File tree Expand file tree Collapse file tree 1 file changed +10
-5
lines changed
modules/exploits/multi/ftp Expand file tree Collapse file tree 1 file changed +10
-5
lines changed Original file line number Diff line number Diff line change 5
5
6
6
require 'msf/core'
7
7
8
- class Metasploit3 < Msf ::Exploit ::Remote
9
- Rank = GoodRanking
8
+ class Metasploit4 < Msf ::Exploit ::Remote
9
+ Rank = ExcellentRanking
10
10
11
11
include Msf ::Exploit ::Remote ::Ftp
12
12
include Msf ::Exploit ::CmdStager
@@ -15,9 +15,10 @@ def initialize(info = {})
15
15
super ( update_info ( info ,
16
16
'Name' => 'Pure-FTPd External Authentication Bash Environment Variable Code Injection' ,
17
17
'Description' => %q(
18
- This module exploits a code injection in specially crafted environment
19
- variables in Bash, specifically targeting Pure-FTPd when configured to
20
- use an external program for authentication.
18
+ This module exploits the code injection flaw known as shellshock which
19
+ leverages specially crafted environment variables in Bash. This exploit
20
+ specifically targets Pure-FTPd when configured to use an external
21
+ program for authentication.
21
22
) ,
22
23
'Author' =>
23
24
[
@@ -54,6 +55,10 @@ def initialize(info = {})
54
55
}
55
56
]
56
57
] ,
58
+ 'DefaultOptions' =>
59
+ {
60
+ 'PrependFork' => true
61
+ } ,
57
62
'DefaultTarget' => 0 ,
58
63
'DisclosureDate' => 'Sep 24 2014' ) )
59
64
register_options (
You can’t perform that action at this time.
0 commit comments