Module: Msf::Exploit::Remote::HTTP::RailsActiveStorageVips::Request

Included in:

Msf::Exploit::Remote::HTTP::RailsActiveStorageVips

Defined in:

lib/msf/core/exploit/remote/http/rails_active_storage_vips/request.rb

Overview

HTTP request isolation and validation for target-controlled Active Storage URLs.

Constant Summary

MAX_UPLOAD_HEADERS =

64

MAX_UPLOAD_HEADER_BYTES =

65_536

MAX_UPLOAD_HEADER_VALUE_BYTES =

8192

UNSAFE_UPLOAD_HEADERS =

%w[
  authorization connection content-length cookie expect host keep-alive proxy-authenticate
  proxy-authorization proxy-connection te trailer transfer-encoding upgrade
].freeze