Skip to content

Commit c9c34be

Browse files
committed
Fix rapid7#3975 - Register TARGETURI, not URI
The module should register TARGETURI and call #target_uri for URI validation.
1 parent a535d23 commit c9c34be

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/auxiliary/scanner/http/tomcat_mgr_login.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ def initialize
5858
register_options(
5959
[
6060
Opt::RPORT(8080),
61-
OptString.new('URI', [true, "URI for Manager login. Default is /manager/html", "/manager/html"]),
61+
OptString.new('TARGETURI', [true, "URI for Manager login. Default is /manager/html", "/manager/html"]),
6262
OptPath.new('USERPASS_FILE', [ false, "File containing users and passwords separated by space, one pair per line",
6363
File.join(Msf::Config.data_directory, "wordlists", "tomcat_mgr_default_userpass.txt") ]),
6464
OptPath.new('USER_FILE', [ false, "File containing users, one per line",
@@ -72,7 +72,7 @@ def initialize
7272

7373
def run_host(ip)
7474
begin
75-
uri = normalize_uri(datastore['URI'])
75+
uri = normalize_uri(target_uri.path)
7676
res = send_request_cgi({
7777
'uri' => uri,
7878
'method' => 'GET',

0 commit comments

Comments
 (0)