Update modules/exploits/multi/http/wingftp_null_byte_rce.rb

Chocapikk · msutovsky-r7 · web-flow · commit d625ab5fbc0c · 2025-07-03T13:54:01.000+02:00
Co-authored-by: msutovsky-r7 &lt;martin_sutovsky@rapid7.com&gt;
diff --git a/modules/exploits/multi/http/wingftp_null_byte_rce.rb b/modules/exploits/multi/http/wingftp_null_byte_rce.rb
@@ -89,7 +89,7 @@ def check
     )
     return CheckCode::Unknown('No response') unless res
 
-    uid = res.get_cookies.to_s[/UID=[^;]+/]
+    uid = res.get_cookies_parsed.fetch('UID', nil)
     return CheckCode::Appears("UID cookie received: #{uid}") if uid
 
     CheckCode::Safe('UID cookie not found; not vulnerable')

Original file line number	Diff line number	Diff line change
`@@ -89,7 +89,7 @@ def check`
`89`	`89`	`)`
`90`	`90`	`return CheckCode::Unknown('No response') unless res`
`91`	`91`
`92`		`- uid = res.get_cookies.to_s[/UID=[^;]+/]`
	`92`	`+ uid = res.get_cookies_parsed.fetch('UID', nil)`
`93`	`93`	`return CheckCode::Appears("UID cookie received: #{uid}") if uid`
`94`	`94`
`95`	`95`	`CheckCode::Safe('UID cookie not found; not vulnerable')`