adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
decd770a0b2bb7eafcce8a014bfa86f0bf891a55
metasploit-gs/lib/msf/core/exploit
T
History
wchen-r7 47d52a250e Fix #6806 and #6820 - Fix send_request_cgi! redirection 
This patch fixes two problems:

1. 6820 - If the HTTP server returns a relative path
   (example: /test), there is no host to extract, therefore the HOST
   header in the HTTP request ends up being empty. When the web
   server sees this, it might return an HTTP 400 Bad Request, and
   the redirection fails.

2. 6806 - If the HTTP server returns a relative path that begins
   with a dot, send_request_cgi! will literally send that in the
   GET request. Since that isn't a valid GET request path format,
   the redirection fails.

Fix #6806
Fix #6820
2016-04-25 14:30:46 -05:00
..
format
Tweak module->class
2015-07-28 04:13:35 -07:00
http
Fix #6806 and #6820 - Fix send_request_cgi! redirection
2016-04-25 14:30:46 -05:00
java/rmi
Fix #6362, avoid overriding def peer repeatedly
2015-12-23 11:44:55 -06:00
kerberos
Fix specs to pass again
2015-10-15 09:40:39 -05:00
local
Make the ret instruction for token stealing optional
2015-02-05 14:00:38 -05:00
remote
Fix #5197, Fixed yard doc errors
2016-04-21 13:06:00 -05:00
smb
Land #6644, datastore validation on assignment
2016-03-17 11:16:12 -05:00
afp.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
android.rb
Add support for native target in addjsif exploit.
2016-01-03 01:07:36 -06:00
arkeia.rb
FixRM #8396 change all lib use of regex to 8-bit pattern
2013-09-12 16:58:49 -05:00
browser_autopwn2.rb
Fix #5197, Fixed yard doc errors
2016-04-21 13:06:00 -05:00
browser_autopwn.rb
Retab lib
2013-08-30 16:28:33 -05:00
brute.rb
Retab lib
2013-08-30 16:28:33 -05:00
brutetargets.rb
Retab lib
2013-08-30 16:28:33 -05:00
capture.rb
File.exists? must die
2016-04-21 00:47:07 -04:00
cmdstager.rb
Land #5736, certutil cmdstager
2015-09-03 14:21:21 -05:00
db2.rb
Retab lib
2013-08-30 16:28:33 -05:00
dcerpc_epm.rb
Just use a straight RPORT, don't sneak 593.
2013-11-19 13:29:02 -06:00
dcerpc_lsa.rb
Retab lib
2013-08-30 16:28:33 -05:00
dcerpc_mgmt.rb
Retab lib
2013-08-30 16:28:33 -05:00
dcerpc.rb
Refactors
2014-05-21 20:15:32 +01:00
dect_coa.rb
Retab lib
2013-08-30 16:28:33 -05:00
dhcp.rb
Inconstancy - If datastore['VERBOSE'] vs vprint
2015-06-18 09:27:01 +01:00
dialup.rb
Retab lib
2013-08-30 16:28:33 -05:00
egghunter.rb
Retab lib
2013-08-30 16:28:33 -05:00
exe.rb
Avoid Msf::Module::Platform
2015-12-08 21:40:30 -06:00
file_dropper.rb
Change doc for boolean args
2015-06-26 12:01:53 -05:00
fileformat.rb
Retab lib
2013-08-30 16:28:33 -05:00
fmtstr.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
fortinet.rb
Recreate Msf::Exploit::Remote::Fortinet
2016-02-29 15:04:02 -06:00
ftp.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
ftpserver.rb
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
gdb.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
imap.rb
Retab lib
2013-08-30 16:28:33 -05:00
ip.rb
Retab lib
2013-08-30 16:28:33 -05:00
ipv6.rb
Remove extraneous calls to GC.start()
2015-02-22 21:51:33 -06:00
java.rb
File.exists? must die
2016-04-21 00:47:07 -04:00
jsobfu.rb
Fix bug in js_obfuscate
2016-02-02 11:25:39 -06:00
kernel_mode.rb
Retab lib
2013-08-30 16:28:33 -05:00
local.rb
rm print_warning
2015-11-20 19:38:33 -06:00
mixins.rb
Recreate Msf::Exploit::Remote::Fortinet
2016-02-29 15:04:02 -06:00
mssql_commands.rb
Retab lib
2013-08-30 16:28:33 -05:00
mssql_sqli.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
mssql.rb
Squashed more commits back into 1
2016-01-07 17:53:49 -06:00
mysql.rb
Fix #5244, Remove unnecessary check for mysql_drop_and_create_sys_exec
2015-05-11 14:17:51 -05:00
ndmp.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
ntlm.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
omelet.rb
Merge branch 'rapid7' into cleanup/remove-id-tags
2013-09-17 10:55:02 -05:00
oracle.rb
add vprint_status
2015-05-22 17:46:56 -05:00
pdf_parse.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
pdf.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
php_exe.rb
Retab lib
2013-08-30 16:28:33 -05:00
pop2.rb
Retab lib
2013-08-30 16:28:33 -05:00
postgres.rb
Remove an extra nil check
2016-04-08 21:18:24 -05:00
powershell.rb
Delete typo
2015-10-02 15:29:03 -05:00
realport.rb
FixRM #8396 change all lib use of regex to 8-bit pattern
2013-09-12 16:58:49 -05:00
riff.rb
Retab lib
2013-08-30 16:28:33 -05:00
ropdb.rb
Add rop_junk and rop_nop
2013-11-06 01:04:33 -06:00
seh.rb
Retab lib
2013-08-30 16:28:33 -05:00
sip.rb
Make SIP note, service and print output more similar
2014-08-26 17:47:31 -07:00
smtp_deliver.rb
Use vprint_status instead of reimplementing it
2016-01-28 12:51:20 -06:00
smtp.rb
Change to example.com as the default domain
2014-11-20 14:53:36 -06:00
snmp.rb
Retab lib
2013-08-30 16:28:33 -05:00
sunrpc.rb
Fix some more String defaults
2016-03-16 14:13:18 -05:00
tcp_server.rb
unify the SSLVersion fields between modules and mixins
2016-03-06 22:06:27 -06:00
tcp.rb
unify the SSLVersion fields between modules and mixins
2016-03-06 22:06:27 -06:00
telnet.rb
Retab lib
2013-08-30 16:28:33 -05:00
tftp.rb
Inconstancy - If datastore['VERBOSE'] vs vprint
2015-06-18 09:27:01 +01:00
tincd.rb
Fix grammer in comments
2015-04-13 13:21:41 +05:00
tns.rb
Retab lib
2013-08-30 16:28:33 -05:00
udp.rb
Sort methods
2016-02-02 10:02:32 -06:00
vim_soap.rb
Fix #6085, NoMethodError in vim_soap.rb
2015-10-30 11:02:02 -05:00
wbemexec.rb
Retab lib
2013-08-30 16:28:33 -05:00
wdbrpc_client.rb
Retab lib
2013-08-30 16:28:33 -05:00
wdbrpc.rb
Retab lib
2013-08-30 16:28:33 -05:00
web.rb
Merge for retab
2013-09-05 14:10:58 -05:00
winrm.rb
Retab lib
2013-08-30 16:28:33 -05:00