Skip to content

Commit

Permalink
Added collaborator payloads to RCE intruder generator.
Browse files Browse the repository at this point in the history
Signed-off-by: Steven van der Baan <steven@vdbaan.net>
  • Loading branch information
vdbaan committed Aug 19, 2018
1 parent 1706e9a commit e7535ae
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 1 deletion.
8 changes: 7 additions & 1 deletion src/nb/freddy/modules/FreddyModuleBase.java
Original file line number Diff line number Diff line change
Expand Up @@ -1164,6 +1164,12 @@ public ArrayList<ExceptionPayload> getErrorBasedPayloads() {
}

public ArrayList<Payload> getRCEPayloads(IIntruderAttack attack) {
return new ArrayList<>(_timeBasedPayloads);
String host = attack.getHttpService().getHost();
ArrayList<Payload> result = new ArrayList<>(_timeBasedPayloads);
for (CollaboratorPayload payload : _collaboratorPayloads) {
Payload p = new Payload(generateCollaboratorBytePayload(payload.getPayloadName(), host));
result.add(p);
}
return result;
}
}
4 changes: 4 additions & 0 deletions src/nb/freddy/modules/Payload.java
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,10 @@ public class Payload {
//Payload data
byte[] _payloadBytes;

public Payload(byte[] bytes) {
_payloadBytes = bytes;
}

/*******************
* Get the payload bybts.
*
Expand Down

0 comments on commit e7535ae

Please sign in to comment.