Land #16716 Expose URIPATH option for HTTP stagers

This fix exposes the CMDSTAGER::URIPATH option
for HTTP stagers

Author: jheysel-r7

lib/msf/core/exploit/cmd_stager.rb

@@ -67,6 +67,7 @@ def initialize(info = {})
         OptEnum.new('CMDSTAGER::FLAVOR', [false, 'The CMD Stager to use.', 'auto', flavors]),
         OptString.new('CMDSTAGER::DECODER', [false, 'The decoder stub to use.']),
         OptString.new('CMDSTAGER::TEMP', [false, 'Writable directory for staged files']),
+        OptString.new('CMDSTAGER::URIPATH', [false, 'Payload URI path for supported stagers']),
         OptBool.new('CMDSTAGER::SSL', [false, 'Use SSL/TLS for supported stagers', false])
       ], self.class)
   end
@@ -147,6 +148,7 @@ def generate_cmdstager(opts = {}, pl = nil)
 
     if stager_instance.respond_to?(:http?) && stager_instance.http?
       opts[:ssl] = datastore['CMDSTAGER::SSL'] unless opts.key?(:ssl)
+      opts['Path'] = datastore['CMDSTAGER::URIPATH'] unless datastore['CMDSTAGER::URIPATH'].blank?
       opts[:payload_uri] = start_service(opts)
     end