11 Commits

Author	SHA1	Message	Date
Grant Willcox	a0087842fb	Fix an earlier merge mistake, was meant to replace URI.escape with Rex::Text.uri_encode() but instead replaced it with CGI.escape. Fix it to be Rex::Text.uri_encode()	2020-11-04 14:39:16 -06:00
JRodriguez556	a1164dbe9e	Update php_fpm_rce.rb ... URI.encode/URI.escape is obsolete. Replaced with CGI.escape.	2020-10-05 11:57:17 -04:00
Christophe De La Fuente	e5f2b48274	Ensure client is disconnected when leaving the check method	2020-03-06 17:38:37 +01:00
Christophe De La Fuente	8d6468e725	Fix comments	2020-03-05 13:28:28 +01:00
Christophe De La Fuente	1b54d27301	Update code #2 ... - Make error message more descriptive - Use `Rex.sleep` in stead of `sleep` - Update `detect_qsl` logic - Change the first `Exploit::CheckCode` to `Unknown` for the `Check` method	2020-02-17 19:04:32 +01:00
Christophe De La Fuente	828d974db5	Update code and documentation ... - Add `OperationMaxRetries` option documentation - Add default value to `TARGETURI` and update the documentation - Remove `PosOffset` advanced option and hardcode the value - Update `Description` - Move URI encoding logic to `send_crafted_request` - Refactor `send_crafted_request` to handle the HTTP parameter and final & (%26)	2020-02-17 18:25:10 +01:00
Christophe De La Fuente	0e9c637364	Randomize filename and HTTP parameter	2020-02-17 15:58:21 +01:00
Christophe De La Fuente	226f4b0a53	Line wrap to 80 columns and small fix ... - Line wrap documentation to 80 columns - Line wrap `Description` field to 80 columns - Remove unnecessary unless statement	2020-02-17 13:06:32 +01:00
Christophe De La Fuente	351c0d1651	Small improvements	2020-02-14 17:16:27 -06:00
Christophe De La Fuente	dab4291016	Update header name	2020-01-23 18:50:10 +01:00
Christophe De La Fuente	daaa8cf857	Add PHP-FPM Underflow RCE module	2020-01-20 20:07:34 +01:00