Thanks, I'll check it out


On Tue, Jan 28, 2014 at 4:05 AM, Meatballs1 <notifications@github.com>wrote:

> In modules/exploits/multi/http/tomcat_mgr_upload.rb:
>
> > +    if(csrf_token==nil)
> > +      query_str = ""
> > +    else
> > +      query_str = "?path=/"
> > +      query_str << app_base
> > +      query_str << "&org.apache.catalina.filters.CSRF_NONCE=" + csrf_token
> > +    end
> > +
> > +    # UPLOAD
> > +    #
> > +    path_tmp = normalize_uri(datastore['PATH'], "html/upload") + query_str
> > +    print_status("Uploading #{war.length} bytes as #{app_base}.war ...")
> > +
> > +    boundary_identifier=rand_text_numeric(28)
> > +
> > +    warmultipart = "-----------------------------"
>
> I think we have Rex::MIME::Message to do multipart messages.
>
> --
> Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/2923/files#r9220787>
> .
>