From f7bfab5a267b596be8f077d56605300bb3ec726d Mon Sep 17 00:00:00 2001 From: Tod Beardsley Date: Fri, 23 May 2014 15:32:04 -0500 Subject: [PATCH] HTTP traversal shouldnt upcase METHOD (@wchen-r7) If the user wants to use downcased or mixed case HTTP methods, heck, more power to them. If it doesn't work, it doesn't work. No other HTTP module makes this call. --- modules/auxiliary/scanner/http/http_traversal.rb | 3 --- 1 file changed, 3 deletions(-) diff --git a/modules/auxiliary/scanner/http/http_traversal.rb b/modules/auxiliary/scanner/http/http_traversal.rb index d489e7aab4..9f7a5047cb 100644 --- a/modules/auxiliary/scanner/http/http_traversal.rb +++ b/modules/auxiliary/scanner/http/http_traversal.rb @@ -336,9 +336,6 @@ class Metasploit3 < Msf::Auxiliary datastore['PATH'] = '/' + datastore['PATH'] end - # Some webservers (ie. Apache) might not like the HTTP method to be lower-case - datastore['METHOD'] = datastore['METHOD'].upcase - print_status("Running action: #{action.name}...") # And it's..... "SHOW TIME!!"