More explicit title, grammar check on description

bug/bundler_fix
Tod Beardsley 2013-08-09 12:27:45 -05:00
parent 13ea8aaaad
commit 969b380d71
1 changed files with 2 additions and 2 deletions

View File

@ -100,13 +100,13 @@ class Metasploit3 < Msf::Exploit::Remote
def initialize(info = {})
super(update_info(info,
'Name' => 'Ruby on Rails Session Cookie Remote Code Execution',
'Name' => 'Ruby on Rails Known Secret Session Cookie Remote Code Execution',
'Description' => %q{
This module implements Remote Command Execution on Ruby on Rails applications.
Prerequisite is knowledge of the "secret_token" (Rails 2/3) or "secret_key_base"
(Rails 4). The values for those can be usually found in the file
"RAILS_ROOT/config/initializers/secret_token.rb". The module achieves RCE by
deserialization of some crafted Ruby Object
deserialization of a crafted Ruby Object.
},
'Author' =>
[