Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes password_spray not using additional_privates and default username's #19156

Merged

Conversation

cgranleese-r7
Copy link
Contributor

@cgranleese-r7 cgranleese-r7 commented May 2, 2024

This PR fixes some issue that were found while working on another ticket.

The password_spray datastore option was not considering additional_privates or default usernames.

I have fixed these issues and added tests.

Verification

Currently a lot of the login modules have the password_spray datastore is currently being deregistered. (This is the ticket I am working on to change this)

  • Start msfconsole
  • Can look at removing the deregistering the password_spray from smb_login and test that way
  • Verify the tests make sense and now pass
  • Ensure code changes are sane

@cgranleese-r7 cgranleese-r7 added the rn-fix release notes fix label May 2, 2024
@adfoster-r7 adfoster-r7 merged commit fd10f4d into rapid7:master May 2, 2024
34 checks passed
@adfoster-r7
Copy link
Contributor

adfoster-r7 commented May 2, 2024

Release Notes

Fixes a bug with the PASSWORD_SPRAY support for login scanners were the default username datastore option was not being tried

@adfoster-r7 adfoster-r7 changed the title Fixes password_spray not using additional_privates and default username's Fixes password_spray not using additional_privates and default username's May 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
rn-fix release notes fix
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants