sophron a64a785d79 [NSE] http-passwd should also send the payloads without appending NULL bytes. There are cases, (for example in PHP => 5.3.4) that include functions do not accept paths with NULL in them, hence all of the script's payloads would fail even if the app was vulnerable.

2014-05-02 12:49:40 +00:00

6.9 KiB

Raw Blame History

View Raw