dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updates to better OWA fix

This commit is contained in:
Tod Beardsley 2014-11-04 14:31:56 -06:00
parent 714fd0bec6
commit 5fb268bbdf
No known key found for this signature in database
GPG Key ID: 1EFFB682ADB9F193
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
modules/auxiliary/scanner/http/owa_login.rb
View File

@ -221,7 +221,7 @@ class Metasploit3 < Msf::Auxiliary
cookies = res.get_cookies
cookie_header = 'PBack=0'
%w(sessionid cadata).each do |necessary_cookie|
if cookies =~ /#{necessary_cookie}=([^;]+)/
if cookies =~ /#{necessary_cookie}=([^;]*)/
cookie_header << "; #{Regexp.last_match(1)}"
else
print_error("#{msg} Missing #{necessary_cookie} cookie. This is not OWA 2010, aborting")
@ -247,11 +247,6 @@ class Metasploit3 < Msf::Auxiliary
return :abort
end
if res.redirect?
vprint_error("#{msg} FAILED LOGIN. '#{user}' : '#{pass}' (response was a #{res.code} redirect)")
return :skip_pass
end
if res.body =~ login_check
print_good("#{msg} SUCCESSFUL LOGIN. '#{user}' : '#{pass}'")
@ -266,6 +261,12 @@ class Metasploit3 < Msf::Auxiliary
report_auth_info(report_hash)
return :next_user
if res.redirect?
vprint_error("#{msg} FAILED LOGIN. '#{user}' : '#{pass}' (response was a #{res.code} redirect)")
return :skip_pass
end
else
vprint_error("#{msg} FAILED LOGIN. '#{user}' : '#{pass}' (response body did not match)")
return :skip_pass