Metasploit mailing list archives
Metasploit v3.0-alpha-r3 lib/rex/proto/http/client.rb vhost bug with some webservers
From: hfortier at recon.cx (Hugo Fortier)
Date: Tue, 18 Apr 2006 14:26:36 -0400
In lib/rex/proto/http/client.rb at line 117 req['Host'] = (self.request_config['vhost'] || self.hostname) + ':' + self.port.to_s The port number are getting automatically added to the "Host:" header, so if you say that the vhost = localhost and the webserver use the default port it create the host header as "Host: localhost:80". I believe this should be optional in the framework and if you want the port number it should be included in the hostname (as vhost="localhost:80"). Some webservers (lighttpd for example) will not recognize the the virtual host correctly if it's followed by the port number. Hugo
Current thread:
- Metasploit v3.0-alpha-r3 lib/rex/proto/http/client.rb vhost bug with some webservers Hugo Fortier (Apr 18)