Update werkzeug_debug_rce.rb

Added comments about where version-dependant salts come from

Author: Grezzo

modules/exploits/multi/http/werkzeug_debug_rce.rb

@@ -61,7 +61,7 @@ def initialize(info = {})
             {
               digest: Digest::SHA1,
               digest_inputs: :new,
-              salt: ' added salt'
+              salt: ' added salt' # From site-packages/werkzeug/debug/__init__.py > hash_pin()
             }
           ],
           # pip install werkzeug==1.0.1 flask==1.1.4
@@ -70,7 +70,7 @@ def initialize(info = {})
             {
               digest: Digest::MD5,
               digest_inputs: :new,
-              salt: 'shittysalt'
+              salt: 'shittysalt' # From site-packages/werkzeug/debug/__init__.py > hash_pin()
             }
           ],
           # pip install werkzeug==0.11.5 flask==0.12.5
@@ -79,7 +79,7 @@ def initialize(info = {})
             {
               digest: Digest::MD5,
               digest_inputs: :old,
-              salt: 'shittysalt'
+              salt: 'shittysalt' # From site-packages/werkzeug/debug/__init__.py > hash_pin()
             }
           ],
           # pip install werkzeug==0.10 flask==0.12.5