Skip to content

Error using http-success with set_cookie #93

@thibon

Description

@thibon

Hello,

While trying to use legba against an owa instance, I had the following error:

/workspace # legba -R /opt/tools/legba-cookbook/http/ms-exchange/owa.yml --username /workspace/mails.txt --password /usr/share/seclists/Passwords/Common-
Credentials/Pwdb_top-100000.txt "host=<domain>" -O legba_owa.out.txt                                                                                           
legba v1.2.0                                                                                                                                                                                              
                                                                                                                                                                                                          
[INFO ] recipe: /opt/tools/legba-cookbook/http/ms-exchange/owa.yml (Microsoft Exchange bruteforce via OWA endpoint.)                                                                                      
[INFO ]   host=<domain>                                                                                                                                                                    
[INFO ]   port=443                                                                                                                                                                                        
[INFO ]   schema=https                                                                                                                                                                                    
[INFO ]   recipe.path=/opt/tools/legba-cookbook/http/ms-exchange                                                                                                                                          
[INFO ] target: https://<domain>:443/owa/auth.owa                                                                                                                                          
[INFO ] validating http success condition:  && == status 302 != set_cookie ""                                                                                                                             
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".                                                                                       
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".                                                                                       
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".                                                                                       
[INFO ] username -> wordlist /workspace/mails.txt                                                                                                                                                    
[INFO ] password -> wordlist /usr/share/seclists/Passwords/Common-Credentials/Pwdb_top-100000.txt                                                                                                         
                                                                                                                                                                                                          
[INFO ] tasks=2 mem=22.5 MiB targets=1 attempts=7500000 done=0 (0.00%) timeout=1000ms speed=0 reqs/s                                                                                                      
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".                                                                                       
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".
[ERROR] error evaluating success expression: Variable identifier is not bound to anything by context: "set_cookie".

Script seems to run, but the error keeps showing. Note that the cookbook is not up to date here (https://github.com/evilsocket/legba-cookbook/blob/main/http/ms-exchange/owa.yml), but that's another thing

Not being familiar with rust, not sure to understand the error and propose a fix

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions