File tree Expand file tree Collapse file tree 1 file changed +6
-2
lines changed
modules/exploits/multi/http Expand file tree Collapse file tree 1 file changed +6
-2
lines changed Original file line number Diff line number Diff line change @@ -21,12 +21,16 @@ def initialize(info = {})
21
21
processor of the Ruby on Rails application framework. This vulnerability allows
22
22
an attacker to instantiate a remote object, which in turn can be used to execute
23
23
any ruby code remotely in the context of the application.
24
+
25
+ This module has been tested across multiple versions of RoR 3.x, but does not yet
26
+ work against 2.x versions of RoR.
27
+
24
28
} ,
25
29
'Author' =>
26
30
[
27
31
'charlisome' , # PoC
28
32
'espes' , # PoC and Metasploit module
29
- 'toothfairy ' , # Anonymous contributor
33
+ 'lian ' , # Identified the RouteSet::NamedRouteCollection vector
30
34
'hdm' # Module merge/conversion/payload work
31
35
] ,
32
36
'License' => MSF_LICENSE ,
@@ -72,7 +76,7 @@ def detached_payload_stub(code)
72
76
end
73
77
else
74
78
if ! Process.fork()
75
- eval(code)
79
+ eval(code) rescue nil
76
80
end
77
81
end
78
82
^ . strip . split ( /\n / ) . map { |line | line . strip } . join ( "\n " )
You can’t perform that action at this time.
0 commit comments