More explicit title, grammar check on description
parent
13ea8aaaad
commit
969b380d71
|
@ -100,13 +100,13 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
|
||||
def initialize(info = {})
|
||||
super(update_info(info,
|
||||
'Name' => 'Ruby on Rails Session Cookie Remote Code Execution',
|
||||
'Name' => 'Ruby on Rails Known Secret Session Cookie Remote Code Execution',
|
||||
'Description' => %q{
|
||||
This module implements Remote Command Execution on Ruby on Rails applications.
|
||||
Prerequisite is knowledge of the "secret_token" (Rails 2/3) or "secret_key_base"
|
||||
(Rails 4). The values for those can be usually found in the file
|
||||
"RAILS_ROOT/config/initializers/secret_token.rb". The module achieves RCE by
|
||||
deserialization of some crafted Ruby Object
|
||||
deserialization of a crafted Ruby Object.
|
||||
},
|
||||
'Author' =>
|
||||
[
|
||||
|
|
Loading…
Reference in New Issue