Use name convention
git-svn-id: file:///home/svn/framework3/trunk@7146 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
c14bd99aff
commit
09ec91d9bf
|
@ -38,7 +38,7 @@ class Metasploit3 < Msf::Auxiliary
|
|||
OptString.new('METHOD', [ true, "HTTP Method",'GET']),
|
||||
OptString.new('PATH', [ true, "The path/file to test SQL injection", '/default.aspx']),
|
||||
OptString.new('QUERY', [ false, "HTTP URI Query", '']),
|
||||
OptString.new('DATA', [ false, "HTTP Body Data", '']),
|
||||
OptString.new('BODY', [ false, "HTTP Body Data", '']),
|
||||
OptString.new('COOKIE',[ false, "HTTP Cookies", ''])
|
||||
], self.class)
|
||||
|
||||
|
@ -75,11 +75,11 @@ class Metasploit3 < Msf::Auxiliary
|
|||
gvars = nil
|
||||
end
|
||||
|
||||
if !datastore['DATA'] or datastore['DATA'].empty?
|
||||
datastore['DATA'] = nil
|
||||
if !datastore['BODY'] or datastore['BODY'].empty?
|
||||
datastore['BODY'] = nil
|
||||
pvars = nil
|
||||
else
|
||||
pvars = queryparse(datastore['DATA'])
|
||||
pvars = queryparse(datastore['BODY'])
|
||||
end
|
||||
|
||||
if !datastore['COOKIE'] or datastore['COOKIE'].empty?
|
||||
|
@ -103,7 +103,7 @@ class Metasploit3 < Msf::Auxiliary
|
|||
'method' => datastore['METHOD'],
|
||||
'ctype' => 'application/x-www-form-urlencoded',
|
||||
'cookie' => datastore['COOKIE'],
|
||||
'data' => datastore['DATA']
|
||||
'data' => datastore['BODY']
|
||||
}, 20)
|
||||
|
||||
|
||||
|
@ -176,7 +176,7 @@ class Metasploit3 < Msf::Auxiliary
|
|||
'method' => datastore['METHOD'],
|
||||
'ctype' => 'application/x-www-form-urlencoded',
|
||||
'cookie' => datastore['COOKIE'],
|
||||
'data' => datastore['DATA']
|
||||
'data' => datastore['BODY']
|
||||
}, 20)
|
||||
|
||||
rescue ::Rex::ConnectionRefused, ::Rex::HostUnreachable, ::Rex::ConnectionTimeout
|
||||
|
@ -235,7 +235,7 @@ class Metasploit3 < Msf::Auxiliary
|
|||
end
|
||||
|
||||
pvars.each do |key,value|
|
||||
pvars = queryparse(datastore['DATA']) #Now its a Hash
|
||||
pvars = queryparse(datastore['BODY']) #Now its a Hash
|
||||
|
||||
print_status("- Testing data with #{idesc}. Parameter #{key}:")
|
||||
pvars[key] = pvars[key]+istr
|
||||
|
|
Loading…
Reference in New Issue