Skip to content

Commit fffa8cf

Browse files
author
HD Moore
committed
Lands rapid7#4426 by cleaning up the module description
2 parents 9ede2c2 + c15bad4 commit fffa8cf

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/auxiliary/admin/http/netflow_file_download.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,8 @@ def initialize(info={})
1616
'Description' => %q{
1717
This module exploits an arbitrary file download vulnerability in CSVServlet
1818
on ManageEngine NetFlow Analyzer. This module has been tested on both Windows
19-
and Linux with versions 8.6 to 10.2. Windows paths have to be escaped with 2
20-
backslashes on the command line.
19+
and Linux with versions 8.6 to 10.2. Note that when typing Windows paths, you
20+
must escape the backslash with a backslash.
2121
},
2222
'Author' =>
2323
[
@@ -38,7 +38,7 @@ def initialize(info={})
3838
Opt::RPORT(8080),
3939
OptString.new('TARGETURI',
4040
[ true, "The base path to NetFlow Analyzer", '/netflow' ]),
41-
OptString.new('FILEPATH', [true, 'Path of the file to download (escape Windows paths with 2 back slashes)', '/etc/passwd']),
41+
OptString.new('FILEPATH', [true, 'Path of the file to download', 'C:\\windows\\system.ini']),
4242
], self.class)
4343
end
4444

0 commit comments

Comments
 (0)