },
         'License' => MSF_LICENSE,
         'Author' => [
-          'MC', # Developed target 5.1
-          'Deepak Rathore', # ExploitDB PoC
-          'Spencer McIntyre', # Developed taget 6.2
-          'Ken Smith' # Developed target 6.2
+          'Deepak Rathore' # ExploitDB PoC
         ],
         'References' => [
           [ 'CVE', '2006-6199' ],
@@ -46,6 +43,7 @@ def initialize(info = {})
           [
             'BlazeDVD 6.2',
             {
+              'Author' => [ 'Ken Smith', 'Spencer McIntyre' ],
               'Payload' =>
                 {
                   # Stackpivot => add esp,0xfffff254
@@ -56,6 +54,7 @@ def initialize(info = {})
           [
             'BlazeDVD 5.1',
             {
+              'Author' => 'MC',
               'Ret' => 0x100101e7,
               'Payload' =>
                 {
diff --git a/modules/exploits/windows/http/dup_scout_enterprise_login_bof.rb b/modules/exploits/windows/http/dup_scout_enterprise_login_bof.rb
@@ -31,8 +31,7 @@ def initialize(info = {})
         'License' => MSF_LICENSE,
         'Author' => [
           'sickness', # Original discovery and exploit
-          'Chris Higgins', # msf Module -- @ch1gg1ns
-          'bcoles', # Automatic targetting and v9.9.14 target
+          'Chris Higgins' # msf Module -- @ch1gg1ns
         ],
         'References' => [
           ['CVE', '2017-13696'],
@@ -50,11 +49,12 @@ def initialize(info = {})
           'BadChars' => "\x00\x0a\x0d\x25\x26\x2b\x3d"
         },
         'Targets' => [
-          [ 'Automatic', { 'auto' => true } ],
+          [ 'Automatic', { 'Author' => 'bcoles', 'auto' => true } ],
           [
             'Dup Scout Enterprise 9.9.14 (x86)',
             {
               # 0x100b5612 : push esp # ret  | ascii {PAGE_EXECUTE_READ} [libspp.dll] ASLR: False, Rebase: False, SafeSEH: False, OS: False, v-1.0-
+              'Author' => 'bcoles',
               'Version' => '9.9.14',
               'Ret' => 0x100b5612,
               'Offset' => 780
diff --git a/modules/exploits/windows/http/hp_nnm_toolbar_02.rb b/modules/exploits/windows/http/hp_nnm_toolbar_02.rb
@@ -22,8 +22,7 @@ def initialize(info = {})
         'License' => MSF_LICENSE,
         'Author' => [
           'Oren Isacson', # original discovery
-          'juan vazquez', # metasploit module (7.0 target)
-          'sinn3r',       # 7.53_01195 target
+          'juan vazquez' # metasploit module (7.0 target)
         ],
         'References' => [
           [ 'CVE', '2009-0920' ],
@@ -40,10 +39,7 @@ def initialize(info = {})
           'BadChars' => "\x01\x02\x03\x04\x05\x06\x07\x08\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x7f\x3b\x2b",
           'DisableNops' => true, # no need
           'EncoderType' => Msf::Encoder::Type::AlphanumMixed,
-          'EncoderOptions' =>
-                      {
-                        'BufferRegister' => 'EDX'
-                      }
+          'EncoderOptions' => { 'BufferRegister' => 'EDX' }
         },
         'Platform' => 'win',
         'Targets' => [
@@ -70,6 +66,7 @@ def initialize(info = {})
             # Windows Server 2003
             'HP OpenView Network Node Manager 7.53 Patch 01195',
             {
+              'Author' => 'sinn3r',
               'Eax' => 0x5a456eac, # Readable address for CMP BYTE PTR DS:[EAX],0
               'EaxOffset' => 251, # Offset to overwrite EAX
               'Ret' => 0x5A23377C,   # CALL EDI
diff --git a/modules/exploits/windows/smb/ms05_039_pnp.rb b/modules/exploits/windows/smb/ms05_039_pnp.rb
@@ -50,7 +50,8 @@ def initialize(info = {})
           [
             'Windows 2000 SP4 French',
             {
-              'Ret' => 0x767438f6, # French target by ExaProbe <fmourron@exaprobe.com>
+              'Author' => 'ExaProbe <fmourron@exaprobe.com>',
+              'Ret' => 0x767438f6
