Seems like unix/webapps would be a better location than multi/http for this exploit