17 Commits

Author	SHA1	Message	Date
Kert Ojasoo	1dc61d02eb	Update php_fpm_rce.rb	2022-06-03 11:23:53 +03:00
Jeffrey Martin	d802a9ee0b	remove rubocop exemption no longer required	2021-11-23 07:58:07 -06:00
Jeffrey Martin	21a6a18d92	trade URI.encode & URI.escape for Ruby 3 ... Ruby 3 removed the `URI.escape` methods however access to the a parse for the same RFC is stil available at `URI::DEFAULT_PARSER.escape`. Per the Ruby forum [comment](https://bugs.ruby-lang.org/issues/17309#note-1) this should equal.	2021-11-22 14:11:03 -06:00
adfoster-r7	4a9a15e638	Run Rubocop layout rules on modules	2021-08-27 17:19:43 +01:00
Alan Foster	b06c5c12aa	Rubocop recently landed modules continued	2021-02-25 14:13:40 +00:00
Alan Foster	5b3fde7735	Rubocop recently landed modules	2021-02-16 15:08:08 +00:00
Grant Willcox	a0087842fb	Fix an earlier merge mistake, was meant to replace URI.escape with Rex::Text.uri_encode() but instead replaced it with CGI.escape. Fix it to be Rex::Text.uri_encode()	2020-11-04 14:39:16 -06:00
JRodriguez556	a1164dbe9e	Update php_fpm_rce.rb ... URI.encode/URI.escape is obsolete. Replaced with CGI.escape.	2020-10-05 11:57:17 -04:00
Christophe De La Fuente	e5f2b48274	Ensure client is disconnected when leaving the check method	2020-03-06 17:38:37 +01:00
Christophe De La Fuente	8d6468e725	Fix comments	2020-03-05 13:28:28 +01:00
Christophe De La Fuente	1b54d27301	Update code #2 ... - Make error message more descriptive - Use `Rex.sleep` in stead of `sleep` - Update `detect_qsl` logic - Change the first `Exploit::CheckCode` to `Unknown` for the `Check` method	2020-02-17 19:04:32 +01:00
Christophe De La Fuente	828d974db5	Update code and documentation ... - Add `OperationMaxRetries` option documentation - Add default value to `TARGETURI` and update the documentation - Remove `PosOffset` advanced option and hardcode the value - Update `Description` - Move URI encoding logic to `send_crafted_request` - Refactor `send_crafted_request` to handle the HTTP parameter and final & (%26)	2020-02-17 18:25:10 +01:00
Christophe De La Fuente	0e9c637364	Randomize filename and HTTP parameter	2020-02-17 15:58:21 +01:00
Christophe De La Fuente	226f4b0a53	Line wrap to 80 columns and small fix ... - Line wrap documentation to 80 columns - Line wrap `Description` field to 80 columns - Remove unnecessary unless statement	2020-02-17 13:06:32 +01:00
Christophe De La Fuente	351c0d1651	Small improvements	2020-02-14 17:16:27 -06:00
Christophe De La Fuente	dab4291016	Update header name	2020-01-23 18:50:10 +01:00
Christophe De La Fuente	daaa8cf857	Add PHP-FPM Underflow RCE module	2020-01-20 20:07:34 +01:00