dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

some fixes based on Christruncer's feedback 

fixed some stuff i borked, back to you chris
This commit is contained in:
David Maloney 2014-09-08 15:27:01 -05:00
parent cd3cdc5384
commit 2ac15f2088
No known key found for this signature in database
GPG Key ID: DEDBA9DC3A913DB2
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/metasploit/framework/login_scanner/ipboard.rb
View File

@ -40,7 +40,13 @@ module Metasploit
if nonce_response.body =~ /name='auth_key'\s+value='.*?((?:[a-z0-9]*))'/i
server_nonce = $1
auth_uri = "#{uri}/index.php?app=core&module=global&section=login&do=process"
if uri.end_with? '/'
base_uri = uri.gsub(/\/$/, '')
else
base_uri = uri
end
auth_uri = "#{base_uri}/index.php?app=core&module=global&section=login&do=process"
request = http_client.request_cgi(
'uri' => auth_uri,
@ -54,7 +60,7 @@ module Metasploit
response = http_client.send_recv(request)
if response && response.code == 200 && response.get_cookies.include?('ipsconnect') && response.get_cookies.include?('coppa')
if response && response.get_cookies.include?('ipsconnect') && response.get_cookies.include?('coppa')
result_opts.merge!(status: Metasploit::Model::Login::Status::SUCCESSFUL, proof: response)
else
result_opts.merge!(status: Metasploit::Model::Login::Status::INCORRECT, proof: response)

2
modules/auxiliary/scanner/http/ipboard_login.rb
View File

@ -66,7 +66,7 @@ class Metasploit3 < Msf::Auxiliary
invalidate_login(credential_data)
:abort
when Metasploit::Model::Login::Status::INCORRECT
print_brute :level => :verror, :ip => ip, :msg => "Failed: '#{result.credential}' #{result.proof}"
print_brute :level => :verror, :ip => ip, :msg => "Failed: '#{result.credential}'"
invalidate_login(credential_data)
end
end