Module: Msf::Exploit::Remote::HTTP::RailsActiveStorageVips::ActiveStorage

Included in:
Msf::Exploit::Remote::HTTP::RailsActiveStorageVips
Defined in:
lib/msf/core/exploit/remote/http/rails_active_storage_vips/active_storage.rb

Overview

Active Storage page, route, direct-upload, and representation workflow helpers.

Instance Method Summary collapse

Instance Method Details

#report_vuln(opts = {}) ⇒ Object?

Associates a vulnerability report with the Rails Active Storage service.

Parameters:

  • opts (Hash) (defaults to: {}) —

    options passed to the framework vulnerability reporter

Returns:

  • (Object, nil) —

    the framework reporting result



16
17
18
19
20
21
22
 
# File 'lib/msf/core/exploit/remote/http/rails_active_storage_vips/active_storage.rb', line 16

def report_vuln(opts = {})
  service = opts[:service] || @active_storage_service || report_active_storage_service
  opts = opts.merge(service: service) if service
  result = super(opts)
  @vulnerability_reported = true if result
  result
end

#service_details ⇒ Hash

Returns session-inference details for the Rails application service.

Returns:

  • (Hash) —

    the inherited service details with the Rails service name



27
28
29
 
# File 'lib/msf/core/exploit/remote/http/rails_active_storage_vips/active_storage.rb', line 27

def service_details
  super.merge(service_name: 'rails')
end