diff --git a/modules/exploits/multi/http/struts_include_params.rb b/modules/exploits/multi/http/struts_include_params.rb index a58791c5586f..1eb830d4931c 100644 --- a/modules/exploits/multi/http/struts_include_params.rb +++ b/modules/exploits/multi/http/struts_include_params.rb @@ -135,7 +135,7 @@ def exploit print_status("Preparing payload...") #Now with all the arch specific stuff set, perform the upload. #109 = length of command string plus the max length of append. - sub_from_chunk = 109 + @payload_exe.length + target_uri.path.length + datastore['PARAMETER'].length + sub_from_chunk = 109 + @payload_exe.length + normalize_uri(target_uri.path).length + datastore['PARAMETER'].length chunk_length = 2048 - sub_from_chunk chunk_length = ((chunk_length/4).floor)*3 while pl_exe.length > chunk_length