From ab4f9d65c7e4d990ba98d800da76574971833a92 Mon Sep 17 00:00:00 2001 From: Wei Chen Date: Tue, 25 Oct 2011 18:32:02 +0000 Subject: [PATCH] Add PATH option. Feature #5412 git-svn-id: file:///home/svn/framework3/trunk@14067 4d416f70-5f16-0410-b530-b9f4589650da --- modules/auxiliary/scanner/http/webdav_scanner.rb | 6 +++++- modules/auxiliary/scanner/http/webdav_website_content.rb | 7 +++++-- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/modules/auxiliary/scanner/http/webdav_scanner.rb b/modules/auxiliary/scanner/http/webdav_scanner.rb index e1e62d6932..44e0f0bdfd 100644 --- a/modules/auxiliary/scanner/http/webdav_scanner.rb +++ b/modules/auxiliary/scanner/http/webdav_scanner.rb @@ -31,13 +31,17 @@ class Metasploit3 < Msf::Auxiliary 'License' => MSF_LICENSE ) + register_options( + [ + OptString.new('PATH', [true, "Path to use", '/']), + ], self.class) end def run_host(target_host) begin res = send_request_raw({ - 'uri' => '/', + 'uri' => datastore['PATH'], 'method' => 'OPTIONS' }, 10) diff --git a/modules/auxiliary/scanner/http/webdav_website_content.rb b/modules/auxiliary/scanner/http/webdav_website_content.rb index 1a90d86271..735b51a5ba 100644 --- a/modules/auxiliary/scanner/http/webdav_website_content.rb +++ b/modules/auxiliary/scanner/http/webdav_website_content.rb @@ -31,13 +31,17 @@ class Metasploit3 < Msf::Auxiliary 'License' => MSF_LICENSE ) + register_options( + [ + OptString.new('PATH', [true, "Path to use", '/']), + ], self.class) end def run_host(target_host) begin res = send_request_cgi({ - 'uri' => '/', + 'uri' => datastore['PATH'], 'method' => 'PROPFIND', 'data' => '', 'ctype' => 'text/xml', @@ -54,7 +58,6 @@ class Metasploit3 < Msf::Auxiliary result = res.body.scan(urlregex).uniq - result.each do |u| print_status("Found file or directory in WebDAV response (#{target_host}) #{u}")