pulling out the get params

Author: h00die

modules/exploits/linux/http/op5_config_exec.rb

@@ -91,9 +91,13 @@ def execute_command(cmd, opts)
 
       # login
       res = send_request_cgi(
-        'uri'       => normalize_uri(target_uri.path, 'monitor/index.php/auth/login?uri=tac%2Findex'),
+        'uri'       => normalize_uri(target_uri.path, 'monitor/index.php/auth/login'),
         'method'    => 'POST',
-        'vars_post'  =>
+        'vars_get'  =>
+        {
+          'uri' => 'tac/index'
+        },
+        'vars_post' =>
         {
           'csrf_token' => '',
           'username'   => datastore['USERNAME'],