Skip to content
This repository was archived by the owner on Dec 6, 2023. It is now read-only.

Commit cb3c39b

Browse files
author
byt3bl33d3r
committed
Fixed logic bug with password file if brute forcing
1 parent 2cfb70d commit cb3c39b

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

cme/connection.py

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -176,6 +176,7 @@ def login(self):
176176
elif type(ntlm_hash) is file:
177177
for f_hash in ntlm_hash:
178178
if self.hash_login(usr.strip(), f_hash.strip()): return
179+
ntlm_hash.seek(0)
179180

180181
elif self.args.password:
181182
for password in self.args.password:
@@ -185,6 +186,7 @@ def login(self):
185186
elif type(password) is file:
186187
for f_pass in password:
187188
if self.plaintext_login(usr.strip(), f_pass.strip()): return
189+
password.seek(0)
188190

189191
elif type(user) is not file:
190192

@@ -196,6 +198,7 @@ def login(self):
196198
elif type(ntlm_hash) is file:
197199
for f_hash in ntlm_hash:
198200
if self.hash_login(user, f_hash.strip()): return
201+
ntlm_hash.seek(0)
199202

200203
elif self.args.password:
201204
for password in self.args.password:
@@ -205,6 +208,7 @@ def login(self):
205208
elif type(password) is file:
206209
for f_pass in password:
207210
if self.plaintext_login(user, f_pass.strip()): return
211+
password.seek(0)
208212

209213
def execute(self, payload, get_output=False, methods=None):
210214

0 commit comments

Comments
 (0)