             },
           ],
           [
@@ -63,19 +64,22 @@ def initialize(info = {})
             # Tested on: English/French/German/Dutch/Finnish/Greek/Polish/Portuguese/Hungarian/Korean/Chinese/Arabic/Turkish/Russian
             'Windows 2000 SP4 Universal',
             {
-              'Ret' => 0x01013C79, # [Pita] [Houmous] <pita@mail.com>
+              'Author' => 'Pita Houmous <pita@mail.com>',
+              'Ret' => 0x01013C79
             },
           ],
           [
             'Windows 2000 SP0-SP4 German',
             {
-              'Ret' => 0x767338f6, # German target by Michael Thumann <mthumann@ernw.de>
+              'Author' => 'Michael Thumann <mthumann@ernw.de>',
+              'Ret' => 0x767338f6
             },
           ],
           [
             'Windows 2000 SP0-SP4 Italian',
             {
-              'Ret' => 0x7677366f, # acaro <acaro@jervus.it>
+              'Author' => 'acaro <acaro@jervus.it>',
+              'Ret' => 0x7677366f
             },
           ],
           [
@@ -170,7 +174,7 @@ def initialize(info = {})
               'Ret' => 0x780df756, # push esp / ret in msvcp60.dll
               'Pipe' => 'ntsvcs',
               'PtrToZero' => 0x757702c0, # PE data of umpnpmgr.dll
-              'Offset' => 72,
+              'Offset' => 72
             }
           ],
           [

Original file line number	Diff line number	Diff line change
`@@ -27,8 +27,7 @@ def initialize(info = {})`
`27`	`27`	`'Author' => [`
`28`	`28`	`'Mark Thomas', # Vulnerability Discovery`
`29`	`29`	`'Przemyslaw Celej', # Vulnerability Discovery`
`30`		`- 'Redsadic <julian.vilas[at]gmail.com>', # Metasploit Module`
`31`		`- 'Matthew Hall <hallm[at]sec-1.com>' # SMB target`
	`30`	`+ 'Redsadic <julian.vilas[at]gmail.com>' # Metasploit Module`
`32`	`31`	`],`
`33`	`32`	`'License' => MSF_LICENSE,`
`34`	`33`	`'References' => [`
`@@ -71,6 +70,7 @@ def initialize(info = {})`
`71`	`70`	`'Windows / Tomcat 6 & 7 and GlassFish 4 (Remote SMB Resource)',`
`72`	`71`	`{`
`73`	`72`	`'Arch' => ARCH_JAVA,`
	`73`	`+ 'Author' => 'Matthew Hall <hallm[at]sec-1.com>',`
`74`	`74`	`'Platform' => 'win'`
`75`	`75`	`}`
`76`	`76`	`]`
Original file line number	Diff line number	Diff line change
`@@ -21,8 +21,7 @@ def initialize(info = {})`
`21`	`21`	`The exploit drops the payload on the server and must be removed manually.`
`22`	`22`	`},`
`23`	`23`	`'Author' => [`
`24`		`- 'h0ng10', # Vulnerability discovery / Metasploit module`
`25`		`- 'juan vazquez' # MacOSX target`
	`24`	`+ 'h0ng10' # Vulnerability discovery / Metasploit module`
`26`	`25`	`],`
`27`	`26`	`'License' => MSF_LICENSE,`
`28`	`27`	`'Privileged' => false,`
`@@ -43,6 +42,7 @@ def initialize(info = {})`
`43`	`42`	`'Indesign CS6 Server / Mac OS X Snow Leopard 64 bits',`
`44`	`43`	`{`
`45`	`44`	`'Arch' => ARCH_X64,`
	`45`	`+ 'Author' => 'juan vazquez',`
`46`	`46`	`'Platform' => 'osx'`
`47`	`47`	`}`
`48`	`48`	`]`
Original file line number	Diff line number	Diff line change
`@@ -20,10 +20,7 @@ def initialize(info = {})`
`20`	`20`	`},`
`21`	`21`	`'License' => MSF_LICENSE,`
`22`	`22`	`'Author' => [`
`23`		`- 'MC', # Developed target 5.1`
`24`		`- 'Deepak Rathore', # ExploitDB PoC`
`25`		`- 'Spencer McIntyre', # Developed taget 6.2`
`26`		`- 'Ken Smith' # Developed target 6.2`
	`23`	`+ 'Deepak Rathore' # ExploitDB PoC`
`27`	`24`	`],`
`28`	`25`	`'References' => [`
`29`	`26`	`[ 'CVE', '2006-6199' ],`
`@@ -46,6 +43,7 @@ def initialize(info = {})`
`46`	`43`	`[`
`47`	`44`	`'BlazeDVD 6.2',`
`48`	`45`	`{`
	`46`	`+ 'Author' => [ 'Ken Smith', 'Spencer McIntyre' ],`
`49`	`47`	`'Payload' =>`
`50`	`48`	`{`
`51`	`49`	`# Stackpivot => add esp,0xfffff254`
`@@ -56,6 +54,7 @@ def initialize(info = {})`
`56`	`54`	`[`
`57`	`55`	`'BlazeDVD 5.1',`
`58`	`56`	`{`
	`57`	`+ 'Author' => 'MC',`
`59`	`58`	`'Ret' => 0x100101e7,`
`60`	`59`	`'Payload' =>`
`61`	`60`	`{`