From de8e392b7bbfc7cbb625d204a892741c5fbba4ec Mon Sep 17 00:00:00 2001 From: Spencer McIntyre Date: Thu, 12 Oct 2023 09:12:26 -0400 Subject: [PATCH] Only randomize the URI once --- lib/msf/core/exploit/remote/java/http/class_loader.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/msf/core/exploit/remote/java/http/class_loader.rb b/lib/msf/core/exploit/remote/java/http/class_loader.rb index b5c92a793e..0af49e19d1 100644 --- a/lib/msf/core/exploit/remote/java/http/class_loader.rb +++ b/lib/msf/core/exploit/remote/java/http/class_loader.rb @@ -27,10 +27,11 @@ module ClassLoader end def resource_uri + return @resource_uri if @resource_uri # the resource URI must end in / for the class loading to work path = super path += '/' unless path.end_with?('/') - path + @resource_uri = path end def on_request_uri(cli, request)