diff --git a/modules/exploits/multi/http/avideo_notify_ffmpeg_unauth_rce.rb b/modules/exploits/multi/http/avideo_notify_ffmpeg_unauth_rce.rb index 31cdb8b5fa..5f5efb8aef 100644 --- a/modules/exploits/multi/http/avideo_notify_ffmpeg_unauth_rce.rb +++ b/modules/exploits/multi/http/avideo_notify_ffmpeg_unauth_rce.rb @@ -325,6 +325,7 @@ class MetasploitModule < Msf::Exploit::Remote def get_video_info vprint_status('Leaking video hashId...') + # Note: videosAndroid.json.php can take a long time to load, this is expected endpoints = [ normalize_uri(target_uri.path, 'objects', 'videosAndroid.json.php'), normalize_uri(target_uri.path, 'plugin', 'API', 'get.json.php') + '?APIName=video'