Fixes an issue where zip paths were not being created correctly for J…

…ava payloads
cgranleese-r7 · Jun 5, 2024 · 798d79a · 798d79a
1 parent ddaa21d
commit 798d79a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/msf/core/payload/java.rb b/lib/msf/core/payload/java.rb
@@ -110,12 +110,12 @@ def generate_war(opts={})
     zip.add_file('WEB-INF/', '')
     zip.add_file('WEB-INF/web.xml', web_xml)
     zip.add_file("WEB-INF/classes/", "")
-    zip.add_file('metasploit/', '') # Create the metasploit dir
+    zip.add_file('WEB-INF/classes/metasploit/', '') # Create the metasploit dir
 
     paths.each do |path_parts|
       path = ['java', path_parts].flatten.join('/')
       contents = ::MetasploitPayloads.read(path)
-      zip.add_file(path_parts.join('/'), contents)
+      zip.add_file("WEB-INF/classes/" + path_parts.join('/'), contents)
     end
 
     zip.add_file("WEB-INF/classes/metasploit.dat", stager_config(opts))