Fix #3975 - Register TARGETURI, not URI

The module should register TARGETURI and call #target_uri for
URI validation.
bug/bundler_fix
sinn3r 2014-10-09 14:10:29 -05:00
parent a535d236f6
commit c9c34beafa
1 changed files with 2 additions and 2 deletions

View File

@ -58,7 +58,7 @@ class Metasploit3 < Msf::Auxiliary
register_options(
[
Opt::RPORT(8080),
OptString.new('URI', [true, "URI for Manager login. Default is /manager/html", "/manager/html"]),
OptString.new('TARGETURI', [true, "URI for Manager login. Default is /manager/html", "/manager/html"]),
OptPath.new('USERPASS_FILE', [ false, "File containing users and passwords separated by space, one pair per line",
File.join(Msf::Config.data_directory, "wordlists", "tomcat_mgr_default_userpass.txt") ]),
OptPath.new('USER_FILE', [ false, "File containing users, one per line",
@ -72,7 +72,7 @@ class Metasploit3 < Msf::Auxiliary
def run_host(ip)
begin
uri = normalize_uri(datastore['URI'])
uri = normalize_uri(target_uri.path)
res = send_request_cgi({
'uri' => uri,
'method' => 'GET',