Make SRVHOST the callback address
This commit is contained in:
@@ -15,8 +15,6 @@ Affecting Atlassian Confluence before version 6.6.12, from version 6.7.0 before
|
||||
|
||||
# Verification Steps
|
||||
|
||||
List the steps needed to make sure this thing works
|
||||
|
||||
- [ ] Setting up a working installation of Atlassian Confluence before 6.6.13, 6.12.3, 6.12.3 or 6.14.2.
|
||||
- [ ] Start `msfconsole`
|
||||
- [ ] `use exploit/multi/http/confluence_widget_connector`
|
||||
@@ -30,7 +28,7 @@ List the steps needed to make sure this thing works
|
||||
|
||||
# Options
|
||||
- **TARGETURI**: Path to Atlassian Confluence installation ("/" is the default)
|
||||
- **TRIGGERURL**: Url to external video service to trigger vulnerability ("https://www.youtube.com/watch?v=dQw4w9WgXcQ" is the default)
|
||||
- **TRIGGERURL**: Url to external video service to trigger vulnerability ("https://www.youtube.com/watch?v=kxopViU98Xo" is the default)
|
||||
|
||||
# Scenario
|
||||
## Tested on Confluence 6.8.2 with Windows target
|
||||
@@ -160,4 +158,4 @@ meterpreter > quit
|
||||
|
||||
[*] target.com - Meterpreter session 1 closed. Reason: User exit
|
||||
msf5 exploit(multi/http/confluence_widget_connector) >
|
||||
```
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user