infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Land #10566, struts2_rest_xstream normalize_uri

4.x
William Vu 2018-08-30 15:59:13 -05:00 committed by Metasploit
parent 2ecff39be4
commit 4360b9e82e
No known key found for this signature in database
GPG Key ID: CDFB5FA52007B954
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/exploits/multi/http/struts2_rest_xstream.rb
View File

@ -110,7 +110,7 @@ class MetasploitModule < Msf::Exploit::Remote
res = send_request_cgi( res = send_request_cgi(
'method' => 'POST', 'method' => 'POST',
'uri' => target_uri.path, 'uri' => normalize_uri(target_uri.path),
'ctype' => 'application/xml', 'ctype' => 'application/xml',
'data' => xstream_payload(cmd) 'data' => xstream_payload(cmd)
) )