File tree Expand file tree Collapse file tree 5 files changed +8
-8
lines changed Expand file tree Collapse file tree 5 files changed +8
-8
lines changed Original file line number Diff line number Diff line change @@ -63,7 +63,7 @@ def run
63
63
print_status ( "\t Attempting to delete directory: RMD #{ test } " )
64
64
sock . put ( "RMD #{ test } \r \n " )
65
65
res = sock . get ( -1 , 5 )
66
- if ( res =~ /250 RMD command successful./ )
66
+ if ( res =~ /250 RMD command successful\ . / )
67
67
print_status ( "\t Directory #{ test } reportedly deleted. Verifying with SIZE #{ test } " )
68
68
sock . put ( "SIZE #{ test } \r \n " )
69
69
res = sock . get ( -1 , 5 )
Original file line number Diff line number Diff line change @@ -54,7 +54,7 @@ def run
54
54
} )
55
55
56
56
return if res . nil?
57
- return if ( res . headers [ 'Server' ] . nil? or res . headers [ 'Server' ] !~ /DIR-645 Ver 1.0/ )
57
+ return if ( res . headers [ 'Server' ] . nil? or res . headers [ 'Server' ] !~ /DIR-645 Ver 1\ . 0/ )
58
58
return if ( res . code == 404 )
59
59
60
60
if res . body =~ /<password>(.*)<\/ password>/
Original file line number Diff line number Diff line change @@ -67,12 +67,12 @@ def run
67
67
case datastore [ 'RFILE' ]
68
68
when nil
69
69
# Nothing
70
- when /localconf.php$/i
70
+ when /localconf\ . php$/i
71
71
jumpurl = "#{ datastore [ 'RFILE' ] } %00/."
72
72
jumpurl_len = ( jumpurl . length ) -2 #Account for difference in length with null byte
73
73
jumpurl_enc = jumpurl . sub ( "%00" , "\00 " ) #Replace %00 with \00 to correct null byte format
74
74
print_status ( "Adding padding to end of #{ datastore [ 'RFILE' ] } to avoid TYPO3 security filters" )
75
- when /^. .(\/ |\\ )/i
75
+ when /^\. \ . (\/ |\\ )/i
76
76
print_error ( "Directory traversal detected... you might want to start that with a /.. or \\ .." )
77
77
else
78
78
jumpurl_len = ( datastore [ 'RFILE' ] . length )
Original file line number Diff line number Diff line change @@ -53,9 +53,9 @@ def run
53
53
case datastore [ 'RFILE' ]
54
54
when nil
55
55
# Nothing
56
- when /localconf.php$/i
56
+ when /localconf\ . php$/i
57
57
jumpurl = "#{ datastore [ 'RFILE' ] } %00/."
58
- when /^. .(\/ |\\ )/i
58
+ when /^\. \ . (\/ |\\ )/i
59
59
print_error ( "Directory traversal detected... you might want to start that with a /.. or \\ .." )
60
60
else
61
61
jumpurl = "#{ datastore [ 'RFILE' ] } "
Original file line number Diff line number Diff line change @@ -71,12 +71,12 @@ def run
71
71
case datastore [ 'RFILE' ]
72
72
when nil
73
73
# Nothing
74
- when /localconf.php$/i
74
+ when /localconf\ . php$/i
75
75
jumpurl = "#{ datastore [ 'RFILE' ] } %00/."
76
76
jumpurl_len = ( jumpurl . length ) -2 #Account for difference in length with null byte
77
77
jumpurl_enc = jumpurl . sub ( "%00" , "\00 " ) #Replace %00 with \00 to correct null byte format
78
78
print_status ( "Adding padding to end of #{ datastore [ 'RFILE' ] } to avoid TYPO3 security filters" )
79
- when /^. .(\/ |\\ )/i
79
+ when /^\. \ . (\/ |\\ )/i
80
80
print_error ( "Directory traversal detected... you might want to start that with a /.. or \\ .." )
81
81
else
82
82
jumpurl_len = ( datastore [ 'RFILE' ] . length )
You can’t perform that action at this time.
0 commit comments