Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use CheckCode.message - Fix #12499 #12500

Merged
merged 1 commit into from Oct 29, 2019
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
2 changes: 1 addition & 1 deletion modules/auxiliary/scanner/http/elasticsearch_traversal.rb
Expand Up @@ -89,7 +89,7 @@ def run_host(ip)
vprint_status("Checking if it's a vulnerable ElasticSearch")

check_code = check_host(ip)
print_status("#{check_code.second}")
print_status("#{check_code.message}")
if check_host(ip) != Exploit::CheckCode::Appears
return
end
Expand Down
6 changes: 3 additions & 3 deletions modules/post/multi/recon/local_exploit_suggester.rb
Expand Up @@ -127,13 +127,13 @@ def run

# See def is_check_interesting?
unless is_check_interesting? checkcode
vprint_status "#{m.fullname}: #{checkcode.second}"
vprint_status "#{m.fullname}: #{checkcode.message}"
next
end

# Prints the full name and the checkcode message for the exploit
print_good "#{m.fullname}: #{checkcode.second}"
results << [m.fullname, checkcode.second]
print_good "#{m.fullname}: #{checkcode.message}"
results << [m.fullname, checkcode.message]

# If the datastore option is true, a detailed description will show
next unless datastore['SHOWDESCRIPTION']
Expand Down