-
-
Notifications
You must be signed in to change notification settings - Fork 111
Open
Description
Hello,
While trying to use legba against an owa instance, I had the following error:
/workspace # legba -R /opt/tools/legba-cookbook/http/ms-exchange/owa.yml --username /workspace/mails.txt --password /usr/share/seclists/Passwords/Common-
Credentials/Pwdb_top-100000.txt "host=<domain>" -O legba_owa.out.txt
legba v1.2.0
[INFO ] recipe: /opt/tools/legba-cookbook/http/ms-exchange/owa.yml (Microsoft Exchange bruteforce via OWA endpoint.)
[INFO ] host=<domain>
[INFO ] port=443
[INFO ] schema=https
[INFO ] recipe.path=/opt/tools/legba-cookbook/http/ms-exchange
[INFO ] target: https://<domain>:443/owa/auth.owa
[INFO ] validating http success condition: && == status 302 != set_cookie ""
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
[INFO ] username -> wordlist /workspace/mails.txt
[INFO ] password -> wordlist /usr/share/seclists/Passwords/Common-Credentials/Pwdb_top-100000.txt
[INFO ] tasks=2 mem=22.5 MiB targets=1 attempts=7500000 done=0 (0.00%) timeout=1000ms speed=0 reqs/s
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
Script seems to run, but the error keeps showing. Note that the cookbook is not up to date here (https://github.com/evilsocket/legba-cookbook/blob/main/http/ms-exchange/owa.yml), but that's another thing
Not being familiar with rust, not sure to understand the error and propose a fix
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels