Skip to content

Commit 5f12c8e

Browse files
Incorrect warning message
The filename is not always test so the warning message and the note in the description are incorrect.
1 parent 25996a1 commit 5f12c8e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/auxiliary/scanner/mysql/mysql_writable_dirs.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def initialize
1717
'Description' => %Q{
1818
Enumerate writeable directories using the MySQL SELECT INTO DUMPFILE feature, for more
1919
information see the URL in the references. ***Note: For every writable directory found,
20-
a file called test with the text test will be written to the directory.***
20+
a file with the specified FILE_NAME containing the text test will be written to the directory.***
2121
},
2222
'Author' => [ 'AverageSecurityGuy <stephen[at]averagesecurityguy.info>' ],
2323
'References' => [
@@ -43,7 +43,7 @@ def mysql_query_no_handle(sql)
4343
end
4444

4545
def run_host(ip)
46-
print_warning("For every writable directory found, a file called test with the text test will be written to the directory.")
46+
print_warning("For every writable directory found, a file called #{datastore['FILE_NAME']} with the text test will be written to the directory.")
4747
vprint_status("Login...")
4848

4949
unless mysql_login_datastore

0 commit comments

Comments
 (0)