From 140c8587e75fc135f98bbe7e79df8104e2ff8332 Mon Sep 17 00:00:00 2001 From: jvazquez-r7 Date: Thu, 1 May 2014 15:24:10 -0500 Subject: [PATCH] Fix metadata --- .../http/struts_code_exec_classloader.rb | 43 +++++++++---------- 1 file changed, 21 insertions(+), 22 deletions(-) diff --git a/modules/exploits/multi/http/struts_code_exec_classloader.rb b/modules/exploits/multi/http/struts_code_exec_classloader.rb index ad279627f4..df8dc3fdd7 100644 --- a/modules/exploits/multi/http/struts_code_exec_classloader.rb +++ b/modules/exploits/multi/http/struts_code_exec_classloader.rb @@ -32,41 +32,40 @@ class Metasploit3 < Msf::Exploit::Remote 'License' => MSF_LICENSE, 'References' => [ - [ 'CVE', '2014-0094'], - [ 'CVE', '2014-0112'], - [ 'URL', 'http://www.pwntester.com/blog/2014/04/24/struts2-0day-in-the-wild/'], - [ 'URL', 'http://struts.apache.org/release/2.3.x/docs/s2-020.html'] + ['CVE', '2014-0094'], + ['CVE', '2014-0112'], + ['URL', 'http://www.pwntester.com/blog/2014/04/24/struts2-0day-in-the-wild/'], + ['URL', 'http://struts.apache.org/release/2.3.x/docs/s2-020.html'] ], - 'Platform' => %w{ linux win }, - 'Privileged' => true, + 'Platform' => %w{ linux win }, 'Targets' => [ - ['Windows Universal', + ['Java', + { + 'Arch' => ARCH_JAVA, + 'Platform' => %w{ linux win } + }, + ], + ['Linux', + { + 'Arch' => ARCH_X86, + 'Platform' => 'linux' + } + ], + ['Windows', { - 'Arch' => ARCH_X86, + 'Arch' => ARCH_X86, 'Platform' => 'win' } - ], - ['Linux Universal', - { - 'Arch' => ARCH_X86, - 'Platform' => 'linux' - } - ], - ['Java Universal', - { - 'Arch' => ARCH_JAVA, - 'Platform' => ['win','linux'] - }, ] ], 'DisclosureDate' => 'Mar 06 2014', - 'DefaultTarget' => 2)) + 'DefaultTarget' => 0)) register_options( [ Opt::RPORT(8080), - OptString.new('TARGETURI', [ true, 'The path to a struts application action', "/hello_world/hello.action"]) + OptString.new('TARGETURI', [ true, 'The path to a struts application action', "/struts2-blank/example/HelloWorld.action"]) ], self.class) end