The double-quote character is a badchar

Author: jvoisin

modules/exploits/unix/webapp/vbulletin_unserialize.rb

@@ -23,6 +23,10 @@ def initialize(info = {})
           'cutz',  # original exploit
           'Julien (jvoisin) Voisin',  # metasploit module
       ],
+      'Payload'        =>
+        {
+          'BadChars'    => "\x22",
+        },
       'References'     =>
         [
           ['CVE', '2015-7808'],