Skip to content

Commit abddaf5

Browse files
committed
Limit terminal output
Use TICKETSTODUMP instead of n characters
1 parent e80c66d commit abddaf5

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

modules/auxiliary/gather/solarwinds_webhelpdesk_backdoor.rb

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -83,11 +83,12 @@ def run
8383
)
8484

8585
jbody = JSON.parse(body)
86-
print_good('Successfully authenticated and tickets retrieved. The first 1000 characters are displayed below:')
87-
print_good(JSON.pretty_generate(jbody).slice(0, 1000))
86+
print_good("Successfully authenticated and tickets retrieved. Displaying the first #{datastore['TICKETSTODUMP']} tickets retrieved:")
87+
tickets_to_display = jbody.first(datastore['TICKETSTODUMP'])
88+
print_good(JSON.pretty_generate(tickets_to_display))
8889

8990
file = store_loot('solarwinds_webhelpdesk.json', 'text/json', datastore['USER'], jbody)
90-
print_good("Saved tickets to #{file}")
91+
print_good("Saved #{jbody.length} tickets to #{file}")
9192

9293
report_vuln(
9394
host: rhost,

0 commit comments

Comments
 (0)