update space requirements

git-svn-id: file:///home/svn/framework3/trunk@9392 4d416f70-5f16-0410-b530-b9f4589650da

modules/exploits/unix/webapp/php_eval.rb

@@ -32,9 +32,12 @@ class Metasploit3 < Msf::Exploit::Remote
 			'Arch'           => ARCH_PHP,
 			'Payload'        =>
 				{
-					'Space'       => 4000,
+					# max header length for Apache,
+					# http://httpd.apache.org/docs/2.2/mod/core.html#limitrequestfieldsize
+					'Space'       => 8190,
 					# max url length for some old versions of apache according to
 					# http://www.boutell.com/newfaq/misc/urllength.html
+					#'Space'       => 4000,
 					'DisableNops' => true,
 					'BadChars'    => %q|'"`|,  # quotes are escaped by PHP's magic_quotes_gpc in a default install
 					'Compat'      =>

modules/exploits/unix/webapp/php_include.rb

@@ -40,7 +40,9 @@ class Metasploit3 < Msf::Exploit::Remote
 						{
 							'ConnectionType' => 'find',
 						},
-					'Space'       => 32768,
+					# Arbitrary big number. The payload gets sent as an HTTP
+					# response body, so really it's unlimited
+					'Space'       => 262144, # 256k
 				},
 			'DefaultOptions' =>
 				{