infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update module documentation for rails double tap vuln

master
Wei Chen 2019-04-18 16:07:55 -05:00
parent 89096f374b
commit c223148652
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
documentation/modules/auxiliary/gather/rails_doubletap_file_read.md
View File

@ -1,11 +1,8 @@
## Vulnerable Application ## Vulnerable Application
Ruby on Rails versions <= 5.2.2. Ruby on Rails versions <= 5.2.2. The following example shows how to recreate the vulnerable environment on Linux:
Installation steps: https://chybeta.github.io/2019/03/16/Analysis-for%E3%80%90CVE-2019-5418%E3%80%91File-Content-Disclosure-on-Rails/
1. `gem install rails -v 5.2.1`
2. `rails new demo`
3. `rails s -b 0.0.0.0`
## Verification Steps ## Verification Steps