Skip to content

Commit 62ab17b

Browse files
committed
Update documentation and Docker Compose for SPIP, remove Rex.sleep() in Metasploit module due to stable payload.
1 parent fdbf7dd commit 62ab17b

File tree

2 files changed

+22
-11
lines changed

2 files changed

+22
-11
lines changed

documentation/modules/exploit/multi/http/spip_porte_plume_previsu_rce.md

Lines changed: 22 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -28,31 +28,44 @@ services:
2828
- MYSQL_DATABASE=spip
2929
- MYSQL_USER=spip
3030
- MYSQL_PASSWORD=spip
31-
networks:
32-
- spip-network
31+
volumes:
32+
- mysql-data:/var/lib/mysql
3333

3434
app:
3535
image: ipeos/spip:4.2.12
3636
restart: always
3737
depends_on:
3838
- db
3939
environment:
40-
- SPIP_AUTO_INSTALL=1
40+
- SPIP_SITE_ADDRESS=http://localhost:8880
4141
- SPIP_DB_SERVER=db
4242
- SPIP_DB_LOGIN=spip
4343
- SPIP_DB_PASS=spip
4444
- SPIP_DB_NAME=spip
45-
- SPIP_SITE_ADDRESS=http://localhost:8880
45+
- SPIP_AUTO_INSTALL=1
4646
ports:
4747
- 8880:80
48-
networks:
49-
- spip-network
48+
volumes:
49+
- spip-data:/var/www/html
5050

51-
networks:
52-
spip-network:
53-
driver: bridge
51+
volumes:
52+
spip-data:
53+
mysql-data:
5454
```
5555
56+
This Docker Compose file configures a SPIP environment with a MariaDB backend, enabling automatic installation.
57+
Here are the correct setup details:
58+
59+
- **SPIP Access URL:** `http://localhost:8880`
60+
- **Database Configuration:** Utilizes MariaDB, as specified by the database service setup.
61+
- **Automatic Installation:** Enabled via `SPIP_AUTO_INSTALL=1`.
62+
63+
After launching the Docker container, SPIP will be accessible at `http://localhost:8880`.
64+
The automatic installation will simplify the initial setup, allowing you to start using SPIP without manual configuration.
65+
66+
If you decide to disable automatic installation by setting `SPIP_AUTO_INSTALL` to `0`, you will need to manually configure SPIP.
67+
To do this, after starting the container, navigate to `http://localhost:8880/ecrire` to access the SPIP web installation panel.
68+
5669
### Non-Docker Setup
5770

5871
If you prefer not to use Docker, you can manually set up SPIP with the following commands:

modules/exploits/multi/http/spip_porte_plume_previsu_rce.rb

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -113,8 +113,6 @@ def exploit
113113
b64_payload = framework.encoders.create('php/base64').encode(phped_payload)
114114
payload = "[<img#{Rex::Text.rand_text_numeric(8)}>->URL`<?php #{b64_payload} ?>`]"
115115

116-
Rex.sleep(0.5)
117-
118116
print_status('Sending exploit payload to the target...')
119117
send_request_cgi({
120118
'method' => 'POST',

0 commit comments

Comments
 (0)