Rails session injection challenge
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
README.md
rails_csrf_token_bypass.rb

README.md

How to:

First add the mechanize in Gemfile of the metasploit:

group :development, :test do
  # Other gems.........
  # Mechanize for exploit rails_csrf_token_bypass 
  gem 'mechanize'
end

execute in the root path Matasploit:

$ bundle install

Copy the module for metasploit:

$ sudo cp ./rails_csrf_token_bypass.rb path/to/metasploit/modules/auxiliary/admin/http/ 

And use: #Metasploit #Metasploit #Metasploit #Metasploit #Metasploit #Metasploit