Skip to content

Commit 2a308f7

Browse files
authored
Update rails_dynamic_render_code_exec.md
1 parent d8f98cc commit 2a308f7

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

documentation/modules/exploit/linux/http/rails_dynamic_render_code_exec.md

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,10 @@
11
## Intro
22

3-
Nagios XI is the enterprise version of Nagios, the monitoring software we love
4-
and hate.
3+
Rails is a web application development framework written in the Ruby language. It is designed to make programming web applications easier by making assumptions about what every developer needs to get started. It allows you to write less code while accomplishing more than many other languages and frameworks.
54

6-
Rails is, well, rails.
5+
http://rubyonrails.org/
76

8-
> This module exploits the rendering vulnerability via a temporary file upload to pop a shell.
7+
> This module exploits the rendering vulnerability via a temporary file upload to pop a shell (CVE-2016-0752).
98
109
## Setup
1110

@@ -77,4 +76,4 @@ Channel 1 created.
7776
$ id
7877
uid=1000(student) gid=1000(student) groups=1000(student),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),108(netdev),110(lpadmin),113(scanner),117(bluetooth)
7978
$
80-
```
79+
```

0 commit comments

Comments
 (0)