fix: reverts misuse of in zip_slip exploit

rapid7 · Sep 1, 2020 · 62d3d9b · 62d3d9b
1 parent 7882441
commit 62d3d9b
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/modules/exploits/multi/fileformat/zip_slip.rb b/modules/exploits/multi/fileformat/zip_slip.rb
@@ -49,7 +49,7 @@ def initialize(info={})
     ))
 
     register_options([
-      OptString.new('FNAME', [true, 'The name of the archive file (without extension)', 'msf']),
+      OptString.new('FILENAME', [true, 'The name of the archive file', 'msf.tar']),
       OptEnum.new('FTYPE', [true, 'The archive type', 'tar', ['tar', 'zip'] ]),
       OptString.new('TARGETPAYLOADPATH', [true, 'The targeted path for payload', '../payload.bin'])
     ])
@@ -105,7 +105,6 @@ def exploit
     end
 
     archive = make_archive(target_payload_path, datastore['FTYPE'])
-    datastore['FILENAME'] = datastore['FNAME'] + '.' + datastore['FTYPE']
     file_create(archive)
     print_status('When extracted, the payload is expected to extract to:')
     print_status(target_payload_path)