review comments

h00die · May 8, 2023 · 12911d1 · 12911d1
1 parent 0ace550
commit 12911d1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/modules/exploits/example_webapp.rb b/modules/exploits/example_webapp.rb
@@ -170,7 +170,8 @@ def exploit
     # example of sending a MIME message
     data = Rex::MIME::Message.new
     # https://github.com/rapid7/rex-mime/blob/master/lib/rex/mime/message.rb
-    data.add_part("upload-attachment", nil, nil, "form-data; name=\"action\"")
+    file_contents = payload.encoded
+    data.add_part(file_contents, 'application/octet-stream', 'binary', "form-data; name=\"file\"; filename=\"uploaded.bin\"")
     data.add_part('example', nil, nil, "form-data; name=\"_wpnonce\"")
 
     post_data = data.to_s