forked from SecGen/SecGen
-
Notifications
You must be signed in to change notification settings - Fork 328
Open
Description
gitlist040 is exploitable in principle, however the MSF module exploits/linux/http/gitlist_exec only works if the gitlist is located in www_root/gitlist/. in our setup the gitlist is in www_root/. As a result the regular expression in the script cannot find any repository and exits with the error message 'Failed to retrieve the remote repository'.
Maybe we should deploy the gitlist in www_root/gitlist/ and configure the apache to use /gitlist/index.php as DirectoryIndex. The second solution is more natural if we do not want to modify the msf.
Metadata
Metadata
Assignees
Labels
No labels