github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-10-29 18:07:27 +01:00
Code Releases Activity

More Fixes for WD MyBook Live Scanner

Browse Source 
Fixes include removing deregistered options
from credentials collection object and adding proof
 when there is no response
This commit is contained in:
nstarke 2014-10-22 03:06:21 +00:00
parent 82b74d5f3c
commit ee3dd3a2ac
2 changed files with 2 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/metasploit/framework/login_scanner/mybook_live.rb
View File

@ -45,7 +45,7 @@ module Metasploit
if res && res.code == 302 && res.headers['location'] && res.headers['location'].include?('UI')
result_opts.merge!(status: Metasploit::Model::Login::Status::SUCCESSFUL, proof: res.headers)
elsif res.nil?
result_opts.merge!(status: Metasploit::Model::Login::Status::INCORRECT)
result_opts.merge!(status: Metasploit::Model::Login::Status::INCORRECT, proof: 'No response')
else
result_opts.merge!(status: Metasploit::Model::Login::Status::INCORRECT, proof: res.headers)
end

5
modules/auxiliary/scanner/http/mybook_live_login.rb
View File

@ -37,10 +37,7 @@ class Metasploit3 < Msf::Auxiliary
blank_passwords: datastore['BLANK_PASSWORDS'],
pass_file: datastore['PASS_FILE'],
password: datastore['PASSWORD'],
user_file: datastore['USER_FILE'],
userpass_file: datastore['USERPASS_FILE'],
username: 'admin',
user_as_pass: datastore['USER_AS_PASS']
username: 'admin'
)
scanner = Metasploit::Framework::LoginScanner::MyBookLive.new(