Fix erroneous cred reporting in SonicWALL exploit

[wvu]

A session ID will be returned in the parsed JSON if the login succeeded.

Bad user:

{"noldapnouser"=>1, "loginfailed"=>1}

Bad password:

{"loginfailed"=>1}

Good user/password:

{"userid"=>"1", "sessionid"=>"4WJ9cNg1TkBrwjzX"}

The check can be improved if required. Right now, it's simply doing a key match for sessionid, much like the checks above it.

• wget http://software.sonicwall.com/ScrutinizerSW/184-003184-00_Rev_A_sonicwall-oem-Scrutinizer-windows-installer.exe
• Install it
• Verify creds
• python -m SimpleHTTPServer 8080
• Verify no creds

[bcook-r7]

Thanks @wvu-r7, this looks good to me.

[wvu]

Thanks!!

[bcook-r7]

Release Notes

This fix resolves incorrect reports of successful administrator credential logins when the sonicwall_scrutinizer_methoddetail_sql module is run against a non-exploitable HTTP service.