Skip to content

Commit 5ea968f

Browse files
committed
Update description to prefer the exploit module
1 parent 162e420 commit 5ea968f

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

modules/auxiliary/scanner/http/apache_mod_cgi_bash_env.rb

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,10 @@ def initialize(info = {})
2222
PROTIP: Use exploit/multi/handler with a PAYLOAD appropriate to your
2323
CMD, set ExitOnSession false, run -j, and then run this module to create
2424
sessions on vulnerable hosts.
25+
26+
Note that this is not the recommended method for obtaining shells.
27+
If you require sessions, please use the apache_mod_cgi_bash_env_exec
28+
exploit module instead.
2529
},
2630
'Author' => [
2731
'Stephane Chazelas', # Vulnerability discovery

0 commit comments

Comments
 (0)