exploit-CVE-2023-23752
exploit-CVE-2023-23752 copied to clipboard
Remove trailing forward slash
Many users may copy the URL from their web browser which results in the URL containing a trailing forward slash. If this is included in the URL when making the request to the API endpoints the correct data wont be returned.
Before
$ ruby exploit.rb http://example.com/
exploit.rb:71:in `parse_users': undefined method `each' for nil (NoMethodError)
data.each do |user|
^^^^^
from exploit.rb:85:in `display_users'
from exploit.rb:135:in `<main>'
After
$ ruby exploit.rb http://example.com/
Users
[649] bob (bob) - [email protected] - Super Users
<SNIP>