Land #3568, @jhart-r7 regex fix for dir traversal

2014-07-24 15:43:43 -05:00 · 2014-07-24 15:43:43 -05:00 · 8b2ff062c3
parent ddf0636dab bd1970ced9
commit 8b2ff062c3
1 changed files with 1 additions and 1 deletions
--- a/modules/auxiliary/scanner/http/http_traversal.rb
+++ b/modules/auxiliary/scanner/http/http_traversal.rb
@ -59,7 +59,7 @@ class Metasploit3 < Msf::Auxiliary
        OptString.new('PATH',    [true, 'Vulnerable path. Ex: /foo/index.php?pg=', '/']),
        OptString.new('DATA',    [false,'HTTP body data', '']),
        OptInt.new('DEPTH',      [true, 'Traversal depth', 5]),
-        OptRegexp.new('PATTERN', [true, 'Regexp pattern to determine directory traversal', '^HTTP/1.1 200 OK']),
+        OptRegexp.new('PATTERN', [true, 'Regexp pattern to determine directory traversal', '^HTTP/\\d\\.\\d 200']),
        OptPath.new(
          'FILELIST',
          [