diff --git a/modules/exploits/linux/http/op5_config_exec.rb b/modules/exploits/linux/http/op5_config_exec.rb index d683268f01..a81e4a090d 100644 --- a/modules/exploits/linux/http/op5_config_exec.rb +++ b/modules/exploits/linux/http/op5_config_exec.rb @@ -91,9 +91,13 @@ class MetasploitModule < Msf::Exploit::Remote # login res = send_request_cgi( - 'uri' => normalize_uri(target_uri.path, 'monitor/index.php/auth/login?uri=tac%2Findex'), + 'uri' => normalize_uri(target_uri.path, 'monitor/index.php/auth/login'), 'method' => 'POST', - 'vars_post' => + 'vars_get' => + { + 'uri' => 'tac/index' + }, + 'vars_post' => { 'csrf_token' => '', 'username' => datastore['USERNAME'],