From be454cc8bd23a28eb3c4cdd2c3ab98bd8844bae7 Mon Sep 17 00:00:00 2001
From: thomashaw <thomashaw@gmail.com>
Date: Fri, 17 Nov 2017 16:45:40 +0000
Subject: [PATCH] ssh_leaked_keys, no longer requires user_rw. param website
 doesn't drop a flag by default, additions to .gitignore

---
 .gitignore                                                    | 4 +++-
 .../unix/http/parameterised_website/secgen_metadata.xml       | 3 ++-
 .../unix/system/ssh_leaked_keys/secgen_metadata.xml           | 4 ----
 3 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/.gitignore b/.gitignore
index c5d73d095..089a6f8dd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,4 +3,6 @@ unusedcode
 .DS_Store
 .idea
 mount
-log
\ No newline at end of file
+log
+batch/failed/
+batch/successful/
\ No newline at end of file
diff --git a/modules/services/unix/http/parameterised_website/secgen_metadata.xml b/modules/services/unix/http/parameterised_website/secgen_metadata.xml
index 3b298c92a..5421977f1 100644
--- a/modules/services/unix/http/parameterised_website/secgen_metadata.xml
+++ b/modules/services/unix/http/parameterised_website/secgen_metadata.xml
@@ -11,6 +11,7 @@
   <type>http</type>
   <platform>linux</platform>
 
+  <!-- Strings are leaked in index.html source code comments -->
   <read_fact>strings_to_leak</read_fact>
   <read_fact>images_to_leak</read_fact>
   <read_fact>organisation</read_fact>
@@ -34,7 +35,7 @@
   </default_input>
 
   <default_input into="strings_to_leak">
-    <generator type="flag_generator"/>
+    <generator type="message_generator"/>
     <generator type="message_generator"/>
   </default_input>
 
diff --git a/modules/vulnerabilities/unix/system/ssh_leaked_keys/secgen_metadata.xml b/modules/vulnerabilities/unix/system/ssh_leaked_keys/secgen_metadata.xml
index 40a7cd561..814bb5a10 100644
--- a/modules/vulnerabilities/unix/system/ssh_leaked_keys/secgen_metadata.xml
+++ b/modules/vulnerabilities/unix/system/ssh_leaked_keys/secgen_metadata.xml
@@ -47,8 +47,4 @@
     <module_path>utilities/unix/system/accounts</module_path>
   </requires>
 
-  <!--to exploit the attacker needs user write access-->
-  <requires>
-    <privilege>user_rw</privilege>
-  </requires>
 </vulnerability>
\ No newline at end of file