Module: Msf::Exploit::Remote::HTTP::RailsActiveStorageVips::MessageVerifier

Included in:
Msf::Exploit::Remote::HTTP::RailsActiveStorageVips
Defined in:
lib/msf/core/exploit/remote/http/rails_active_storage_vips/message_verifier.rb

Overview

Helpers for deriving and validating Active Storage verifier keys and forging signed variations.

Constant Summary collapse

KEY_GENERATOR_DIGESTS =
%w[sha256 sha1 sha384 sha512].freeze
VERIFIER_DIGESTS =
{
  40 => 'sha1',
  64 => 'sha256',
  96 => 'sha384',
  128 => 'sha512'
}.freeze