Skip to content

Commit 04711c4

Browse files
committed
Add suggestions
1 parent 644b15e commit 04711c4

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

modules/auxiliary/scanner/http/vicidial_sql_enum_users_pass.rb

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def initialize(info = {})
1717
to dump admin credentials (usernames and passwords) via SQL injection.
1818
},
1919
'Author' => [
20-
'Valentin Lobstein', # Metasploit Module
20+
'Valentin Lobstein', # Metasploit Module
2121
'Jaggar Henry of KoreLogic, Inc.' # Vulnerability Discovery
2222
],
2323
'License' => MSF_LICENSE,
@@ -26,6 +26,10 @@ def initialize(info = {})
2626
['CVE', '2024-8503']
2727
],
2828
'DisclosureDate' => '2024-09-10',
29+
'DefaultOptions' => {
30+
'SqliDelay' => 1,
31+
'VERBOSE' => true
32+
},
2933
'Notes' => {
3034
'Stability' => [CRASH_SAFE],
3135
'SideEffects' => [IOC_IN_LOGS],
@@ -36,10 +40,7 @@ def initialize(info = {})
3640

3741
register_options(
3842
[
39-
Opt::RHOST(),
40-
Opt::RPORT(80),
4143
OptString.new('TARGETURI', [true, 'Base path of the VICIdial instance', '/']),
42-
OptInt.new('SqliDelay', [true, 'Delay in seconds for SQL Injection sleep', 1]),
4344
OptInt.new('COUNT', [true, 'Number of records to dump', 1])
4445
]
4546
)
@@ -66,7 +67,7 @@ def run
6667
private_type: :password,
6768
private_data: user[1],
6869
service_name: 'VICIdial',
69-
address: datastore['RHOSTS'],
70+
address: datastore['RHOST'],
7071
port: datastore['RPORT'],
7172
protocol: 'tcp',
7273
status: Metasploit::Model::Login::Status::UNTRIED

0 commit comments

Comments
 (0)