Skip to content

Commit fb5ded1

Browse files
committed
[FixRM rapid7#8314] - Use OptPath instead of OptString
These modules need to use OptPath to make sure the path is validated.
1 parent 0af2f1c commit fb5ded1

File tree

3 files changed

+4
-3
lines changed

3 files changed

+4
-3
lines changed

modules/auxiliary/admin/oracle/oracle_login.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ def initialize(info = {})
3131

3232
register_options(
3333
[
34-
OptString.new('CSVFILE', [ false, 'The file that contains a list of default accounts.', File.join(Msf::Config.install_root, 'data', 'wordlists', 'oracle_default_passwords.csv')]),
34+
Optpath.new('CSVFILE', [ false, 'The file that contains a list of default accounts.', File.join(Msf::Config.install_root, 'data', 'wordlists', 'oracle_default_passwords.csv')]),
3535
], self.class)
3636

3737
deregister_options('DBUSER','DBPASS')

modules/auxiliary/scanner/http/mod_negotiation_brute.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ def initialize(info = {})
3131
register_options(
3232
[
3333
OptString.new('PATH', [ true, "The path to detect mod_negotiation", '/']),
34-
OptString.new('FILEPATH',[true, "path to file with file names",
34+
OptPath.new('FILEPATH',[true, "path to file with file names",
3535
File.join(Msf::Config.install_root, "data", "wmap", "wmap_files.txt")])
3636
], self.class)
3737
end

modules/auxiliary/scanner/pop3/pop3_login.rb

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,13 +32,14 @@ def initialize
3232
register_options(
3333
[
3434
Opt::RPORT(110),
35+
# Should be OptPath
3536
OptString.new('USER_FILE',
3637
[
3738
false,
3839
'The file that contains a list of probable users accounts.',
3940
File.join(Msf::Config.install_root, 'data', 'wordlists', 'unix_users.txt')
4041
]),
41-
OptString.new('PASS_FILE',
42+
OptPath.new('PASS_FILE',
4243
[
4344
false,
4445
'The file that contains a list of probable passwords.',

0 commit comments

Comments
 (0)