rapid7/metasploit-framework — pull request #1855 by ringt (2013-05-21 18:18:55+00:00)
Title: Updates for auxiliary/gather/coldfusion_pwd_props

The original version traversal will only work in Unix... (../../ vs ..\..\)

The changes borrow from the auxilary/scanner/http/cold_fusion_version module with slight tweaks since only CF9/CF10 are vulnerable to perform fingerprinting to determine whether windows/unix and to get paths right. I didn't have a CF10 page to test / get a fingerprint from, but the traversal will still get set right b/c it checks on CF9 and defaults to CF10 if not. I also set RPORT to 80 b/c at least on all the ones I found to test, they were not running on the dedicated port (8500) but rather under the main webserver.

Confirmed working on CF9 pages.