Update simple_backdoors_exec.rb

updated the string 'echo me' to a random text
rapid7 · Sep 24, 2015 · 1923696 · 1923696
1 parent 9e6d394
commit 1923696
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/exploits/multi/http/simple_backdoors_exec.rb b/modules/exploits/multi/http/simple_backdoors_exec.rb
@@ -57,7 +57,7 @@ def initialize(info={})
   end
 
   def check
-    test = 'echo me'
+    test = Rex::Text.rand_text_alpha(8)
     res = send_request_cgi({
       'method'  => 'GET',
       'uri'             => normalize_uri(target_uri.path),
@@ -66,7 +66,7 @@ def check
           'cmd' => test
         }
     })
-    if res && res.body =~ /echo me/
+    if res && res.body =~ /#{test}/
       return Exploit::CheckCode::Vulnerable
     end
     return Exploit::CheckCode::Safe