Warn the user about SSLCompression

2014-01-21 16:41:45 -06:00 · 2014-01-21 16:41:45 -06:00 · b8219e3e91
parent e10f9cc518
commit b8219e3e91
1 changed files with 4 additions and 0 deletions
--- a/lib/msf/core/exploit/http/server.rb
+++ b/lib/msf/core/exploit/http/server.rb
@ -198,6 +198,10 @@ module Exploit::Remote::HttpServer

    proto = (datastore["SSL"] ? "https" : "http")

+    if proto == "https" and datastore['SSLCompression']
+      print_status("Intentionally using insecure SSL compression. Your operating system might not respect this!")
+    end
+
    print_status("Using URL: #{proto}://#{opts['ServerHost']}:#{opts['ServerPort']}#{uopts['Path']}")

    if (opts['ServerHost'] == '0.0.0.0')