Update manageengine_deviceexpert_traversal.rb

[jnqpblc]

Changed print_status on line 80 to print_good and added a check for /scheduleresult.de with a return is not a 200 status code.

[wchen-r7]

I hope I still have this vuln app. I'll try to verify it.

[bcoles]

I hope I still have this vuln app. I'll try to verify it.

You should be able to retrieve the software from the web archive as per links here:

• https://github.com/rapid7/metasploit-framework/tree/master/documentation/modules/auxiliary/scanner/http/manageengine_deviceexpert_user_creds.md

Edit: @sinn3r This version should be vuln: http://web.archive.org/web/20111204040930/http://www.manageengine.com/products/device-expert/download.html

[wchen-r7]

What would I do without @bcoles? Thank you so much!

[wchen-r7]

Release Notes

This adds a check to make sure the web resource exists before performing the directory traversal attack. Also, it will check if the file to loot is found or not.