Stopped storing data type in result table. This will remove the code execution vuln with the renderers engine
git-svn-id: https://beef.googlecode.com/svn/trunk@970 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
This commit is contained in:
@@ -44,7 +44,7 @@ module Handlers
|
||||
command_results = get_param(@data, 'results')
|
||||
raise WEBrick::HTTPStatus::BadRequest, "command results empty" if command_results.empty?
|
||||
# save the command module results to the datastore and create a log entry
|
||||
command_results = {'type' => command_results.class, 'data' => command_results}
|
||||
command_results = {'data' => command_results}
|
||||
BeEF::Core::Models::Command.save_result(beefhook, command_id, command_friendly_name, command_results)
|
||||
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user