Skip to content

Commit 09db1f4

Browse files
committed
Adding documentation
1 parent f06a2d4 commit 09db1f4

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
## Description
2+
3+
The module performs bruteforce attack against Ivanti Connect Secure.
4+
It allows to attack both regular user and admin as well - you can select which type of account to attack with `ADMIN` parameter.
5+
6+
## Vulnerable Application
7+
8+
- [Ivanti](https://www.ivanti.com/products/connect-secure-vpn)
9+
10+
## Verification Steps
11+
12+
1. `use auxiliary/scanner/ivanti/login_scanner`
13+
2. `set RHOSTS [IP]`
14+
3. either `set USERNAME [username]` or `set USERPASS_FILE [usernames file]`
15+
4. either `set PASSWORD [password]` or `set PASS_FILE [passwords file]`
16+
5. `set ADMIN [attack admin?]`
17+
6. `run`
18+
19+

0 commit comments

Comments
 (0)