Skip to content

Commit dd1e8ff

Browse files
author
Brent Cook
committed
fix a few typos in KB
1 parent cfddc73 commit dd1e8ff

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

documentation/modules/exploit/linux/http/pineapple_bypass_cmdinject.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
## Background
22

33
The 'pineapple_bypass_cmdinject' exploit attacks a weak check for
4-
pre-authorized files (CSS files) which allows the attacker to bypass logging in
5-
at all and then relies on the anti-CSRF vulnerability (CVE-2015-4624) to obtain
6-
command injection.
4+
pre-authorized CSS files, which allows the attacker to bypass
5+
authentication. The exploit then relies on the anti-CSRF vulnerability
6+
(CVE-2015-4624) to obtain command injection.
77

88
This exploit uses a utility function in
99
/components/system/configuration/functions.php to execute commands once

0 commit comments

Comments
 (0)